9205 matches found
webpen
WebPen — Pentest Pocket Reference A static, in-depth web ap...
Exploit for CVE-2026-17583
cve-id Donate Support the maintenance of this project wit...
toolbox v0.2.2
-Significant%20AI%2C%20fully%20reviewed-1f77b4 MCP-based application security testing tools for your coding agent. Not a scanner — a collaborative workbench. Agents struggle with UI and stateful APIs; you're good at both. Sectool lets you explore an application through its proxy while an agent...
Vulnerability-Wiki-PoC
💠 Vulnerability-Wiki-PoC 🚀 Focused on practical applicati...
Cisco Small Business SPA500 Series IP Phones Local Code Execution (CVE-2019-15959)
A vulnerability in Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the device. The vulnerability is due to the presence of development testing and verification scripts that remained on the device. An attacker could exploit...
Invisible Ink Threats: Adversarial Goals behind Legitimate Tasks in Computer-Use Agents
Computer-use agents CUAs, which empower large language models to autonomously operate operating systems and the web, are increasingly vulnerable to indirect prompt injection attacks. A widely adopted defense is the human-in-the-loop paradigm, in which the agent pauses for explicit user confirmati...
Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware
AVERTISSEMENT ÉTHIQUE - LECTURE OBLIGATOIRE Ce docume...
ImCurvin v1.3.0
ImCurvin' ImCurvin is an open-source web security auditing and penetration testing tool designed to automate environment misconfiguration detection, track exposed configuration blueprints, and probe backend vulnerabilities. Detailed information regarding ImCurvin can be found at...
augustus v0.14.13
Augustus - LLM vulnerability scanner for prompt injection, jailbreak, and adversarial attack testing Augustus - LLM Vulnerability Scanner Test large language models against 210+ adversarial attacks covering prompt injection, jailbreaks, encoding exploits, and data extraction. Augustus is a Go-bas...
offensive-security-labs
Offensive Security Labs A collection of hands-on offensive cy...
macnoise v0.2.1
MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...
onyx-agent
Onyx Agent v68 Multi-LLM agent framework for security testing...
XeroSQL
XeroSQL is a lightweight recon tool for detecting SQL...
Nightingale v1.1.46
Nightingale: Docker for Pentesters This project is supported by: | ---|--- Nightingale is a ready-to-use, multi-architecture Docker toolkit for pentesting and security research. It gives you a reproducible environment with curated tools for web, network, mobile, API, OSINT, and forensics workflow...
akto vmini-runtime-1.72.7
Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...
kuri v0.5.1
Kuri 🌰 Install root@kitploit: curl -fsSL https://kuri.trilok.ai/download | sh macOS arm64/x8664 and Linux x8664/arm64. Single binary, no runtime deps. Direct downloads: macOS arm64 · macOS x8664 · Linux x8664 · Linux arm64 Browser automation & web crawling for AI agents. Written in Zig. Zero...
mwr-capstone-pentest-report
No d...
akto vdata-ingestion-1.5.0
Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...