ntopng

ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...

ESP32-Bit-Pirate

ESP32 Bit Pirate ESP32 Bit Pirate is open-source firmware that turns your device into a multi-protocol development and analysis tool, inspired by the legendary Bus Pirate. It supports sniffing, sending, scripting, and interacting with various digital protocols I2C, UART, 1-Wire, SPI, etc. via a...

SysmonConfigPusher2

SysmonConfigPusher v2 A web-based tool for managing Sysmon configurations across Windows endpoints — supports both agentless WMI/SMB and agent-based deployments. Features Screenshots Dashboard| Inventory ---|--- | Config View| Config Editor ---|--- | Deployment Wizard| Deployment Pr...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

trufflehog-explorer

TruffleHog Explorer 🕵️‍♂️ Welcome to TruffleHog Explorer, a user-friendly web-based tool to visualize and analyze data extracted using TruffleHog. TruffleHog is one of the most powerful secrets discovery, classification, validation, and analysis open source tool. In this context, a secret refers to...

windiff

WinDiff About WinDiff is an open-source web-based tool that allows browsing and comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the operating system. The binary database is automatically updated to include information from the latest Windo...

c2-cloud

About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...

OSRipper

OSRipper v0.4.2 Advanced cross-platform payload generator and crypter with FUD capabilities Features • Quick Start • Web UI • Payload Types • Documentation Overview OSRipper is a sophisticated, fully undetectable FUD backdoor generator and crypter designed for authorized penetration testing and r...

frida-ui

Frida UI A modern, lightweight, web-based user interface for Frida, designed for Android application penetration testing. It allows you to interact with devices, processes, and scripts directly from your browser. Quick Start root@kitploit: Install using uv recommended or pipx/pip uv tool install...

Auerswald COMfortel 1400/2600/3600 IP - Authentication Bypass

Auerswald COMfortel 1400/2600/3600 IP is susceptible to an authentication bypass vulnerability. Inserting the prefix "/about/../" allows bypassing the authentication check for the web-based configuration management interface. This enables attackers to gain access to the login credentials used for...

AD_Miner

AD Miner is an Active Directory on-premise and Entra ID auditing tool that: Leverages Cypher queries to analyze data from the BloodHound graph database Neo4j. Provides a comprehensive overview of existing weaknesses through a static, web-based report. Web-based reports features: Detailed listings...

injectify

Injectify Perform advanced MiTM attacks on websites with ease. ✨ Support development on Patreon or one-time via Paypal Test it out | Installation | Docs | Trello | Discord View what's on the victims screen Ability to interact and click buttons Scrolling is synced two-way Data recording Database a...

Moriarty-Project

Moriarty Project Remastered V4.1.2. Documentation Page https://azizkpln.github.io/moriartyproject/ About Moriarty Project is a powerful web based phone number investigation tool. It has 6 features and it allows you to choose either all features, or the features you like. You can visit documentati...

recon-ng

El Framework Recon-ng ¡Contenido de Recon-ng ya disponible en Pluralsight! Recon-ng es un framework de reconocimiento completo diseñado con el objetivo de proporcionar un entorno potente para realizar reconocimiento web basado en fuentes abiertas de manera rápida y exhaustiva. Recon-ng tiene una...

recon-ng

The Recon-ng Framework Recon-ng content now available on Pluralsight! Recon-ng is a full-featured reconnaissance framework designed with the goal of providing a powerful environment to conduct open source web-based reconnaissance quickly and thoroughly. Recon-ng has a look and feel similar to the...

CVE-2026-73786

CVE-2026-73786 is an unauthenticated Denial-of-Service vulnerability in the web-based management interface of HPE CPPM (Change and Patch Management). A remote attacker with network access can exploit the flaw without credentials to cause instability and degraded performance on the CPPM server. Th...

OWASP-mth3l3m3nt-framework

OWASP Mth3l3m3nt Framework A slightly major forgive pun upgrade is on going. This is to bring in things like: Easier coding standard Support for PHP 8 More robust features Fix bug requests sent in. This tool is released under GNU Affero General Public License v3. Modules Packed in so far are:...

CVE-2018-18852

CERIO router Authenticated RCE backdoor vendor creds CVE-2018-18852 Python PoC hook-s3c github.com/hook-s3c, @hooks3c on twitter Working Python PoC for CVE-2018-18852, originally appearing on; https://github.com/hook-s3c/CVE-2018-18852 What's up CERIO Router models and variants of, DT300N, DT100G...

CVE-2023-48842

CVE-2023-48842 Source : D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi. https://drive.google.com/file/d/1y5omf2SAhNmcPqDxCSRTvJVAWwPcH/view Little upgrade : I updated the script which is now on steroids, the scrip...

c2-cloud

Acerca del Proyecto C2 Cloud es un robusto framework de C2 basado en web, diseñado para simplificar la vida de los testers de penetración. Permite un fácil acceso a backdoors comprometidos, como acceder a una instancia de EC2 en la nube de AWS. Puede gestionar varias sesiones simultáneas de...