warpgate

Warpgate is a smart & fully transparent SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC bastion host that doesn't require a client app or an SSH wrapper. Set it up in your DMZ, add user accounts and easily assign them to specific hosts and URLs within the network. Warpgate will record ever...

Browser-C2

Browser-C2 Post Exploitation agent which uses a browser to do C2 operations...

pcybox-attackgraph

PCYBOX AttackGraph Build. Attack. Defend. Understand. An open source lab that runs entirely in your browser: build a simulated infrastructure, watch an attack move through it , and check whether your defense really works. Every step comes with the reason it worked, and every control says exactly...

Risk-Analysis-Editor

Risk Analysis Editor RAE English · Français Standalone tool for building and visualizing risk matrices — inherent gross risk and residual net risk — with an open, documented file format, .rae.json. ▶️ Open the app · 📖 User guide · 🎬 Video tutorials · ⬇️ Download No installation: the tool runs...

crime-mapper

Enabling cyber investigations from a browser A prototype tool for mapping cyber crime Created by @UKDanielCard The experimental version is the live, bleeeding edge version Live Demo is largely where I'm storing a relatively stable version... but this is all DEV! IF YOU WANT TO REALLY TEST THIS,...

osintnet-public

OsintNET is a browser-based OSINT platform for domain intelligence, website risk scanning, SERP discovery, email and username OSINT, image intelligence, image authenticity checks and AI image detection. Website · OSINT Tools · Best OSINT Tools · AI OSINT Tools · llms.txt · AI Prompt Map OsintNET ...

Browser-ExternalC2

Browser-EC2...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Versión: 0.4 Bytes Revealer es una potente herramienta de ingeniería inversa y análisis binario diseñada para investigadores de seguridad, analistas forenses y desarrolladores. Con funciones como vista hexadecimal,...

browsertunnel

browsertunnel Browsertunnel es una herramienta para exfiltrar datos del navegador utilizando el protocolo DNS. Lo logra abusando de dns-prefetch, una función diseñada para reducir la latencia percibida de los sitios web realizando consultas DNS en segundo plano para dominios específicos. El tráfi...

netmap.js

netmap.js Módulo rápido de descubrimiento de red basado en navegador Este proyecto ya no se mantiene. Descripción netmap.js proporciona capacidades de descubrimiento de hosts y escaneo de puertos basadas en navegador para permitirte mapear las redes de los visitantes de un sitio web. Es bastante...

webscan

webscan webscan es un escáner de IP de red basado en navegador y detector de IP local. Detecta IPs vinculadas al usuario/víctima escuchando en un canal de datos RTP a través de WebRTC y realizando un bucle de retorno al puerto a través de cualquier IP activa, así como descubriendo todas las...

Cisco ASA Inconsistent Interpretation of HTTP Requests (CVE-2022-20713)

A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct browser-based attacks against users of an affected device. This vulnerability is du...

CVE-2026-21833: Undefined Security Weakness

HCL AION is affected by a vulnerability in which the Content-Security-Policy CSP HTTP response header is not configured. CSP helps prevent attacks such as Cross-Site Scripting XSS by restricting the sources from which scripts, styles, and other resources can be loaded. The absence of this header...

Ethical-hacking-project-

Online Doctor Appointment System — Ethical Hacking Lab Project...

exploit-framework

Exploit Framework Browser-based Exploit Research Framew...

CVE-2026-15639

An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker...

vhf-morse-transmitter-monitor

📡 VHF Monitor RF Transmitter TEMPEST / EMI Side-Channel Morse Generator Author: TA1EEI Efe Işık Version: 1.3 License: MIT Open Source / Educational & Experimental 📰 Featured In & Media Coverage UK NCSC National Cyber Security Centre – Included in the CTO Weekly Summary September 2026 highlighting...

PT-2026-93977

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface...

Risk-Analysis-Editor v3.0.0

Risk Analysis Editor RAE English · Français Standalone tool for building and visualizing risk matrices — inherent gross risk and residual net risk — with an open, documented file format, .rae.json. ▶️ Open the app · 📖 User guide · 🎬 Video tutorials · ⬇️ Download No installation: the tool runs...

Ray < 2.52.0 Remote Code Execution (CVE-2025-62593)

The Ray Dashboard service running on the remote host is prior to version 2.52.0. It is, therefore, affected by a remote code execution vulnerability: - Ray's browser-based attack protection relies solely on checking that the User-Agent header starts with 'Mozilla'. The Fetch specification allows...