gcp_scanner

Disclaimer This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose. GCP Scanner This is a GCP resource scanner that can help determine what level of acces...

CVE-2026-40369-EXPLOIT

Full Blog - https://pwn2nimron.com/blog CVE-2026-40369: Arbitrary Kernel Address Increment via NtQuerySystemInformation Class 253 Summary Type: Arbitrary kernel write increment — PRIVILEGE ESCALATION PRIMITIVE Component: ntoskrnl.exe — ExpGetProcessInformation Trigger:...

dawnscanner

Dawnscanner - The raising security scanner for ruby web applications dawn is a source code scanner designed to review your web applications for security issues. The tool is able to scan web applications written in Ruby and it supports all major MVC Model View Controller frameworks, out of the box...

jumpserver

An open-source PAM platform Bastion Host !license-shieldlicense-link !docs-shielddocs-link !deepwiki-shielddeepwiki-link !discord-shielddiscord-link !docker-shielddocker-link !github-release-shieldgithub-release-link !github-stars-shieldgithub-stars-link English · 中文简体 · 中文繁體 · 日本語 · Português...

ropr

ropr ropr is a blazing fast multithreaded ROP Gadget finder What is a ROP Gadget? ROP Return Oriented Programming Gadgets are small snippets of a few assembly instructions typically ending in a ret instruction which already exist as executable code within each binary or library. These gadgets may...

FalconHound

FalconHound NOTE: As of the BloodHound CE 7.0 release, the default database has been switched to Postgres. This version of FalconHound still relies on Neo4j to be the default database. If you want to keep using FalconHound while running the latest BloodHound version, add the following line to you...

VulnLLM-R

VulnLLM-R: Specialized Reasoning LLM for Vulnerability Detection Paper: arXiv:2512.07533 Code & Data: GitHub Demo: Web demo Model: 7B Model Environment and dataset 🛠️ Create environment Install Git LFS and clone the repository LFS files are fetched automatically during clone git lfs install...

djangohunter

Djangohunter Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information. https://www.reddit.com/r/django/comments/87qcf4/28165thousanddjangorunningserversareexposed/ https://twitter.com/6ix7ine/status/978598496658960384?lang=en Usage Usage:...

Emora-Project

Emora Emora is an OSINT tool that allows you to search for accounts by username across social networks. Inspired by tools like Sherlock, Emora provides a user-friendly graphical interface to ease the usage and navigation through the results. Overview Overview Showcase Installation Using binary...

POC-CVE-2026-19626

CVE-2026-19626 — RCE in report generation authenticated, non-admin Status: CONFIRMED — pure-REMOTE, non-admin, REST-only 6.7.2-14.el9 lab, 2026-08-21. The weaponized chain this is what poc.py does: 1. login as any regular org user 2. POST /rest/group with name: "=system''" — braces/quotes accepte...

fubucker

Fubucker | CVE-2022-1386 - Fusion Builder Automatic Mass Tool for checking vulnerability in CVE-2022-1386 - Fusion Builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh Install JQ Linux : command apt-get install jq -y Windows : For WSL just d...

Winshark

Winshark Wireshark plugin to work with Event Tracing for Windows Microsoft Message Analyzer is being retired and its download packages were removed from microsoft.com sites on November 25 2019. Wireshark have built a huge library of network protocol dissectors. The best tool for Windows would be...

idasql

IDASQL Give any AI agent the ability to understand compiled binaries. IDASQL is a SQL interface for IDA Pro databases, created by Elias Bachaalany. It exposes 30+ virtual tables covering functions, cross-references, strings, types, imports, disassembly, and decompilation. Use /idasql skills from...

hosting

General Information: This is a setup for a Tor based shared hosting server. It is provided as is and before putting it into production you should make changes according to your needs. This is a work in progress and you should carefully check the commit history for changes before updating. For a...

security-labs-pocs

Datadog Security Labs Research and Proof of Concept Code This repository contains information, exploits, malware samples, and scripts from Datadog Security Labs. Goal This repository aims at providing proof of concept exploits, malware samples and technical demos to help the community respond to...

evilqr

Evil QR Toolkit demonstrating another approach of a QRLJacking attack, allowing to perform remote account takeover, through sign-in QR code phishing. It consists of a browser extension used by the attacker to extract the sign-in QR code and a server application, which retrieves the sign-in QR cod...

Kunyu

Kunyu坤舆 - More efficient corporate asset collection English | 中文文档 0x00 Introduce Tool introduction Kunyu kunyu, whose name is taken from , is actually a professional subject related to geographic information, which counts the geographic information of the sea, land, and sky. The same applies to...

holo

Holo is a suite of routing protocols designed to support high-scale and automation-driven networks. For a description of what a routing protocol is, please refer to this Wikipedia page. You can try Holo in your browser, without installing anything, at Holo Lab. Features Focus on simplicity and...

dnsglobe

dnsglobe A global DNS propagation checker for your terminal — a Rust TUI that queries 34 public DNS resolvers around the world in parallel, compares their answers, and shows the propagation of your record on a world map. Think dnschecker.org / whatsmydns.net, but in your terminal, with watch mode...

MemShellParty

MemShellParty 中文 | English !WARNING This tool is intended only for security researchers, network administrators, and related technical personnel for authorized security testing, vulnerability assessment, and security auditing. Using this tool for any unauthorized network attack or penetration tes...