55 matches found
powersap
PowerSAP PowerSAP es una reimplementación simple en PowerShell de técnicas populares y efectivas de todas las herramientas públicas como Bizploit, módulos auxiliares de Metasploit o scripts de Python disponibles en Internet. Esta reimplementación no contiene ninguna vulnerabilidad nueva o no...
xray
Bienvenido a xray 👋 Una potente herramienta de evaluación de seguridad 🏠Documentación de uso • ⬇️Descargar xray • ⬇️Descargar xpoc • ⬇️Descargar xapp • 📖Repositorio de plugins Versión en inglés Nota: La serie xray no es de código abierto. Simplemente descargue el binario compilado. Este repositorio...
AzureADAssessment
Microsoft Azure AD Assessment Assessor Guide If you are a Microsoft employee or partner performing the assessment for a customer please see the Wiki for the Assessment Guide. Install from the PowerShell Gallery If you run into any errors please see the FAQ section at the end of this document...
WordPress-KeepInMind-CVE-2026-9271-Exploit
KIM-Guardian Pro CVE-2026-9271 — Evaluación de XSS Almacenado en KeepInMind de WordPress Herramienta de evaluación de seguridad autorizada para CVE-2026-9271 Autor: Sudeepa Wanigarathna · Herramienta: KIM-Guardian Pro v1.0 Script principal: CVE-2026-9271.py !IMPORTANT Solo uso autorizado. Esta...
py-web-vuln-scanner
No d...
Oracle E-Business Suite 12.2.15 Payments Vulnerability Scanner
This Python-based security assessment tool scans Oracle E-Business Suite EBS Payments deployments for indicators associated with CVE-2026-46817...
Strapi Content API Sanitization Bypass Detection Module Scanner
This Python script assesses exposure to CVE-2026-27886 in Strapi Content API endpoints by performing differential filter validation against where parameters. Detection compares baseline query behavior against controlledfilter predicates to determine whether unsanitized conditions reach backend...
Palo Alto GlobalProtect TLS Posture Scanner
This Metasploit auxiliary module is structured as a defensive assessment tool focused on TLS posture analysis and service identification for GlobalProtect deployments...
Craft CMS Authorization and Migration Endpoint Exposure Tool
This is an assessment utility designed to evaluate potential exposure related to authorization handling and migration endpoint accessibility in Craft CMS deployments...
📄 WebRemoteControl Unauthenticated Remote Filesystem Access
Proof of concept tool that demonstrates how WebRemoteControl suffers from unauthenticated remote filesystem access and potential remote code execution. ================================================================================================================================== | Title :...
UniFi Network Application Path Traversal Vulnerability Assessment Tool
This tool lets you safely detect whether a UniFi Network Application controller is vulnerable to CVE-2026-22557 without causing any disruption. CVE-2026-22557 is an unauthenticated path traversal vulnerability in the UniFi Network Application's guest captive portal that allows remote attackers to...
CIOP-PIB STER SQL注入漏洞
CIOP-PIB STER is a occupational safety and human factors risk assessment software system developed by the Polish company CIOP-PIB. Versions of CIOP-PIB STER prior to version 9.5 contained a SQL injection vulnerability. This vulnerability stemmed from improper handling of multiple search filter...
New tools and guidance: Announcing Zero Trust for AI
Over the past year, I have had conversations with security leaders across a variety of disciplines, and the energy around AI is undeniable. Organizations are moving fast, and security teams are rising to meet the moment. Time and again, the question comes back to the same thing: "We're adopting A...
📄 WordPress Slider‑Future 1.0.5 Arbitrary File Upload
This is a Metasploit module that demonstrates an unauthenticated file upload vulnerability in WordPress Slider‑Future plugin version 1.0.5. ============================================================================================================================================= | Title :...
CVE-2025-4686
CVE-2025-4686 concerns an SQL Injection in Kodmatic Computer Software’s Online Exam and Assessment product. The issue is described as improper neutralization of special elements used in SQL commands, enabling an injection that can impact confidentiality (low), integrity (low), and availability (h...
5 Types of Cybersecurity Assessment Tools Compared
Your organization’s assets are everywhere: on-premise servers, multi-cloud environments, remote endpoints, and countless applications. Trying to secure this sprawling digital footprint with siloed tools gives you a fragmented, incomplete picture of your risk. You might have one tool for cloud...
EUVD-2020-11907
Malware in sbrugna...
AutoPentester: An LLM Agent-Based Framework for Automated Pentesting
Penetration testing and vulnerability assessment are essential industry practices for safeguarding computer systems. As cyber threats grow in scale and complexity, the demand for pentesting has surged, surpassing the capacity of human professionals to meet it effectively. With advances in AI,...
CVE-2020-1011
An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1015...