omnisci3nt

⭐️ If you find this GitHub repo useful, please consider giving it a star! ⭐️ 🕵️‍♂️ Omnisci3nt: Unified Web Reconnaissance Toolkit Omnisci3nt is a comprehensive web reconnaissance and intelligence framework designed for cybersecurity professionals, ethical hackers, and security researchers. It...

slipstream

NAT Slipstreaming NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to any system behind a victim's NAT, bypassing the victim's NAT/firewall remote arbitrary firewall pinhole control, just by the victim visiting a website. v1 developed by : @SamyKamkar //...

CVE-2025-70342

CVE-2025-70342: Credential Interception via Named Pipe in erase-install Summary erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json. On Apple Silicon Macs, admin credentials entered during reinstall/erase operations are written...

Excalibur

Excalibur will soon be updated to utilize Metasploit over the Bashbunny. Excalibur Excalibur is an Eternalblue exploit based "Powershell" for the Bashbunny project. It's purpose is to reflect on how a "simple" USB drive can execute the 7 cyber kill chain. Excalibur may be used only for...

tanstack-compromise-checker

tanstack-compromise-checker Detect indicators of the TanStack npm supply-chain attack on a developer machine, a repository, or a CI runner. Bash script, Docker image, and GitHub Action — same engine, three entry points. CVE-2026-45321 /GHSA-g7cv-rxg3-hmpx On May 11 2026, attackers published 84...

wifiphisher

About Wifiphisher is a rogue Access Point framework for conducting red team engagements or Wi-Fi security testing. Using Wifiphisher, penetration testers can easily achieve a man-in-the-middle position against wireless clients by performing targeted Wi-Fi association attacks. Wifiphisher can be...

CVE-2023-1326-PoC

CVE-2023-1326-PoC A proof of concept for CVE-2023–1326 in apport-cli 2.26.0 This vulnerability is privilege escalation in apport-cli 2.26.0, similar to CVE-2023–26604, this vulnerability only works if assign in sudoers: A privilege escalation attack was found in apport-cli 2.26.0 and earlier whic...

CVE-2024-9822

CVE-2024-9822 Pedalo Connector = 2.0.5 - Authentication Bypass to Administrator Description The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'loginadminuser' function. This make...

threatest

Threatest Threatest is a CLI and Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Read the announcement blog post:...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git git clone https://github.com/smythtech/sdnpwn Make...

Bug-Bounty-Arsenal-v.3

BugBounty Arsenal A free, full-stack security scanning platform for bug bounty hunters and security researchers — 50+ detectors, continuous monitoring, and CI/CD gating from a single dashboard. ▶ Live app:bugbounty-arsenal.net — free, no credit card. If this is useful, please ⭐ the repo — it...

opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...

CVE-2023-46954

CVE-2023-46954 SQL Injection vulnerability in Relativity Server 2022 v.12.1.537.3 Patch 2 and earlier allows a remote attacker to execute arbitrary code via the name parameter. Vulnerability Type SQL Injection Vendor of Product Relativity ODA LLC Affected Product Code Base Relativity Server 2022...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

dymerge

A simple, yet powerful tool - written purely in python - which takes given wordlists and merges them into one dynamic dictionary that can then be used as ammunition for a successful dictionary based or bruteforce attack. Compatible with Python 2.6 & 2.7. Author: Nikolaos Kamarinakis nikolaskama.m...

awspx

auspex ˈau̯s.pɛks noun: An augur of ancient Rome, especially one who interpreted omens derived from the observation of birds. Overview awspx is a graph-based tool for visualizing effective access and resource relationships within AWS. It resolves policy information to determine what actions affect...

soc-automation-lab

SOC Automation Lab This repository documents the design, detection logic, automation workflows, and lessons learned from building an automated SOC demo using open-source tools. The project focuses on how alerts move from detection to investigation and notification , and what breaks along the way...

CVE-2024-48990-Automatic-Exploit

CVE-2024-48990 PYTHONPATH Hijack - Privilege Escalation Exploit This tool automates the exploitation of a privilege escalation vulnerability in needrestart version 3.7, identified as CVE-2024-48990. It achieves root execution by leveraging the insecure use of the PYTHONPATH environment variable...

CVE-2018-5353

CVE-2018-5353 Zoho ManageEngine ADSelfServicePlus Client Privilege Escalation/RCE Information Vendor: Zohocorp Product: ManageEngine ADSelfServicePlus Versions Affected: Before 5.5 build 5517 Researcher: Jason Juntunen aka @missing0x00 https://github.com/missing0x00 CVSS: 8.8 Description The cust...

AirStrike

/ \ / | | | | | / \ | || '|\ \ | || '|| || |/ / / \ / \ | || | || | | | | || | / // \|||| |/ ||| ||||\ | AirStrike is a Flask + Socket.IO web interface for orchestrating Wi-Fi assessment tools from a browser. This build intentionally focuses on the three most stable attacks in the suite:...