TCASVS

OWASP Thick Client Application Security Verification Standard TCASVS Introduction The OWASP Thick Client Application Security Verification Standard TCASVS provides a comprehensive set of security requirements for designing, building, and testing thick client applications — desktop software, nativ...

NetworkSherlock

NetworkSherlock: Potente Escaneo de Puertos con Shodan NetworkSherlock es una herramienta de escaneo de puertos potente y flexible diseñada para profesionales de seguridad de redes y testers de penetración. Con sus capacidades avanzadas, NetworkSherlock puede escanear de manera eficiente rangos I...

pentest-book

description: - This book contains a bunch of info, scripts and knowledge used during my pentests. /home/six2dez/.pentest-book Thanks to visit this site, please consider enhance this book with some awesome tools or techniques you know, you can contact me by Telegram@six2dez, Twitter@six2dez1 or...

Main_MiSTer

MainMiSTer Main Binary and Wiki Repo This repo serves as the home for the MiSTer Main binaries and the Wiki. For the purposes of getting google to crawl the wiki, here's a link to the not for humans crawlable wiki If you're a human looking for the wiki, that's here To compile this application, re...

CVE-2026-69865

creationtimestamp| type| source ---|---|--- 2026-09-18 02:10:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvr3n5jrln2t...

neo

Neo Turn any web app into an API. No official API needed. No browser automation. Neo is a Chrome extension that passively captures every API call your browser makes, learns the patterns, and lets AI or you replay them directly. The Problem AI agents operating web apps today have two options, both...

CVE-2026-70009

creationtimestamp| type| source ---|---|--- 2026-09-18 02:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvr3n2mhbe25...

PoshBot

PoshBot Supporting PoshBot PoshBot is a MIT-licensed open source project. Ongoing development is made possible thanks to the support of sponsors. If you'd like to become a sponsor, you can do so through GitHub Sponsors or Patreon. Silver Sponsors Want some in-depth guides? Check out ChatOps the...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

CVE-2026-85878

creationtimestamp| type| source ---|---|--- 2026-09-18 02:08:49+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvr3ksbiev2n 2026-09-18 02:26:35+00:00| seen| https://bsky.app/profile/potato.software/post/3mvr4klciw62c 2026-09-18 03:00:08+00:00| seen|...

CVE-2026-69843

creationtimestamp| type| source ---|---|--- 2026-09-18 02:08:40+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvr3kkcflz2y 2026-09-18 02:08:41+00:00| seen| https://bsky.app/profile/potato.software/post/3mvr3kkqcpg2c 2026-09-18 03:00:06+00:00| seen|...

CVE-2025-28346

Vulnerability Type SQL Injection Description A Time-Based Blind SQL Injection vulnerability was discovered in Ticket-Booking-App - 1.0 that allows an attacker to execute arbitrary SQL queries on the underlying database. The vulnerable parameter does not properly sanitize user-supplied input,...

CVE-2026-62874

creationtimestamp| type| source ---|---|--- 2026-09-18 02:08:31+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvr3kbgovo2r 2026-09-18 02:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvr5unoyvy22 2026-09-18 04:01:52+00:00| seen|...

frogy2.0

Orbis - Attack Surface Intelligence Full-Spectrum Attack Surface Intelligence Orbis automatically maps your organisation's entire internet-facing attack surface, subdomains, open ports, web applications, cloud infrastructure, TLS certificates, email posture, exposed secrets, login panels, and mor...

frogy2.0

Orbis - Inteligencia de Superficie de Ataque Inteligencia de Superficie de Ataque de Espectro Completo Orbis mapea automáticamente toda la superficie de ataque orientada a internet de su organización, subdominios, puertos abiertos, aplicaciones web, infraestructura en la nube, certificados TLS,...

CVE-2023-4279

CVE ID : CVE-2023-4279 Vulnerability Type : IP Address Spoofing Description : This plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic. Steps to reproduce : root@kitploit: 1...

web-threat-mitigation

web-threat-mitigation Hands-on lab on detecting and mitigating web app threats using OWASP ZAP, Burp Suite, and ModSecurity WAF with OWASP CRS. Case study: Spring4Shell CVE-2022-22965. Local Docker-based setup. Web Threat Mitigation Lab – OWASP ZAP, ModSecurity & CVE Exploitation This repository...

CVE-2013-2977

IBM Lotus Notes PNG Integer Overflow - CVE-2013-2977 IBM Lotus Notes is the client of a collaborative client-server plataform, being IBM Lotus Domino the application server. The email-client capability is one of its most important and used features. IBM Lotus Notes fails to correctly parse a PNG...

Malicious-MCP

Malicious MCP This is a proof-of-concept project that allows you to deploy an MCP server that "disguises" itself as any other MCP server. This MCP acts as an MCP 'Proxy', and simply forwards all incoming requests to an upstream MCP server. What is an MCP? An MCP Server is a program that expose...

CVE-2021-21985_PoC

CVE-2021-21985 Vulnerable Code CLASS/METHODs available, a little sample for PoC purposes: com.vmware.vsan.client.services.capability.VsanCapabilityProvider root@kitploit: ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported...