full-60-ddos-tools

Full 60 Ddos Tools Yoo, It's a collection of 60 most popular and powerful ddos tools now. Most powerful DDOS Tools need Python to run. This is a highly personal and optimized programming language. Widely used, easy to learn and simpler optimized syntax. Also used to write Tool DDOS Python to test...

linux-soft-exploit-suggester

linux-soft-exploit-suggester Script to find exploits for all vulnerable software on the system, targeting software packages rather than just kernel vulnerabilities. It uses the exploit database to assess the security of packages and search for exploits to help with privilege escalation. Usage...

BirDuster

BirDuster About BirDuster is a Python based knockoff of the original DirBuster. BirDuster is a multi threaded Python application designed to brute force directories and files names on web/application servers. Often is the case now of what looks like a web server in a state of default installation...

dirsearch

DirSearch This software is a Go implementation of the original dirsearch tool written by Mauro Soria. DirSearch is the very first tool I write in Go, mostly to play and experiment with Go's concurrency model, channels, and so forth : Purpose DirSearch takes an input URL -url parameter and a...

CaddySmith

CaddySmith CaddySmith is a small Python script that reads a Cobalt Strike or Sliver C2 profile and forges a Caddy web server config out of it. The generated Caddyfile turns a regular Linux box into a redirector: legitimate beacon traffic gets reverse-proxied to your team server, and anything else...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

dirstalk

Dirstalk Dirstalk is a multi threaded application designed to brute force paths on web servers. The tool contains functionalities similar to the ones offered by dirbuster and dirb. Here you can see it in action: Contents How to use it Scan Useful resources Dictionary generator Download Developmen...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.com Run using per...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

CVE-2026-123309

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview...

spurt

Spurt Introduction Spurt is a powerful stress testing tool designed to simulate high volumes of traffic and evaluate the performance and resilience of web servers. It has been tested on Linux. Spurt first checks if the target URL is valid. A custom module is used to generate common "User-Agent" a...

CVE-2026-123309

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview...

CVE-2026-123309

JetBrains IntelliJ IDEA versions before 2026.3 (specifically 2026.2.4) are vulnerable to stored XSS on the built-in web server. The vulnerability is triggered via the Markdown preview feature. This flaw is classified under CWE-79 (Improper Neutralization of Input During Web Page Generation) and h...

EUVD-2026-118073

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview...

CVE-2026-84155

The CodeChecker web server contains a session management flaw where tokens remain valid after logout in multi-worker deployments . Because each API worker maintains an independent in-memory session cache , a logout request only clears the cache of the specific worker handling the request and the ...

EUVD-2026-118040

CodeChecker's web server fails to fully invalidate a session token on logout when the server runs with more than one API worker process the default. Each worker process maintains its own in-memory session cache; logout only clears the cache of the single worker that handles the request plus the...

angryFuzzer

AngryFuzz3r Status: Development About the AngryFuzz3r project AngryFuzz3r is a collection of tools for pentesting to gather information and discover vulnerabilities of the targets based on Fuzzedb https://github.com/fuzzdb-project/fuzzdb project UrlFuzz3r-AngryFuzz3r1 Discover hidden files and...

CVE-2026-110390

A flaw was found in FlexNet Beacon. Due to missing authentication when anonymous web server access is enabled, an unauthenticated remote attacker can exploit this issue to cause information disclosure. An attacker can connect to the service without credentials to retrieve sensitive Beacon policy...

CVE-2023-44487

CVE-2023-44487 Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487 This tool checks to see if a website is vulnerable to CVE-2023-44487 completely non-invasively. 1. The tool checks if a web server accepts HTTP/2 requests without downgrading them 2. If the web...