NucleiFuzzer

NucleiFuzzer = Nuclei + Paramspider + waybackurls + gauplus + hakrawler + katana + Fuzzing Templates Overview NucleiFuzzer is an advanced automation tool designed to streamline and optimize web application security testing by integrating a suite of powerful URL discovery and vulnerability scannin...

RapidWebRecon

Nuclei to PDF Report Generator A professional-grade automation tool designed to bridge the gap between technical vulnerability scanning and executive reporting. Developed by Adi Mahluf Tenroot Cyber Security. 🚀 Overview This project provides a seamless "one-command" workflow to audit web assets. ...

NetSet

NetSet Operational Security utility and automator. Version 1.1.0 NetSet is designed to automate a number of operations that will help the user with securing their network traffic. It also provides an easy way to gather proxies and run utilities through Tor. All the utilities installed and used by...

webcopilot

WebCopilot An automation tool that enumerate subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities. Features • Installation • Usage • WebCopilot • Tools Used • Acknowledgement WebCopilot is an automation tool designed to enumerate...

Garud

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters. I made this tool to automate my recon and save my time. It really give me headache always type such command and then wait to complete one command and I type oth...

burpa

burpa: Burp Automator A Burp Suite Automation Tool Requirements burp-rest-api Burp Suite Professional slackclient Usage $ python burpa.py -h / / / / / / / / / / / // / // / / / // / // / /./,// / ./,/ // burpa version 0.1 / by 0x4D31 usage: burpa.py -h -a scan,proxy-config,stop -pP PROXYPORT...

Autopwn

Autopwn™ A simple bash based metasploit automation tool! With just a few clicks, own any android or windows device!! Autopwn in action Caution: This tool is purely for educational purposes, If you end up in any legal trouble and point a finger at me, I'll just laugh at you : The user is responsib...

Shuffle

Shuffle Automation Deploy On Shuffle is an open source automation platform, built for and by the security professionals. Security operations is complex, but it doesn't have to be. Built to work well with MSSP's and other service providers in mind. Get training Key Features — Community & Support —...

IOCScraper

IOC Scraper IOC Scraper utilise le service IOCPARSER pour récupérer les IOCs à partir de différents blogs de fournisseurs, fichiers PDF et CSV. L'analyse des IOCs est un processus chronophage ; grâce à ce script, on peut automatiquement extraire et agréger les IOCs facilement. Fonctionnalités IOC...

CVE-2024-3094-Vulnerability-Checker-Fixer

!Open Source Lovehttps://assets.kitploit.com/production/public/read...

DLLirant

DLLirant DLLirant is a tool to automatize the DLL Hijacking and DLL Proxying researches on a specified binary. Final PoC output when a DLL Hijacking is found: Old Live Demo similar to the new version How to install Install LLVM for Windows x64 LLVM-version-win64.exe:...

bip

Bip Bip — это проект, цель которого — упростить использование Python для взаимодействия с IDA. Его основные задачи — облегчить использование Python в интерактивной консоли IDA и написание плагинов. В более общем смысле цель состоит в том, чтобы автоматизировать повторяющиеся задачи, выполняемые...

thinkphp5.0.1-automatic-getshell

thinkphp5.0.1-automatic-getshell thinkphp5.0.1 automatic getshell script Solves some minor issues encountered with thinkphp5.0.1, saving you the hassle of manual reproduction by building a dedicated script from scratch...

build.prop build-20260913

Pixel Prop Builder: Streamlined OTA to Build.prop Conversion Effortlessly extract and manage system properties from Pixel OTA updates with this robust automation suite. Designed for developers and enthusiasts alike, it simplifies the process of accessing and customizing Android build properties. ...

New release build.prop

Pixel Prop Builder: Streamlined OTA to Build.prop Conversion Effortlessly extract and manage system properties from Pixel OTA updates with this robust automation suite. Designed for developers and enthusiasts alike, it simplifies the process of accessing and customizing Android build properties. ...

NPM: n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector

NPM: n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector vulnerability discovered by ? in WordPress Npm n8n versions 2.27.4...

CVE-2026-59207

n8n is an open source workflow automation platform. Prior to 2.27.4 and 2.28.1, the AI Agents feature did not enforce the Allowed HTTP Request Domains restriction configured on credentials when an MCP tool was pointed at an arbitrary URL, allowing a member-level user with use-only access to a...

SQL Injection

Overview n8n is a n8n Workflow Automation Tool Affected versions of this package are vulnerable to SQL Injection in the MySQL v1 node's executeQuery operation, which interpolates evaluated ... expression values directly into raw SQL strings without parameterization. An attacker can execute...

Exploit for Code Injection in N8N

CVE-2026-27495 — n8n JS Task Runner Sandbox Escape Sandbox es...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the manipulation of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created file...