socialhunter

socialhunter !IMPORTANT هذه الأداة لم تعد تعمل، ولن نتمكن من إصلاحها لأن تجاوز حماية وسائل التواصل الاجتماعي أصبح صعبًا. تقوم الأداة بزحف الرابط المحدد والعثور على روابط وسائل التواصل الاجتماعي المعطلة التي يمكن اختطافها. قد تسمح روابط التواصل الاجتماعي المعطلة للمهاجم بشن هجمات تصيد. كما يمكن أن...

halogen

Halogen is a tool to automate the creation of yara rules based on the image files embedded within a malicious document. This can assist cyber security professionals in writing detection rules for malicious threats as well as help responders in identifying with particular threat they are dealing...

SubMon

SubMon Algunos dicen que el bug bounty no solo se trata de encontrar bugs, sino de ser el "primero" en encontrarlos. Estoy construyendo esta herramienta para notificar a los cazadores cuando aparecen nuevos subdominios. Funcionalidades Puedes agregar tu objetivo favorito: nombre + dominio. Luego...

probable_subdomains

Probable subdomains Online tool: https://weakpass.com/generate/domains TL;DR During bug bounties, penetrations tests, red teams exercises, and other great activities, there is always a room when you need to launch amass, subfinder, sublister, or any other tool to find subdomains you can use to...

probable_subdomains

Probables subdominios Herramienta en línea: https://weakpass.com/generate/domains Resumen Durante los bug bounties, pruebas de penetración, ejercicios de red team y otras grandes actividades, siempre hay un momento en el que necesitas ejecutar amass, subfinder, sublister, o cualquier otra...

nodesub

NODESUB Nodesub is a command-line tool for finding subdomains in bug bounty programs. It supports various subdomain enumeration techniques and provides flexible options for customization. Features Perform subdomain enumeration using CIDR notation Support input list. Perform subdomain enumeration...

nodesub

NODESUB Nodesub est un outil en ligne de commande pour trouver des sous-domaines dans les programmes de bug bounty. Il prend en charge diverses techniques d'énumération de sous-domaines et offre des options flexibles de personnalisation. Fonctionnalités Effectuer l'énumération des sous-domaines à...

AMFDSer-ngng

AMFDSer-ngng A Burp Extender plugin, that will take deserialized AMF objects and encode them in XML using the Xtream library. Based on the original work of Khai Tran, all hail https://blog.netspi.com/ AMFDSer-ngng also utilizes part of Kenneth Hill's Jmeter source code for custom AMF...

Injectus

Injectus Herramienta simple de Python que recorre una lista de URLs probando payloads de CRLF y open redirect. ▪ ▐ ▄ ▐▄▄▄▄▄▄ . ▄▄· ▄▄▄▄▄▄• ▄▌.▄▄ · ██ •█▌▐█ ·██▀▄.▀·▐█ ▌▪•██ █▪██▌▐█ ▀. ▐█·▐█▐▐▌▪▄ ██▐▀▀▪▄██ ▄▄ ▐█.▪█▌▐█▌▄▀▀▀█▄ ▐█▌██▐█▌▐▌▐█▌▐█▄▄▌▐███▌ ▐█▌·▐█▄█▌▐█▄▪▐█ ▀▀▀▀▀ █▪ ▀▀▀• ▀▀▀ ·▀▀▀ ▀▀▀ ▀▀▀ ▀▀...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.27: golang1.27-1.27.2-0.1.hum1 aarch64, x8664 golang1.27-bin-1.27.2-0.1.hum1 aarch64, x8664 golang1.27-docs-1.27.2-0.1.hum1 noarch golang1.27-misc-1.27.2-0.1.hum1 noarch...

bug-bounty-domains

DOMINIOS DE BUG BOUNTY Dominios pertenecientes a los programas de bug bounty públicos más reputados. NO PARA PROGRAMAS NO MONETARIOS O PRIVADOS !https://assets.kitploit.com/production/public/readmes/6941/7164554a880fd0545e5dc196593b...

reactor

Reactor Reactor started as a fork of the open source project ElastAlert. The maintainer of this project should keep close tabs on the changes to ElastAlert excluding their additional alerters and ensure that any relevant bugs fixes be patched in and any useful feature ported in. Reactor is an...

rustproofing-linux

Rustproofing Linux Porting Linux Kernel Bugs to Rust This source code repository is a collection of examples accompanying the blog post at https://research.nccgroup.com/?p=18577. DO NOT USE these examples for anything but following the blog post. They intentionally contain vulnerabilities, and ev...

CVE-2025-21756

CVE-2025-21756 — Exploitation Lab For educational and authorized security research purposes only. Description CVE-2025-21756 is a use-after-free UAF vulnerability in the Linux kernel's vsock Virtual Socket subsystem, disclosed on February 26, 2025. It allows a local attacker to escalate privilege...

enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision

Summary A crafted SVG bypasses enshrined/svg-sanitize's href validation and delivers a javascript: URL through the sanitizer unchanged. The bypass exploits a semantic mismatch between XML entity resolution used during sanitization and HTML5 Named Character Reference resolution used by the browser...

LSPromise

LSPromise A complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel. It does not involve memory corruptions or race conditions, so attackers don't need to perform complex heap spraying or bypass mitigations against memory corruption vulnerabilities such ...

TLPE

This is a PoC and a writeup for CVE-2026-49881, a logic issue in the InCallController class in Android 17's Telecom service that allows an unprivileged app to gain arbitrary code execution as UID 1000 systemserver with no extra user interaction. We also show here that systemserver code execution...

ubuntu-cve-2026-31431-mitigation

Complete Guide to Updating the Kernel and kmod in Ubuntu to Fix Security Vulnerabilities CVE CVE-2026-31431 This vulnerability, also known as Copy Fail, is a logic bug in the Linux kernel that occurs in the AFALG / algifaead path. According to the discloser, an unprivileged local user can cause t...

next-16.2.4-pocs

Next.js v16.2.4 Security PoC Collection This repository collects reverse-engineered proof-of-concept material for the security issues fixed in Next.js v16.2.5. The root of the repo holds the release-window analysis, and poc/ holds one PoC bundle per advisory. This collection was reverse-engineere...

CVE-2026-31431

Copy Fail CVE-2026-31431 - Analyse complète 1. Présentation de la vulnérabilité Nom de la vulnérabilité : Copy Fail Identifiant CVE : CVE-2026-31431 Découverte / Auteurs : Xint Code Research Team s'appuyant sur les travaux de recherche fondamentaux initiaux du chercheur de Theori, Taeyang Lee. «...