1559 matches found
petereport
PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...
Apktool
Apktool This is the repository for Apktool. The website is at theapktool.org repository. Apktool is a tool for reverse engineering third-party, closed, binary, Android apps. It can decode resources to nearly original form and rebuild them after making some modifications; it makes it possible to...
versionscan
versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...
contact.sh
contact.sh An OSINT tool to find contacts in order to report security vulnerabilities. Installation 🐧 GNU/Linux Make sure you have installed the whois and jq packages. root@kitploit: $ git clone https://github.com/EdOverflow/contact.sh.git $ cd contact.sh/ $ chmod u+x contact.sh $ ./contact.sh -d...
faraday_addon
概要 Faraday Addon は、閲覧中のリクエストを自分の Faraday インスタンスに自動的に報告するためのシンプルなアドオンです。Faraday Addon はブラウザからのすべてのリクエストを傍受し、それぞれを脆弱性として扱ってアクセスする機能を追加します。これにより、ペンテスターは潜在的に脆弱なリクエストを Faraday に送信するためにアドオンを使うだけでよく、サーバーにコピー＆ペーストする必要がなくなります。 互換性 現時点では、Faraday Addon は Firefox Quantum のみで利用可能です。安定した Chrome リリースに向けて開発中です。...
Bug-Bounty-Beginner-Roadmap
이 저장소에 기여하는 것을 망설이지 마세요! 버그 바운티 입문자 로드맵 안녕하세요! 저는 Ansh Bhawnani 입니다. 현재 보안 엔지니어로 일하고 있으며, 파트타임으로 콘텐츠 크리에이터로도 활동하고 있습니다. 저는 버그 바운티 분야에서 경력을 시작하려는 젊고 열정적인 사람들을 안내하기 위해 이 저장소를 만들었으며, 누구나 기여할 수 있도록 하고 있습니다. 더 많은 콘텐츠가 정기적으로 추가될 예정이니 계속 지켜봐 주세요. 그럼 시작해 봅시다! 참고: 버그 바운티 환경은 최근 몇 년 사이 크게 변했습니다. 1년 전에는 쉽게 ...
CVE-2026-59568
creationtimestamp| type| source ---|---|--- 2026-08-24 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttnscki7u2p 2026-08-24 16:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mttorycio22e 2026-08-24 18:12:34+00:00| seen|...
claude-pentest
claude-pentest A local pentesting toolkit built for Claude Co...
6 security settings every GitHub maintainer should enable this week
At GitHub Security Lab, we spend a lot of our week talking to maintainers. Some find the settings page dense and the docs sprawl. Most maintainers we talk to weren't hired to be security engineers. While this is true, ignoring a project's security settings completely will lead into leaving a lot ...
metasploit-web-scanner-module
MSF Web Vulnerability Scanner Advanced Advanced Metasploit au...
ai-pentest-agent
🔐 AI Pentest Agent v4 Automated web application penetration...
GHSA-XMRV-PMRH-HHX2 Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
CVSSv3.1 Rating: Medium CVSSv3.1 Score: 5.9 CVSSv3.1 Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Summary and Impact An issue exists in the the EventStream header decoder in AWS SDK for Go v2 in versions predating 2026-03-23. An actor can send a malformed EventStream response frame...
Fleet 代码问题漏洞
Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. Versions of Fleet prior to 4.81.0 contained code...
PT-2026-28102
What are the limits of AI-assisted vulnerability hunting? I obtained 23 CVEs in one month. BentoML 8.2k CVE-2026-27905 HIGH SillyTavern 24.6k CVE-2026-26286 HIGH Plane 28.2k CVE-2026-27705 MEDIUM NocoDB 46.4k CVE-2026-28399 MEDIUM Mautic 8.4k CVE-2026-3105 HIGH File Browser 27.9k CVE-2026-28492...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell Security Tool CVE-2025-55182 & CVE-2025-66478...
S3C2 SICP Summit 2025-06: Vulnerability Response Summit
Recent years have shown increased cyber attacks targeting less secure elements in the software supply chain and causing significant damage to businesses and organizations. The US and EU governments and industry are equally interested in enhancing software security, including supply chain and...
CVE-2025-9981
QuickCMS is vulnerable to multiple Stored XSS in slider editor functionality sliders-form. Malicious attacker with admin privileges can inject arbitrary HTML and JS into website, which will be rendered/executed on every page. By default admin user is not able to add JavaScript into the website. T...
EUVD-2019-14213
Malware in sbrugna...