metahub

MetaHub is an automated contextual security findings enrichment and impact evaluation tool for vulnerability management. You can use it with AWS Security Hub or any ASFF-compatible security scanner. Stop relying on useless severities and switch to impact scoring definitions based on YOUR context...

firefox-devtools-mcp

Firefox DevTools MCP Model Context Protocol server for automating Firefox via WebDriver BiDi through Selenium WebDriver. Works with Claude Code, Claude Desktop, Cursor, Cline and other MCP clients. Repository: https://github.com/mozilla/firefox-devtools-mcp Note : This MCP server requires a local...

on-device-browser-agent

Local Browser - On-Device AI Web Automation Launching support for runanywhere-web-sdk soon in our main repo: please go check it out: https://github.com/RunanywhereAI/runanywhere-sdks A Chrome extension that uses WebLLM to run AI-powered web automation entirely on-device. No cloud APIs, no API key...

SecurityRAT

OWASP Security RAT Requirement Automation Tool is a tool helping you manage security requirements in your agile development projects. The typical use case is: specify parameters of the software artifact you're developing based on this information, list of common security requirements is generated...

Grawler

Grawler - v1.0 This project isnot maintained anymore. Grawler is the best tool ever, made for automating google dorks it's a tool written in PHP which comes with a web interface that automates the task of using google dorks, scrapes the results, and stores them in a file, version 1.0 is the more...

EUVD-2026-83178

WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes authenticate account viewers but do not enforce the agent role before using a service-role database client that bypasses row-level security. In src/app/api/flows/id/route.ts,...

Search-That-Hash

➡️ Discord ⬅️ The Fastest Hash Cracking System pip3 install search-that-hash && sth 🤔 Overview Tired of going to every website to crack your hash? Search-That-Hash automates this process in less than 2 seconds. Search-That-Hash searches the most popular hash cracking sites and automatically inputs...

CVE-2020-6308

CVE-2020-6308 Exploit script for SAP Business Objects SSRF This is a simple Golang script to automate the exploitation of CVE-2020-6308. The original Github repo did not show any automation https://github.com/InitRoot/CVE-2020-6308-PoC , thanks @InitRoot, so this was made in an effort to help...

phantomrecon

PhantomRecon PhantomRecon is a CLI-based, modular, agent-driven red team automation tool designed to demonstrate autonomous offensive security workflows powered by AI Google's Gemini via Agent Development Kit - ADK. Quick Start CLI Run interactive console metasploit-style: root@kitploit: python -...

CVE-2019-19231

CVE-2019-19231 https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/CA20191218-01-security-notice-for-ca-client-automation-agent-for-windows.html...

003Recon

📌 Description This repository contains some of my scripts that i created to automate some recon processes. It performs the following things; 1. Get subdomains of a domain 2. Filter out only online domains 3. Scan the domains for CRLF 4. Check for a CORS misconfigurations 5. Test for open redirect...

Orbit Tracer

Orbit Tracer Orbit Tracer Security Agent for Intelligent Security Remediation Automate security vulnerability analysis, risk assessment, and remediation across your entire codebase using AI and Orbit's knowledge graph The Problem Security teams face a critical challenge: Finding vulnerabilities i...

autowpscan

autowpscan An automated tool that automatically scanning a list of multiple websites with wordpress at once. and send scan summary to telegram with wpscan logs. Requires wpscan, Telegram BOT Token, WordPress Vulnerability Database API token Introduction This tool takes a list of multiple websites...

penta

penta PENTest + semi-Automation tool Penta is is Pentest semi-automation tool using Python3. It provides advanced features to extract vuln info found on specific servers. I'm now developing a scanning system using vuln-db. Installation Install requirements...

ssrf-king

🔥 ssrf-king 🔥 v1.12 Последняя Плагин SSRF для Burp, который автоматизирует обнаружение SSRF во всех запросах. Если вы столкнулись с какими-либо проблемами или хотите получить новую функцию, которая не перечислена ниже Пожалуйста, создайте новый issue по этой форме Создать новый Issue Список...

Predator

Predator Anti-Automation System Introduction Predator is a prototype web application designed to demonstrate anti-crawling, anti-automation & bot detection techniques. It can be used a honeypot, anti-crawling system or a false positive test bed for vulnerability scanners. Warning: I strongly...

hashview

Hashview v0.8.2 Hashview 는 보안 전문가가 비밀번호 크래킹과 관련된 반복적인 작업을 체계화하고 자동화하는 데 도움을 주는 도구입니다. Hashview Server와 Hashview Agent 두 가지 구성 요소로 나뉩니다. Hashview Server는 사용자가 전용 하드웨어에 배포하는 하나 이상의 에이전트를 관리하는 웹 애플리케이션입니다. 참고: 서버와 에이전트를 같은 시스템에서 실행할 수 있습니다. Hashview는 hashcat 작업에 일관성을 제공하면서, 보고서에 ctrl+c, ctrl+v로 바로 사...

Pwnkit-CVE-2021-4034

Pwnkit-CVE-2021-4034 Automation Exploit...

CVE-2022-22954-POC

CVE-2022-22954-POC VMware Workspace ONE Access이전 명칭: VMware Identity Manager는 다중 요소 인증, 조건부 액세스 및 싱글 사인온을 통해 직원이 SaaS, 웹 및 네이티브 모바일 애플리케이션에 더 빠르게 액세스할 수 있도록 설계되었습니다. 최근 VMware 공식 웹사이트에서 VMware Workspace ONE Access에 여러 취약점이 존재함을 발표했습니다. 그 중 취약점 번호 CVE-2022-22954, CVSS 평점 9.8, 위험 등급은 심각입니다. 영향을 받는...

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...