VHostScan

VHostScan A virtual host scanner that can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages. First presented at SecTalks BNE in September 2017 slidedeck. This is an enhanced version of the original VHostScan byCodingo with additional improvements, modernized...

Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures. FREE EMBEDDED HACKING COURSE PROMO HERE Join DC540 Discord HERE OUROBOROS BADGE HERE HOW IT WORKS HERE CLICK IMAGE BELOW TO WATCH THE PROMO VIDEO! Today's Tutorial Ju...

log4j-exploit-fork-bomb

log4j-exploit-with-fork-bomb 💣💥💀 Proof of Concept: example of launching a fork bomb on a remote server due to vulnerability CVE-2021-44228 1. Create an attacker's LDAP server server module that will serve string and code payloads payload module 2. Create a victim example victim module and pass a...

fuckshitup

Agenda FuckShitUp 0.1 - Multi Vulnerabilities Scanner Basically, FSU is bunch of tools written in PHP-CLI. Using build-in functions, you are able to grab url's using search engines - and so, dork for interesting files and full path disclosures. Using list of url's, scanner will look for Cross Sit...

john

John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...

ESAPI__esapi-java-legacy_CVE-2022-23457_2-2-3-1

Enterprise Security API for Java Legacy OWASP® ESAPI The OWASP Enterprise Security API is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications. The ESAPI for Java library is designed to make it easier for programmers t...

cnitch

cnitch cnitch snitch or container snitch is a simple framework and command line tool for monitoring Docker containers to identify any processes which are running as root. Why is this a bad thing? If you have not already been to can I haz non-privileged containers? by mhausenblas then I recommend...

strix

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilit...

gatekeeper

Gatekeeper What is Gatekeeper? Gatekeeper is the first open source DDoS protection system. It is designed to scale to any peak bandwidth, so it can withstand DDoS attacks both of today and of tomorrow. In spite of the geographically distributed architecture of Gatekeeper, the network policy that...

CVE-2024-48705

Overview During recent security research for the Wavlink AC1200 Model: WL-WN532A3 a Post-Authentication Command Injection Vulnerability was identified in the "/cgi-bin/adm.cgi" endpoint. This vulnerability could enable malicious actors who have compromise the credentials for the router, to run...

CVE-2017-7921-EXP

CVE-2017-7921 Exploit An Improper Authentication issue was discovered in Hikvision devices. ​ The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. ​ This may allow a malicious user to escalate his or her privileges on the system...

goLoL

goLoL goLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current privilege level with MITRE ATT&CK mappings and can scan local .sys files for vulnerable/malicious LOLDrivers hash matches. Note: This is not an OPSEC saf...

LiMEaide

LiMEaide v2.0 by Daryl Bennett - kd8bnyatgmaildotcom About LiMEaide is a python application designed to remotely or locally dump RAM of a Linux client and create a volatility profile for later analysis on your local host. I hope that this will simplify Linux digital forensics in a remote...

CVE-2026-86688

creationtimestamp| type| source ---|---|--- 2026-09-18 02:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvr337qtdi2y...

hashview

Hashview v0.8.2 Hashview is a tool for security professionals to help organize and automate the repetitious tasks related to password cracking. It is broken into two compoents, the Hashview Server, and Hashview Agent. The Hashview Server is a web application that manages one or more agents,...

win-brute-logon

Aviso 1: Nos complace anunciar que nuestra herramienta actual se ha portado a una versión de PowerShell. Esto significa que los usuarios ahora pueden acceder y usar la herramienta directamente desde la línea de comandos de PowerShell, lo que la hace aún más conveniente y eficiente de usar. Creemo...

wprecon

WPRecon Una potente herramienta de reconocimiento y escaneo de vulnerabilidades para WordPress, basada en plantillas Características • Instalación • Uso • Arquitectura • Plantillas 📋 Resumen WPRecon es una herramienta moderna de reconocimiento de seguridad para WordPress, construida con Go, que...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

SkillsGuard

Support Development If SkillsGuard protects your pipeline, consider supporting ongoing research and new detection rules. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. Static security scanner for AI agent skill packages. Detects...

kernelpop

kernelpop kernelpop is a framework for performing automated kernel vulnerability enumeration and exploitation on the following operating systems: Linux Mac It is designed to be python version-agnostic, meaning that it should work with both python2 and python3 please let me know if you find that i...