React2Shell-Toolbox

React2Shell Toolbox Un conjunto de herramientas de pruebas de seguridad construido con Electron + Vue 3, enfocado en la detección y explotación de vulnerabilidades en React Server Actions. 中文文档 | Inglés Descripción general React2Shell Toolbox es una herramienta de pruebas de seguridad diseñada pa...

adversarial-robustness-toolbox

Adversarial Robustness Toolbox ART v1.20...

responsible-ai-toolbox

Responsible AI Toolbox La IA responsable es un enfoque para evaluar, desarrollar e implementar sistemas de IA de manera segura, confiable y ética, y tomar decisiones y acciones responsables. Responsible AI Toolbox es un conjunto de herramientas que ofrece una colección de interfaces de usuario y...

ratbag-toolbox

ratbag-toolbox Conocimientos y herramientas aleatorios de ingeniería inversa Instrucciones Consulta nuestra página wiki. Resumen Disectores...

dirtyZero

dirtyZero Una sencilla caja de herramientas de personalización que utiliza CVE-2025-24203. Compatible con iOS 16.0 - iOS 18.3.2. Última versión • Servidor de Discord • Nuestro sitio web Instalación Por favor, asegúrate de que tu dispositivo sea compatible antes de usarlo. Consulta la tabla a...

PloitKit

PloitKit La Caja de Herramientas del Hacker PloitKit es una herramienta GUI basada en Python diseñada como una ventanilla única para todos los demás softwares. Me enfrentaba a este tipo de problemas, cuando necesitaba cambiar a un sistema diferente, o perdía mi pen-drive. Tenía que ir a Google,...

PAVELOW

PAVELOW Exploit Toolbox. Programmed by Xecurity. Language: BASH Description: PAVELOW helps you with your exploiting and vulnerability searching adventures on KALI Linux by using a few different pre-installed tools among several others that PAVELOW will installed & setup for youthey all can be fou...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

jok3r

.. raw:: html .. image:: ./pictures/logo.png .. raw:: html Jok3r v3 beta .. image:: https://img.shields.io/badge/python-3.6-blue.svg :target: https://www.python.org/downloads/release/python-366/ :alt: Python 3.6 .. image:: https://readthedocs.org/projects/jok3r/badge/?version=latest :target:...

android_demystification_toolbox

Android Demystification Toolbox Propósito ADT es un conjunto de herramientas de ejecución simbólica basado en Miasm diseñado para ayudar a modelar el comportamiento de las aplicaciones, investigar y probar vulnerabilidades de seguridad, y facilitar la ingeniería inversa de código hostil...

CVE-2025-12539

CVE-2025-12539 TNC Toolbox: Web Performance = 1.4.2 - Exposición de Información Sensible No Autenticada que deriva en Escalada de Privilegios / Toma de Control de Cuenta de cPanel 🚨 TNC Toolbox: Web Performance = 1.4.2 - Exposición de Información Sensible No Autenticada que deriva en Escalada de...

toolbox v0.2.2

-Significant%20AI%2C%20fully%20reviewed-1f77b4 MCP-based application security testing tools for your coding agent. Not a scanner — a collaborative workbench. Agents struggle with UI and stateful APIs; you're good at both. Sectool lets you explore an application through its proxy while an agent...

CVE-2026-14541

An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When a Google authService is initialized with mcpEnabled: true but lacks an explicitly defined audience or clientId, the ValidateMCPAuth pipeline for...

CVE-2026-14540

A Server-Side Request Forgery SSRF vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through 1.4.0. While the toolbox implements baseline input sanitization for user-controlled parameters, the underlying HTTP client...

CVE-2026-14539

An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox versions up to and including 1.4.0 allows an unauthenticated attacker to cause a denial of service DoS. The /mcp endpoint handler reads incoming payloads directly into system memory using a...

CVE-2026-14537

Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0 allows an unauthenticated attacker to invoke tools protected by the scopeRequired feature via sending tool invocation requests through legacy HTTP endpoints when the --enable-a...

CVE-2026-14541 Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider

An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When a Google authService is initialized with mcpEnabled: true but lacks an explicitly defined audience or clientId, the ValidateMCPAuth pipeline for...

EUVD-2026-51381

An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When a Google authService is initialized with mcpEnabled: true but lacks an explicitly defined audience or clientId, the ValidateMCPAuth pipeline for...

CVE-2026-14541

An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When a Google authService is initialized with mcpEnabled: true but lacks an explicitly defined audience or clientId, the ValidateMCPAuth pipeline for...

CVE-2026-14541 Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider

An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When a Google authService is initialized with mcpEnabled: true but lacks an explicitly defined audience or clientId, the ValidateMCPAuth pipeline for...