wsh

wsh wsh pronounced woosh is a web shell generator and command line interface. This started off as just an http client since interacting with webshells is a pain. There's a form, to send a command you have to type in an input box and press a button. I wanted something that fits into my workflow...

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

Elite

Obsoleto Temporalmente El proyecto padre Covenant ya no requiere una aplicación de cliente. Elite ha quedado temporalmente obsoleto. Utilice en su lugar la interfaz web incluida con el proyecto Covenant. Es posible que Elite se actualice eventualmente para ponerse al día con el proyecto Covenant...

inspector

MCP Inspector A developer tool for inspecting Model Context Protocol MCP servers. It ships as a single package, @modelcontextprotocol/inspector, that provides three ways to inspect a server: Web — a Vite + React + Mantine single-page app with a Node backend. CLI — a scriptable command-line client...

spyse.py

spyse.py Python API रैपर और कमांड-लाइन क्लाइंट जो spyse.com पर होस्ट किए गए उपकरणों के लिए है। "Spyse इंटरनेट सुरक्षा पेशेवरों, कॉर्पोरेट और दूरस्थ सिस्टम प्रशासकों, SSL/TLS एन्क्रिप्शन प्रमाणपत्र प्रदाताओं, डेटा केंद्रों और व्यावसायिक विश्लेषकों के लिए पूर्ण DAAS डेटा-एज़-ए-सर्विस समाधानों का एक...

Weblate: SSRF via URL Parser Differential in `normalize_request_url` (wlc)

The Weblate CLI client wlc was found to be vulnerable to Server-Side Request Forgery SSRF due to a differential in URL parsing between the urllib and urllib3 libraries. The vulnerability was present in the normalizerequesturl function, which was meant to validate that outgoing API requests stayed...

EUVD-2023-1221

Malicious code in bioql PyPI...

CVE-2024-36066

The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CMP includes password-based MAC as one of the options for message integrity and authentication the...

CVE-2023-29194

Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently create a keyspace containing / characters such that from that point on, anyone who tries to view keyspaces from VTAdmin will receive an error. Trying to list all the keyspaces...

Pulsar - Network Footprint Scanner Platform - Discover Domains And Run Your Custom Checks Periodically

Pulsar is an automated network footprint scanner for Red Teams, Pentesters and Bounty Hunters. Its focused on discovery of organization public facing assets with minimal knowledge about its infrastructure. Along with network data visualization, it attempts to give a basic vulnerability score to...