44 matches found
ReelPhish
Instructions for ReelPhish: This tool has been released along with a FireEye blog post. The blog post can be found at the following link: https://www.fireeye.com/blog/threat-research/2018/02/reelphish-real-time-two-factor-phishing-tool.html Installation Steps 1. The latest release of Python 2.7.x...
skyvern
š Automate Browser-based workflows using LLMs and Computer Vision š...
yappy
Yappy š¶ AI-powered LinkedIn engagement assistant. Automatically discover LinkedIn posts and leave thoughtful, unique, AI-generated comments that actually sound like you. Yappy is a powerful terminal-based tool that uses Google's Gemini AI and Playwright browser automation to help you stay active ...
EasySpider
ęéé/EasySpider: Visual Code-Free Web Crawler äøäøŖå®å Øå č“¹ ļ¼å ę¬åäøä½æēØåäŗꬔå¼å ļ¼ēåÆč§åęµč§åØčŖåØåęµčÆ/ę°ę®éé/ē¬č«č½Æ件ļ¼åÆ仄ä½æēØå¾å½¢åēé¢ļ¼ę 代ē åÆč§åēč®¾č®”åę§č”ä»»å”ćåŖéč¦åØē½é”µäøéę©čŖå·±ę³č¦ęä½ēå å®¹å¹¶ę ¹ę®ęē¤ŗę”ęä½å³åÆå®ęä»»å”ēč®¾č®”åę§č”ćåę¶č½Æ件čæåÆ仄åē¬ä»„å½ä»¤č”ēę¹å¼čæč”ę§č”ļ¼ä»čåÆ仄å¾ę¹ä¾æēåµå „å°å ¶ä»ē³»ē»äøć A completely free including for commercial use and secondary development visual browser automation...
Firefox-Security-Toolkit
Firefox Security Toolkit A tool that transforms Firefox browsers into a penetration testing suite How? It downloads the most important extensions, and install it on your browser. The used extensions has been chosen by a survey among the information security community. Based on it's results, Firef...
Dorkwright
Dorkwright - Google Dorking Tool Dorkwright is a powerful Python-based Google dorking utility that automates the extraction of file links from Google search results and optionally downloads them. It uses Playwright for browser automation and includes CAPTCHA handling, progress indicators, and a...
uncaptcha
uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...
BFuzz
BFuzz root@kitploit: BFuzz is currently in beta. BFuzz is an input based fuzzer tool which take .html as an input, open's up your browser with a new instance and pass multiple testcases generated by domato which is present in recurve folder of BFuzz, more over BFuzz is an automation which perform...
ai-captcha-bypass
Ų£ŲÆŲ§Ų© ŲŁ CAPTCHA ŲØŲ§ŁŲ°ŁŲ§Ų” Ų§ŁŲ§ŲµŲ·ŁŲ§Ų¹Ł ŁŲ°Ų§ Ų§ŁŁ Ų“Ų±ŁŲ¹ Ų¹ŲØŲ§Ų±Ų© Ų¹Ł Ų£ŲÆŲ§Ų© Ų³Ų·Ų± Ų£ŁŲ§Ł Ų± Ł ŲØŁŁŲ© ŲØŁŲŗŲ© Python ŲŖŲ³ŲŖŲ®ŲÆŁ Ų§ŁŁŁ Ų§Ų°Ų¬ Ł ŲŖŲ¹ŲÆŲÆŲ© Ų§ŁŁŲ³Ų§Ų¦Ų· Ų§ŁŁŲØŁŲ±Ų© LMMs Ł Ų«Ł GPT-4o Ł Ł OpenAI ŁGemini Ł Ł Google ŁŲŁ Ų£ŁŁŲ§Ų¹ Ł Ų®ŲŖŁŁŲ© Ł Ł Ų§Ų®ŲŖŲØŲ§Ų±Ų§ŲŖ CAPTCHA ŲŖŁŁŲ§Ų¦ŁŁŲ§. ŲŖŲ¹ŲŖŁ ŲÆ Ų§ŁŲ£ŲÆŲ§Ų© Ų¹ŁŁ Selenium ŁŲ£ŲŖŁ ŲŖŲ© Ł ŲŖŲµŁŲ Ų§ŁŁŁŲØ ŁŁŲŖŁŲ§Ų¹Ł Ł Ų¹ ŲµŁŲŲ§ŲŖ Ų§ŁŁŁŲØ ŁŲŁ Ų§Ų®ŲŖŲØŲ§Ų±Ų§ŲŖ...
