interactsh

An OOB interaction gathering server and client library Features • Usage • Interactsh Client • Interactsh Server • Interactsh Integration • Join Discord Interactsh is an open-source tool for detecting out-of-band interactions. It is a tool designed to detect vulnerabilities that cause external...

AutoProber

AutoProber AutoProber 是硬件黑客的飞针自动化堆栈，为您的智能体提供从“板上有了新目标”到安全探测单个引脚所需的一切。 演示视频：https://gainsec.com/autoprober-demo-mp4/ 流程 1. 告知智能体导入项目。 2. 连接所有硬件。 3. 告知智能体确认所有部件功能正常。 4. 执行归零，然后校准。 5. 安装自定义探针和显微镜接口板。 6. 告知智能体板上有了新目标。 7. 它将找到目标在板上的位置，然后拍摄单个帧，记录 XYZ 坐标，同时标记焊盘、引脚、芯片及其他感兴趣的特征。 8...

cygor

Cygor Descripción General Cygor es un framework modular de descubrimiento de activos que reúne escaneo, análisis y enumeración de servicios en un solo flujo de trabajo. Reemplaza el mosaico de herramientas separadas por un proceso automatizado que gestiona el descubrimiento, el enriquecimiento y ...

meshyface

Meshyface Meshyface es un panel de control de Meshtastic centrado en el chat que se ejecuta como un único servicio Python y sirve una interfaz web de una sola página a través de HTTP. Superficie actual de la aplicación La interfaz actual ofrece: Chat y conversaciones directas entre pares Espacio ...

c-sentinel

C-Sentinel UNIX 系统的语义可观测性 一个用 C 编写的轻量级、可移植的系统探测器，捕获“系统指纹”以实现 AI 辅助的非明显风险分析。功能包括 auditd 集成、可解释的风险评分，以及具有企业级多用户认证的实时 Web 仪表板。 在线演示 : sentinel.speytech.com 截图 安全仪表板 多主机概览 用户资料与安全设置 双因素认证 设置| 登录 ---|--- | 个人 API 密钥 管理功能 会话管理 审计日志 !Audit Loghttps://assets.kitploit.com/production/pu...

PULSE-C2

PULSE C2 框架 基于 HTTPS 的命令与控制基础设施，附带 Web 仪表板，用于远程 Windows 代理管理。 ⚠️ 仅限教育用途 - 非法使用后果自负。 特性 支持 TLS 加密的 HTTPS C2 服务器（Flask） 实时 Web 仪表板 XOR + Base64 加密协议 SQLite 数据库持久存储 远程 Shell、文件外泄、信标控制 静默代理，无调试输出 快速开始 服务端： cd server pip install flask python c2server.py 访问仪表板：https://localhost:8443 客户端： build.bat 编辑...

mylg

myLG, Command line Network Diagnostic Tool myLG is an open source software utility which combines the functions of the different network probes in one network diagnostic tool. Features Popular looking glasses ping/trace/bgp: Telia, Level3, NTT, Cogent, KPN More than 200 countries DNS Lookup...

Sirius

Sirius Scan Sirius 是一款开源漏洞扫描器，具备自动发现、基于 CVE 的检测功能以及现代化的 Web 界面。克隆仓库，运行四条命令，即可开始扫描。 快速开始 git clone https://github.com/SiriusScan/Sirius.git cd Sirius docker compose -f docker-compose.installer.yaml run --rm sirius-installer docker compose up -d 打开 http://localhost:3000 并登录： | ---|--- 邮箱|...

cumulus

Application Weakness Monitoring Software What's Cumulus Cumulus is a service that helps you monitor and fix security weakness in realtime. The issues will be reported on web dashboard. It's very simple and powerful. Key features Just install SDK to web front, can be found security weakness on...

Flink_RCE

Apache Flink Web Dashboard acceso no autorizado, subida de jar malicioso que provoca ejecución remota de comandos msf nc uso de python: python 02-Flink.py http://10.10.20.100:8081 nc.jar...

Decepticon v1.2.2

Decepticon — Autonomous Red Team Agent "Another AI hacker? Let us guess — it runs nmap and writes a report." ☁️ Don't want to self-host? Decepticon is live in the cloud. Skip the Docker setup — run autonomous red-team engagements right from your browser. Install Prerequisites : Docker and Docker...

pared

Pared Pared es un plano de control ligero y seguro y un panel administrativo web en tiempo real escrito en Crystal para la seguridad de hosts Linux. Proporciona gestión centralizada para las interfaces DBus/CLI de firewalld y las conexiones de NetworkManager, con TLS mutuo mTLS, autenticación...

TATS

TATS — Sistema de Análisis y Seguimiento de Tokens Rastrea tokens de OAuth 2.0, OIDC y Microsoft Entra ID a través del tráfico de red capturado. Ingiere exportaciones XML de Burp Suite, archivos de flujo de mitmproxy o transmisiones en vivo del Protocolo Chrome DevTools en una única base de datos...

Apache-Flink-Dashboard-rec

Apache-Flink-Web-Dashboard-RCE RCE en el panel web de Apache Flink...

simvyn v2.7.1

simvyn Universal mobile devtool — control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI Table of Contents Quick Start Installation AI Coding Agents Features Module Showcases Collections Guide CLI Reference How It Works Supported Platforms Contributing Securit...

CVE-2026-88061

career-ops is an open-source AI-assisted job search and application management tool. Prior to 0.8.0, the career-ops local web dashboard web/ exposed command-spawning and user-file-writing /api routes without validating request origin or restricting clients to loopback addresses. A malicious page ...

CVE-2026-88061: Cross-Site Request Forgery (CSRF)

career-ops is an open-source AI-assisted job search and application management tool. Prior to 0.8.0, the career-ops local web dashboard web/ exposed command-spawning and user-file-writing /api routes without validating request origin or restricting clients to loopback addresses. A malicious page ...

PT-2026-89574

Name of the Vulnerable Software and Affected Versions career-ops versions prior to 0.8.0 Description The local web dashboard web/ exposes /api routes that allow command spawning and user-file writing without validating the request origin or restricting clients to loopback addresses. This allows...

Decepticon-NavMAX

!Englishhttps://img.shields.io/badge/Language-English-blue?s...

PYSEC-2026-2512 hermes-agent has an Incorrect Comparison

A security flaw has been discovered in NousResearch hermes-agent 2026.4.23. Affected is the function discoverdashboardplugins of the file hermescli/webserver.py of the component CLI web-dashboard Interface. Performing a manipulation of the argument HERMESENABLEPROJECTPLUGINS results in incorrect...