CTT-Sovereign-Vortex

CTT-Sovereign-Vortex CTT-Terrminus-Vortex CVE-2026-2406 🕰️ CTT-Sovereign-Vortex: Terrminus Refraction CVE-2026-2406 "The system is only as secure as the time it occupies." Lead Architect: Americo Simoes @amexsimoes Methodology: Convergent Time Theory CTT v2.0 Target: Terrminus Authentication...

Cerberus

Cerberus A powerful vulnerability scanner. Subdomain enumeration uses aioDNS with asyncio for asynchronous fast scanning. It covers the target's full asset scope for batch vulnerability scanning, middleware information collection, automatic proxy IP collection, and automatically uses proxy IPs to...

fireprox

FireProx Overview Benefits Disclaimers Maintainer Credit Basic Usage Installation Screenshots Contributing Overview Being able to hide or continually rotate the source IP address when making web calls can be difficult or expensive. A number of tools have existed for some time but they were either...

aes256_passwd_store

aes256passwdstore This script securely encrypts or decrypts passwords on disk within a custom database file. It also features functionality to retrieve passwords from a previously generated database file. This script takes a master password from stdin/from memory, hashes the password using the...

ipchanger

IP CHANGER 🌐🔄 A powerful Tor-based IP rotation CLI tool that automatically changes your public IP address at a specified interval and displays it in a clean terminal table. Built with ❤️ by @CappricioSec ⚠️ For educational and privacy testing purposes only. Do not misuse this tool for illegal...

IPSpinner

🔁 IPSpinner IPSpinner is a local proxy which can be used to redirect all incoming requests through different chosen providers. The purpose is to create a pass-through proxy that rotates the source IP address of each request. As an example, running a bruteforce operation through IPSpinner will hel...

virustotalx

virustotalx for endpoints virustotalx for IPs V2 Installation git clone https://github.com/orwagodfather/virustotalx.git cd virustotalx create a 3 accounts https://www.virustotal.com/gui/join-us and copy the 3 api keys === nano orwa.sh & nano orwaV2.sh paste 3 api keys here .... if $apikeyindex -...

CredMaster

CredMaster Launch a password spray / brute force attach via Amazon AWS passthrough proxies, shifting the requesting IP address for every authentication attempt. This dynamically creates FireProx APIs for more evasive password sprays. Shoutout to @ustayready for his CredKing and FireProx tools,...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — Refactored POC for CVE-2026-109618 / CVE-2026-1096...

CVE-2026-7791

CVE-2026-7791 PoC: Privileged by Default Research proof-of-concept for local privilege escalation in Amazon WorkSpaces TOCTOU + SYSTEM-level arbitrary file write in the Skylight Workspace Config Service. Full technical details: Cymulate blog | ---|--- CVE| CVE-2026-7791 Vendor| AWS Security...

xtor

xtor Python library for managing Tor instances programmatically. Features Launch new Tor processes or connect to existing ones Pre-configured httpx clients sync + async with SOCKS5 proxy Identity rotation with optional wait-for-new-IP Stream isolation for traffic separation Circuit and stream...

pymultitor

PyMultiTor Proxy Tor Multi Hilo en Python, ¿Alguna vez quisiste estar en dos lugares diferentes al mismo tiempo? Cuando me hice esta pregunta, comencé a desarrollar esta solución en mi mente. Al realizar pruebas de penetración a menudo surgen problemas causados por dispositivos de seguridad que...

fireprox

FireProx Resumen Beneficios Descargos Mantenedor Crédito Uso básico Instalación Capturas de pantalla Contribuir Resumen Poder ocultar o rotar continuamente la dirección IP de origen al realizar llamadas web puede ser difícil o costoso. Durante algún tiempo han existido varias herramientas, pero...

adfsbrute

adfsbrute Un script para probar credenciales contra Active Directory Federation Services ADFS, calculando la URL de ADFS de una organización y permitiendo ataques de password spraying o fuerza bruta. La idea principal es realizar ataques de password spraying con una demora aleatoria y alta entre...

magento2-encryption-key-manager-cli

CLI per la Gestione della Chiave di Crittografia di Magento 2 Un'utilità per la rotazione e la gestione della chiave di crittografia di Magento 2. Le vittime di CVE-2024-34102 aka Cosmic Sting possono usarla come assistenza post-rimedio. Progettato per Uso in sviluppo Automazione del deployment...

CVE-2026-107785 Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated

Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires. The agent does not validate this size; instead it attempts to use the wg s...

CVE-2026-107785

Crux Agent versions 1.9.0 before 2.0.3 are vulnerable to a silent failure during SKA preshared key rotation . When a peering session negotiates SHA-512 , the agent generates a 64-byte key instead of the 32 bytes required by WireGuard. Because the agent fails to validate this size, it attempts to ...

awsidr (>=1.0.0, <=1.0.9), rds-proxy-password-rotation (>=0.5.8, <=0.6.556) potentially affected by CVE-2026-104002 via aws-lambda-powertools (>=3.7.0, <=3.34.0)

aws-lambda-powertools PYPI version =3.7.0, =1.0.0, =0.5.8, =0.6.556 Source cves: CVE-2026-104002 Source advisory: MEND:CVE-2026-104002...

CVE-2026-98148

A flaw was found in the Linux kernel's Generic USB Display GUD driver. This vulnerability can lead to a Denial of Service DoS if an attacker connects a malicious USB display device to the system. The driver fails to verify that the default display rotation capability is present in the device's...

CVE-2026-96897

The Optima Express IDX WordPress plugin before 8.7.6 does not perform any authorisation check on one of its AJAX actions that is available to logged-out users, allowing unauthenticated attackers to force the creation of a fixed author-role account and to repeatedly rotate its application password...