nodriver
NODRIVER nodriver ŲŖŁŁŲ± Ł ŁŲŖŲØŲ© ŲŗŁŲ± Ł ŲŖŲ²Ų§Ł ŁŲ© Ł Ł Ų§ŁŁ Ų³ŲŖŁŁ Ų§ŁŲŖŲ§ŁŁ ŁŁŲ“Ų· Ų§ŁŁŁŲØ ŁŲ£ŲŖŁ ŲŖŲ© Ų§ŁŁ ŲŖŲµŁŲŲ§ŲŖ ŲØŁŲŗŲ© python ŲØŁŲ§Ų¬ŁŲ© Ų³ŁŁŲ© ŲŖŲØŲÆŁ Ł ŁŲ·ŁŁŲ© ŲŖŁ Ų§Ł ŁŲ§ ā¢ ŁŲ°Ł ŁŁ Ų§ŁŲ®ŁŁŁŲ© Ų§ŁŲ±Ų³Ł ŁŲ© ŁŲŲ²Ł Ų© Undetected-Chromedriver ŁŁ python. ŁŲ§ Ł Ų²ŁŲÆ Ł Ł webdriverŲ ŁŁŲ§ Ł Ų²ŁŲÆ Ł Ł selenium ŁŁŁŲ«Ų§Ų¦Ł Ų§ŁŁŲ± ŁŁŲ§ Ų§ŁŲŖŁŲ§ŲµŁ Ų§ŁŁ ŲØŲ§Ų“Ų± ŁŁŁŲ± Ł ŁŲ§ŁŁ Ų© Ų£ŁŲ¶Ł Ų¶ŲÆ Ų¬ŲÆŲ±Ų§Ł...
libretto
Libretto Libretto is a toolkit for building robust web integrations. It gives your coding agent a live browser and a token-efficient CLI to: Inspect live pages with minimal context overhead Capture network traffic to reverse-engineer site APIs Record user actions and replay them as automation...
firefox-devtools-mcp
Firefox DevTools MCP Model Context Protocol server for automating Firefox via WebDriver BiDi through Selenium WebDriver. Works with Claude Code, Claude Desktop, Cursor, Cline and other MCP clients. Repository: https://github.com/mozilla/firefox-devtools-mcp Note : This MCP server requires a local...
skyvern
š Ų£ŲŖŁ ŲŖŲ© Ų³ŁŲ± Ų§ŁŲ¹Ł Ł ŁŁ Ų§ŁŁ ŲŖŲµŁŲ ŲØŲ§Ų³ŲŖŲ®ŲÆŲ§Ł ŁŁ Ų§Ų°Ų¬ Ų§ŁŁŲŗŲ© Ų§ŁŁŲØŁŲ±Ų© LLMs ŁŲ§ŁŲ±Ų¤ŁŲ© Ų§ŁŲŲ§Ų³ŁŲØŁŲ© š...
rebrowser-patches
šŖ Patches for undetectable browser automation This repo contains patches to enhance popular web automation libraries. Specifically, it targets the puppeteer and playwright packages. Some aspects of automation libraries or browser behavior cannot be adjusted through settings or command-line...
PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)
Summary praisonai/browser/server.py validates incoming WebSocket connections using a Chrome extension Origin check. The regex chrome-extension://a-z0-932 is applied with re.match, which only anchors at the start of the string, not the end. Any Origin header with more than 32 alphanumeric characte...
CVE-2026-55536 Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server handleconnection checks Chrome extension origins with re.match and the unanchored expression chrome-extension://a-z0-932. Extra trailing characters pass before websocket.accept, allowing startsession commands and...
chromedriver-151.0.7922.108-1.1 on GA media (moderate)
chromedriver-151.0.7922.108-1.1 on GA media Announcement ID: openSUSE-SU-2026:11484-1 Rating: moderate Cross-References: CVE-2026-19137 CVE-2026-19138 CVE-2026-19139 CVE-2026-19140 CVE-2026-19141 CVE-2026-19142 CVE-2026-19143 CVE-2026-19144 CVE-2026-19145 CVE-2026-19146 CVE-2026-19147...
MAL-2026-10484 Malicious code in browser-use-headless (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85306ba70b361b2851e9e3db9219235556e964e62ad131a7c9760ff63b49b88 The package presents itself as a headless browser-automation helper typosquat of browser-use but contains an appended credential-stealer block. On...
CVE-2026-41512
ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in BrowserAutomation::PlaywrightService. This issue has been patched in version 1.4.1...
GHSA-67GQ-6Q8C-QQH6 Summarize contains a missing authorization vulnerability
Summarize prior to 0.15.0 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...