Cacti < 1.2.25 Insecure Deserialization

Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. id: CVE-2023-30534 info: name: Cacti 1.2.25 Insecure Deserialization author: k0pak4 severity: medium description: | Cacti is an open source...

tweets_analyzer

Analizador Simple de Perfiles de Twitter El objetivo de este sencillo script en Python es analizar un perfil de Twitter a través de sus tweets detectando: Actividad promedio de tweets, por hora y por día de la semana Zona horaria e idioma configurados para la interfaz de Twitter Fuentes utilizada...

mimosa

Mimosa Description Systems rebooting, database dumping, used to be called SecureCoding, now given to juniors, and finally completely rewritten. This is an opensource core; it excludes administrative controls. Features Lots of challenges References to modern pop culture Getting Started Method 1:Ja...

OpenFPC

OpenFPC Full Packet Capture: Open Source and on your own commodity hardware. OpenFPC is a set of scripts that combine to provide a lightweight full-packet network traffic recorder & buffering tool. Its design goal is to allow non-expert users to deploy a distributed network traffic recorder on CO...

GoGhost

GoGhost GoGhost es una herramienta de código abierto de alto rendimiento, ligera y portátil para escaneo masivo de SMBGhost. Instalación Puedes descargar el Binario de Windows o el Binario de Linux. Alternativamente, GoGhost utiliza bibliotecas nativas de Golang, por lo que la línea anterior es...

EDIDFuzzer

EDID fuzzer A tool for fuzzing Enhanced Display Identification Data Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com https://www.github.com/nccgroup/EDIDFuzzer Released under AGPL see LICENSE for more information...

CVE-2021-42574

Trojan Source:Invisible Vulnerabilities - Code generator — In simple terms, the vulnerability is that the code looks different from what it will be when compiled : The attack consists of using embedded control characters in comments and strings to reorder source code characters in a way that...

Python-Honeypot

OWASP Honeypot OWASP Honeypot is an open-source software in Python language which designed for creating honeypot and honeynet in an easy and secure way! This project is compatible with Python 3.x and tested on Mac OS X, and Linux. We appreciate any contribution, ideas, feedback. feel free to...

svn-extractor

Svn-Extractor Many a times web application pen-testers are encountered with the presence of .svn folders. For those not aware .svn folder is used by SVN version control system to perform its operations. For a blackbox pentest this folder contains huge amount of information. Some of the key areas...

gh0st3.6_src

Uploaded by flAmingw0rm Great RAT to learn from...

Carnivore

Publicado como código abierto por NCC Group Plc - https://www.nccgroup.com/ Desarrollado por Chris Nevin, [email protected] https://www.github.com/nccgroup/carnivore Publicado bajo la licencia AGPL https://www.github.com/nccgroup/carnivore/license Carnivore - V.1.0.4 Herramienta de Evaluació...

njRAT

njRAT njRAT SRC Extract All responsibilities are at your own risk. Please use it only for research purposes...

Door404

Door404 Door404 es un proyecto de código abierto desarrollado porMrSqar & Rizer Este proyecto fue desarrollado por 2 razones Primero " Ayudar a los principiantes a aprender a programar . " Segundo " Ayudar a los administradores de servidores novatos a aprender nuevos trucos de protección . "...

CLEANSTART-2026-VU21760 source-map-js through 1

Security vulnerability affects the langfuse-worker package. source-map-js through 1...

CLEANSTART-2026-ZX49959 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...

OSINT

OSINT Colecciones de herramientas, marcadores y otras guías creadas para ayudar en la recopilación de OSINT Siéntete libre de añadir a tu propio kit de herramientas de investigación, sin embargo, NO puedes vender ni alojar esto sin obtener permiso previo. No acepto ninguna responsabilidad por lo...

cryptovenom

CryptoVenom CryptoVenom: La navaja suiza de la criptografía ¿Qué es CryptoVenom? CryptoVenom es una herramienta OpenSource que contiene una gran cantidad de criptosistemas y métodos de criptoanálisis en una sola, incluyendo algoritmos clásicos, algoritmos hash, algoritmos de codificación, puertas...

Antecursor

Antecursor The Antecursor Project is an open-source and open-hardware project created by infosec students with the goal of developing an autonomous and modular system for network based information gathering and exploitation. Audience Antecursor is intended to help BOTH blue team and red team and...

agent-scanning

Control your AI agents. Track costs. Stay compliant. open-souce What It Does One dashboard to manage your AI team. Feature| How It Helps ---|--- Connect your agents| Plug in OpenAI, Anthropic, or custom agents Set goals & budgets| Assign work, cap costs, define success Watch in real-time| See wha...

SCMKit

SCMKit Descripción S ource C ode M anagement Attack Toolkit - SCMKit es un conjunto de herramientas que se puede utilizar para atacar sistemas SCM. SCMKit permite al usuario especificar el sistema SCM y el módulo de ataque a utilizar, junto con la especificación de credenciales válidas nombre de...