Gotanda

Gotanda Gotanda is OSINTOpen Source Intelligence Web Extension for Firefox/Chrome. This Web Extension could search OSINT information from some IOC in web page.IP,Domain,URL,SNS...etc This Repository partly the studying and JavaScript practice. Download link below. FireFox Chrome Usage Right click...

s3cXSSer

s3cXSSer This extension will help you to detect GET/POST based XSS vulnerability in any website easily , S3C - XSSER - Chrome extension How to add it to chrome or brave browser 1- Go to brave://extensions/ or chrome://extensions/ 2- enable Developer mode and click Load unpacked 3- locate the fold...

CVE-2025-24963

CVE-2025-24963 - Vitest Browser Mode - Local File Read ​CVE-2025-24963 is a medium-severity vulnerability CVSS 3.1 score: 5.9 affecting the @vitest/browser package, a component of the Vitest testing framework powered by Vite. This vulnerability arises from improper input validation in the...

crawlergo

crawlergo A powerful browser crawler for web vulnerability scanners English Document | 中文文档 crawlergo is a browser crawler that uses chrome headless mode for URL collection. It hooks key positions of the whole web page with DOM rendering stage, automatically fills and submits forms, with...

OmniSec-Hex

🛡️ OmniSec-Hex OmniSec-Hex is an advanced, high-impact cybersecurity monorepo consolidating six powerhouse client-side security and sovereign intelligence workbanks. Operating entirely within browser-local memory environments with absolute data lockdown, this ecosystem delivers cross-vertical...

Adamantium-Thief

🔓 Adamantium-Thief Get chromium based browsers: passwords, credit cards, history, cookies, bookmarks, autofill. Chrome 80 is supported! Need firefox passwords decryptor? 🌿 Examples: 🔑 Get passwords from browsers: Stealer.exe PASSWORDS 💳 Get credit cards from browsers: Stealer.exe CREDITCARDS 🕘 Ge...

CVE-2025-32407

CVE-2025-32407 Proof of concept for CVE-2025-32407: a misconfiguration in the TLS certificate validation of the Samsung Galaxy Watch app "Samsung Internet for Galaxy Watch" version 5.0.9. Description The Galaxy Watch app "Samsung Internet for Galaxy Watch" version 5.0.9, available up until Samsun...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

AutoBrowser

AutoBrowser 4.0 AutoBrowser is a tool written in python for penetration testers. The purpose of this tool is to create reportJson file and screenshots of http/s based ports on the network. you can choose between analyze Nmap reportXML file -oX or scan with Nmap, then the tool automaticly Check th...

Evtx_Log_Browser

Evtx Log xml Browser Browse through Windows evtx event logs & export to xml Latest version ishere Dependencies: .NET Framework 4.8 Powershell Version: 5.1...

CVE-2017-0037

CVE-2017-0037 Microsoft Browser Memory Corruption Vulnerability This document is about CVE-2017-0037- Microsoft Browser Memory Corruption Vulnerability. It will first introduce what a Remote Code Execution RCE is and then go over through some technical specifics. What is Remote Code Execution? A...

webauthn_tpm_portable

WebAuthn TPM Portable Credentials ⚠️ Early proof of concept. This project has not been thoroughly tested or audited. Do not use it for anything beyond experimentation. Portable, hardware-backed WebAuthn/passkey credentials that work across multiple devices using TPM 2.0. Traditional TPM credential...

crime-mapper

Enabling cyber investigations from a browser A prototype tool for mapping cyber crime Created by @UKDanielCard The experimental version is the live, bleeeding edge version Live Demo is largely where I'm storing a relatively stable version... but this is all DEV! IF YOU WANT TO REALLY TEST THIS,...

WSC2

WSC2 LAST/CURRENT VERSION: 0.1 Author: Arno0x0x - @Arno0x0x WSC2 is a PoC of using the WebSockets and a browser process to serve as a C2 communication channel between an agent, running on the target system, and a controller acting as the actuel C2 server. The tool is distributed under the terms o...

enhanced-iframe-protection

Enhanced iFrame Protection - Browser Extension Enhanced iFrame Protection EIP is a lightweight extension to automatically detect and provide verbose warnings for embedded iframe elements in order to protect against Browser-In-The-Browser BITB attacks. Screenshots In the above screenshot, a phishi...

CVE-2026-94264

The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not validate or escape some of its form shortcode attributes, which can be pointed at values taken from the visitor's own request and are then output...

EUVD-2026-108603

The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not validate or escape some of its form shortcode attributes, which can be pointed at values taken from the visitor's own request and are then output...

CVE-2026-109936 Otter Blocks < 3.2.8 - Unauthenticated Stored XSS via Dynamic Content Render Filter

The Otter Blocks WordPress plugin before 3.2.8 does not correctly bound a pattern it uses to rewrite its dynamic-content tokens while rendering blocks, so the pattern can consume the quote that closes an HTML attribute and pull adjacent unescaped data into the markup as new attributes. This allow...

CVE-2026-109936

The Otter Blocks WordPress plugin (versions before 3.2.8 ) contains an unauthenticated stored Cross-Site Scripting (XSS) vulnerability. The root cause is an improperly bounded pattern used to rewrite dynamic-content tokens during block rendering. This allows an attacker to consume the closing quo...

flash-exploit-defense-system

flash-exploit-defense-system Comprehensive multi-layer defense system against Adobe Flash CVE exploits CVE-2012-0754, CVE-2015-xxxx, CVE-2016-xxxx, CVE-2018-xxxx with browser, mobile, server, and system-level protection...