RayHunter-Web-Flasher

◈ RayHunter Install Wizard Interactive step-by-step guide to flashEFF's Rayhunter IMSI catcher detector on an Orbic RC400L hotspot. Auto-detects your OS. 🚀 Launch the Wizard 👉Open the Install Wizard What is Rayhunter? Rayhunter is the Electronic Frontier Foundation's open-source tool for detectin...

XSS-Catcher

XSS Catcher A blind XSS detection and XSS data capture framework that runs on Flask, VueJS and PostgreSQL. XSS Catcher is an intuitive tool that automates blind Cross-Site Scripting XSS attacks and data gathering, including screenshots. It features a user-friendly payload generator for creating...

IMSI-catcher

IMSI-catcher このプログラムは、あなたの周りの携帯電話のIMSI番号、国、ブランド、通信事業者を表示します。 /!\ このプログラムはGSMネットワークの仕組みを理解するために作られました。悪用するためではありません！ What you need Gnu/Linuxを搭載したPC 1台。動作確認済み: debian 10 Ubuntu 20.04/LinuxMint 22.2+ Kali 2025+ SDR受信機 1台。動作確認済み: アンテナ付きUSB DVB-Tキー RTL2832U 15ドル未満 OsmocomBB phone HackRF BladeRF Setup...

rayhunter

Rayhunter Rayhunter 是一个用于检测 IMSI 捕集器（也称为基站模拟器或 Stingray）的项目。它最初设计用于在名为 Orbic RC400L 的廉价移动热点上运行，但得益于社区的努力，它也可以支持其他一些设备。同时，它的设计目标是尽可能简化安装和使用流程，无论你的技术水平如何，都能轻松上手，并将误报率降至最低。 → 查看安装指南以开始使用。 → 要了解更多关于项目目标以及 IMSI 捕集器的一般信息，请查看我们的介绍性博客文章。 → 如需讨论、寻求帮助，或加入 Mattermost 频道并参与项目和社区，请查看这里列出的多种方式！ → 要更全面地了解该项目，请查...

phishing_catcher

钓鱼网站捕捉器 通过监听CertStream API中报告的证书透明度日志CTL，近乎实时地捕获可疑的TLS证书颁发，从而发现可能的钓鱼域名。"可疑"的颁发是指其域名根据配置文件计算得分超过特定阈值的证书。 这只是一个可用的概念验证PoC。欢迎贡献代码并根据您的需求进行调整。👍 安装 该脚本应可在Python2或Python3下正常运行。克隆或下载源代码后，安装依赖： pip install -r requirements.txt 配置 Phishing Catcher...

phishing_catcher

Phishing Catcher Catch possible phishing domains in near real time by looking for suspicious TLS certificate issuances reported to the Certificate Transparency Log CTL via the CertStream API. "Suspicious" issuances are those whose domain name scores beyond a certain threshold based on a...

WordPress Mail logging & Catcher plugin <= 2.1.12 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin WP Mail Catcher versions = 2.1.12...

CVE-2026-93889

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wpmailfailed' Error Message in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

EUVD-2026-91957

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wpmailfailed' Error Message in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-93889

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.1.12 . The root cause is insufficient input sanitization and output escaping within the PHPMailer 'wp_mail_failed' error message. An unauthenticated att...

CVE-2026-93889 Mail logging <= 2.1.12 - Unauthenticated Stored Cross-Site Scripting via PHPMailer 'wp_mail_failed' Error Message

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wpmailfailed' Error Message in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

radioguard

RadioGuard: Android向けゼロトラスト携帯電話防御サブサービス RadioGuard は、オープンソースで本番環境に対応し、Google Play Store に準拠した Android セキュリティアプリケーション兼バックグラウンドサブサービスです。不正な携帯基地局（IMSIキャッチャー / セルサイトシミュレータ / SMSブラスター）を能動的に検出し、敵対的な 2G/4G 携帯電話操作を識別し、信頼できない携帯電話リンク上でモバイルデバイスを保護するために暗号化された安全ルーティング隔離を展開します。 目次 1. 脅威モデルと RadioGuard が存在する理由 ...

rayhunter v0.13.0

Rayhunter Rayhunter is a project for detecting IMSI catchers, also known as cell-site simulators or stingrays. It was first designed to run on a cheap mobile hotspot called the Orbic RC400L, but thanks to community efforts, it can support some other devices as well. It's also designed to be as ea...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Aspera Orchestrator, IBM Aspera Virtual Catcher, IBM Aspera Faspex, IBM Aspera Shar

Question Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Aspera Orchestrator, IBM Aspera Virtual Catcher, IBM Aspera Faspex, IBM Aspera Shares "Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Product":"code":"SS8NDZ","label":"IBM...

MAL-2026-4424 Malicious code in @remitee-money-transfer/rmt-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f21c6601855c2f2d0a5d0761d3defe8c0ba1708dd2a67fb278c03e0abd6ba16 Package ships only a preinstall lifecycle script scripts/preinstall.sh and no functional code. On npm install, the script reads /etc/passwd and...

Malicious code in apple-internal-pki-utils (npm)

Malicious npm package published by threat actor "raya4321" as part of a coordinated typosquatting campaign impersonating Apple internal infrastructure services authentication, PKI, telemetry, CloudKit, and cloud infrastructure. All packages in this campaign execute credential-theft payloads durin...

MAL-2026-3160 Malicious code in apple-internal-pki-utils (npm)

Malicious npm package published by threat actor "raya4321" as part of a coordinated typosquatting campaign impersonating Apple internal infrastructure services authentication, PKI, telemetry, CloudKit, and cloud infrastructure. All packages in this campaign execute credential-theft payloads durin...

CVE-2025-66217

AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, an integer underflow vulnerability exists in the MQTT parsing logic of AIS-catcher. This vulnerability allows an attacker to trigger a massive Heap Buffer Overflow by sending a malformed MQTT packet with a manipulated Topic Leng...

CVE-2025-66216

AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, a heap buffer overflow vulnerability has been identified in the AIS::Message class of AIS-catcher. This vulnerability allows an attacker to write approximately 1KB of arbitrary data into a 128-byte buffer. This issue has been...

CVE-2025-66217

AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, an integer underflow vulnerability exists in the MQTT parsing logic of AIS-catcher. This vulnerability allows an attacker to trigger a massive Heap Buffer Overflow by sending a malformed MQTT packet with a manipulated Topic Leng...