SecurityExplained

Security Explained SecurityExplained is a new series after the previous learning challenge series Learn365. The aim of SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning. Below are the various...

Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-

CVE-2026-49975 - HTTP/2 Bomb Proof of Concept Description CVE-2026-49975, also known as HTTP/2 Bomb , is a remote denial-of-service DoS vulnerability that affects most major web servers in their default HTTP/2 configuration. The vulnerability was discovered by OpenAI Codex by combining two...

cve-search

cve-search cve-search هي أداة لاستيراد CVEs نقاط الضعف والتعرضات الشائعة و CPE قائمة المنصات المشتركة إلى MongoDB لتسهيل البحث ومعالجة CVEs. الهدف الرئيسي للبرنامج هو تجنب القيام بعمليات بحث مباشرة وعامة في قواعد بيانات CVEs العامة. عمليات البحث المحلية عادة ما تكون أسرع ويمكنك تحديد استفساراتك...

cscan

cscan المسح المستمر من فاراداي مزيد من المعلومات: http://blog.infobytesec.com/2015/09/faraday-continuous-scanning.html http://blog.infobytesec.com/2015/09/faraday-continuous-scanning.html...

py3webfuzz

Py3webFuzz ';-- Python Web Fuzzing module Library Python3 Module Compatible Author Jonathan Angeles @ex0day Github: https://github.com/jangelesg/py3webfuzz Contributors Nathan Hamiel @nathanhamiel DESCRIPTION Based on pywebfuzz, Py3webfuzz is a Python3 module to assist in the identification of...

py3webfuzz

Py3webFuzz ';-- مكتبة وحدة فحص الويب بلغة بايثون متوافق مع وحدة بايثون 3 المؤلف Jonathan Angeles @ex0day Github: https://github.com/jangelesg/py3webfuzz المساهمون Nathan Hamiel @nathanhamiel الوصف بناءً على pywebfuzz، فإن Py3webfuzz هي وحدة بايثون 3 للمساعدة في تحديد الثغرات الأمنية في تطبيقات...

filekey

🔐 FileKey FileKey is an offline web app that lets you quickly encrypt and share files using passkeys. No accounts, no tracking, no cloud. 🛡️ FileKey is free, open source, and privacy-first. Live at filekey.app. 🚀 Features ✅ Free & Open Source – Licensed under GPLv3. ✅ Accountless – No logins, no...

gdbgui

A browser-based frontend to gdb gnu debugger Documentation : https://gdbgui.com Source Code : https://github.com/cs01/gdbgui/...

msprobe

msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...

msprobe

msprobe À propos Installation Utilisation Exemples À venir Remerciements À propos Trouver toutes les instances Microsoft sur site pour le password spraying et l'énumération. L'outil utilisera une liste de sous-domaines courants associés à votre domaine apex cible pour tenter de découvrir des...

behave

Behave! إضافة متصفح مراقبة لا تزال قيد التطوير للصفحات التي تسيء التصرف. ملاحظة : هذا هو مستودع الكود الخاص بالمشروع، إذا كنت تبحث عن الإضافات المجمعة: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome: https://chrome.google.com/webstore/detail/mppjbkhgconmemoeagfbgilblohhcic...

kanha

Kanha - A web-app pentesting suite written in rust 🦀 Installation ⦾ Subcommands ⦾ Contribute !-----------------------------------------------------line Kanha is a tool that can help you perform, a variety of attacks based on the target domain . With just kanha you can do, Fuzzingwiki-fuzzing,...

certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

jumpserver

منصة PAM مفتوحة المصدر Bastion Host !license-shieldlicense-link !docs-shielddocs-link !deepwiki-shielddeepwiki-link !discord-shielddiscord-link !docker-shielddocker-link !github-release-shieldgithub-release-link !github-stars-shieldgithub-stars-link English · 中文简体 · 中文繁體 · 日本語 · Português Brasil ...

EUVD-2026-96107

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Block Font Family Attribute in all versions up to, and including, 3.7.12 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-96100

The Church Admin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 5.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and...

Cisco_CVE-2023-20198

CiscoCVE-2023-20198 Cisco CVE-2023-20198 👉 Cisco warned of a critical authentication bypass zero-day vulnerability CVE-2023-20198 in its IOS XE software that allows unauthenticated attackers to gain full administrative privileges. 👨‍💻 The vulnerability only affects devices with the Web User...

ASPX_WebShell_COFFLoader

ASPX Web Shell with COFF Loader Based on TrustedSec's CSCOFFLoader Description This ASPX web shell enables execution of Beacon Object Files BOFs on a target server using a semi-interactive Python client. It leverages a COFF loader implementation derived from TrustedSec’s CSCOFFLoader. This projec...

CVE-2021-3129

Remote Code Execution: Laravel CVE-2021-3129 📜 Description This script is designed to exploit the Remote Code Execution RCE vulnerability identified in several Laravel versions, known as CVE-2021-3129. By leveraging this vulnerability, the script allows users to write and execute commands on a...

xepor

Xepor Xepor تُنطق /ˈzɛfə/، زيفر هو إطار عمل لتوجيه الويب لمهندسي الهندسة العكسية وباحثي الأمن. يوفر واجهة برمجة تطبيقات شبيهة بـ Flask للمخترقين لاعتراض وتعديل طلبات HTTP و/أو استجابات HTTP بأسلوب برمجة سهل القراءة. هذا المشروع مخصص للاستخدام مع mitmproxy. يكتب المستخدمون نصوصًا باستخدام xepor، ث...