metabigor

Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...

metabigor

Metabigor - قوة OSINT دون عناء مفاتيح API ما هو Metabigor؟ يرسم Metabigor البنية التحتية لهدف ما دون أن يطلب منك التسجيل للحصول على مفتاح API واحد. النطاقات الشبكية، الشهادات، النطاقات ذات الصلة، المنافذ المكشوفة، موفرو CDN، وتسريبات الأكواد - كلها من مصادر مجانية، وكلها يمكن تمرير نتائجها إلى...

cloudmapper

CloudMapper Note the Network Visualization functionality command prepare is no longer maintained. CloudMapper helps you analyze your Amazon Web Services AWS environments. The original purpose was to generate network diagrams and display them in your browser functionality no longer maintained. It...

safe-chain

Aikido Safe Chain ✅ Block malware on developer laptops and CI/CD ✅ Supports npm and PyPI more package managers coming ✅ Blocks packages newer than 48 hours without breaking your build ✅ Tokenless, free, no build data shared Need protection beyond npm & PyPI? Aikido Device Protection builds on Saf...

SharpRDP

SharpRDP - تطبيق وحدة تحكم بروتوكول سطح المكتب البعيد لتنفيذ الأوامر المعتمدة البناء للترجمة، افتح المشروع في Visual Studio وقم ببنائه للإصدار. سيتم إخراج ملفين DLL إلى دليل Release، لا تحتاج إليهما لأن ملفات DLL موجودة في التجميعة. إذا كنت لا ترغب في استخدام ملفات DLL المقدمة، فستحتاج إلى .NET S...

CVE-2026-104803 WPCOM Member <= 1.7.27 - Unauthenticated Authentication Bypass via 'uuid' and 'code' Parameters on Social-Login Callback

The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the uuid and code parameters of the social-login callback handler registered on the init hook. The vulnerability exists because the login function's social-login flow...

EUVD-2026-96279

The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the uuid and code parameters of the social-login callback handler registered on the init hook. The vulnerability exists because the login function's social-login flow...

CVE-2026-104803

The WPCOM Member plugin for WordPress (versions up to and including 1.7.27 ) is vulnerable to an Authentication Bypass via the uuid and code parameters of the social-login callback handler. The root cause is a lack of nonce validation, OAuth state verification, and per-visitor namespace isolation...

CVE-2026-96563

The Motors – Car Dealership & Classified Listings plugin for WordPress (versions up to and including 1.4.123 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping involving the 'stm_f_s' parameter. This flaw allows authenticat...

CVE-2026-96563 Motors <= 1.4.123 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'stm_f_s' Parameter

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stmfs' parameter in all versions up to, and including, 1.4.123 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

EUVD-2026-96292

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stmfs' parameter in all versions up to, and including, 1.4.123 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

mimicry

Mimicry Mimicry Mimicry is a security tool developed by Chaitin Technology for active deception in exploitation and post-exploitation. Active deception can live migrate the attacker to the honeypot without awareness. We can achieve a higher security level at a lower cost with Active deception...

web

Network-wide ad blocking via your own Linux hardware Pi-hole website | Documentation | Discourse Forum | Donate Pi-hole Web Interface Pi-hole®'s Web interface based off of AdminLTE provides a central location to manage your Pi-hole and review the statistics generated by FTLDNS™. Easy-to-interpret...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

433Screen-SignalHacker

433Screen-SignalHacker État du projet : Ce dépôt est un ancien prototype de piratage de signaux 433 MHz. Il a été remplacé par EMWaver , la plateforme d'exploration matérielle de Continual MI, qui a elle-même été retirée et archivée en juillet 2026. L'historique complet d'EMWaver — chaque carte,...

skitter-creek-bath-salts

skitter-creek-bath-salts Débloquertout sur le CPU avec le brouillage DRAM — PSP, C6, microcode, SMM, et tout ce que les spécifications ont omis. &x == &x. Habituellement. Manipulez le contrôleur DRAM et une adresse peut être amenée à atterrir où vous voulez en mémoire. skitter-creek-bath-salts...

LIEF

المدونة • التوثيق • نبذة نبذة الغرض من هذا المشروع هو توفير مكتبة متعددة المنصات لتحليل وتعديل وتجريد صيغ ELF و PE و MachO. الميزات الرئيسية : التحليل : يمكن لـ LIEF تحليل ELF، PE، MachO، COFF، OAT، DEX، VDEX، ART ويوفّر واجهة برمجة تطبيقات سهلة الاستخدام للوصول إلى مكوناتها الداخلية. التعديل :...

cryptohackfirm

Cryptohack A semi-secure, hacker-friendly hardware crypto wallet on the hip-badge ESP32-C3 platform with the onboard ATECC608B secure element. Signs transactions for BTC , ETH + 8 EVM chains, SOL , and XMR with an on-device SIGN screen the user has to approve before any private key touches the...

steamer

Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...