hubble

Welcome to HubbleStack!! You can file an issue here Follow us on Twitter! Development Below are sample instructions to setup a dev environment: 1. virtualenv myvirtualenv 2. source myvirtualenv/bin/activate 3. pip install -r requirements.txt 4. sudo python setup.py develop 5. sudo hubble...

clients

Bitwarden Client Applications This repository houses all Bitwarden client applications except the mobile applications iOS | android. Please refer to the Clients section of the Contributing Documentation for build instructions, recommended tooling, code style tips, and lots of other great...

vulnknox

VulnKnoX VulnKnox es una herramienta de línea de comandos potente escrita en Go que se integra con la API de KNOXSS. Automatiza el proceso de probar URLs en busca de vulnerabilidades de Cross-Site Scripting XSS utilizando las capacidades avanzadas del motor de KNOXSS. Características Soporta...

guardian-cli

🔐 Guardian AI-Powered Penetration Testing Automation Platform Guardian is an enterprise-grade AI-powered penetration testing automation framework that combines multiple AI providers OpenAI GPT-4, Claude, Google Gemini, OpenRouter, Requesty with battle-tested security tools to deliver intelligent,...

Cisco-CVE-2020-3452-shodan-scanner

Cisco-CVE-2020-3452-checker simple bash script of Cisco CVE-2020-3452 checker Requirement: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation Disclaimer: The script is for security analysis and research only, hence I would not be liable if it i...

waf-tester

🛡️ WAF Tester Enterprise WAF Evaluation Tool — Real attack payloads. Real results. Compliance-ready reports. WAF Tester evaluates Web Application Firewalls by sending real attack payloads to a user-supplied URL and reporting whether they are blocked. Available as a Windows desktop app Electron and...

write-ups

write-ups RCE in Github Desktop v2.9.4 RCE via gh run download GitHub CLI Claude Code: unsandboxed code execution from prompt injection via .git worktree confusion — CVE-2026-55607...

ronin

ronin Sitio web Código fuente Problemas Documentación Discord | Mastodon Descripción Roninwebsite es un conjunto de herramientas Ruby gratuito y de código abierto para la investigación y el desarrollo en seguridad. Ronin contiene muchos comandos CLI y bibliotecas Rubyronin-rb diferentes para una...

smbclient-ng

smbclient-ng, a fast and user friendly way to interact with SMB shares. !NOTE Check out the new smbclient-ng written in Go, faster and cross platform by default! https://github.com/TheManticoreProject/smbclient-ng Features acls: List ACLs of files and folders in cwd. Syntax: acls bat: Pretty prin...

apk-medit

apk-medit Apk-medit is a memory search and patch tool for debuggable apk without root & ndk. It was created for mobile game security testing. Many mobile games have rooting detection, but apk-medit does not require root privileges, so memory modification can be done without bypassing the rooting...

bitbang-cli

BitBang CLI bitbang is a single static binary remote-access multitool. From any browser: an interactive shell and file browser access to the remote machine. You can also reach web apps on that machine's network. Beyond the browser, it does TCP port forwarding, file copy, and terminal sharing. It...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

getsploit

Getsploit Search and download public exploits from theVulners database — online, or fully offline from a local index. Get an API key · Vulners search · Changelog · Architecture · Security policy !Getsploit searching online, building a local FTS5 index, then searching and mirroring...

puncia

PantheraP.uncia Official CLI utility for Subdomain Center & Exploit Observer Puncia is the official command-line client for two A.R.P. Syndicate intelligence APIs — point it at a domain, a brand, or a vulnerability ID and get structured JSON back in seconds, no browser required: 🕸️ Subdomain Cente...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

bbrecon

Este proyecto ya no recibe mantenimiento y he desconectado la infraestructura de rastreo. La audiencia no era lo suficientemente amplia como para justificar su mantenimiento. Bug Bounty Recon bbrecon es un servicio gratuito de Reconocimiento como Servicio para cazadores de bugs y investigadores d...

boha

@agntn/puzzles Puzzles y recompensas cripto públicas, como registros tipados. Pides un puzzle y obtienes su dirección, su material de clave y lo que ocurrió en la cadena. ¿Por qué? Cada hilo de puzzles tiene las mismas tres cosas: las direcciones, los premios y quién resolvió qué. Cada escáner y...

fake-sms

Fake-SMS A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy. Latest update : The tool no longer uses upmasked.com, as the service went down. We are using another provider which provides more phone number...

CVE-2024-55591-POC

--port 443 --ssl Then use the prompt: FortiOS get system status FortiOS exit Reset admin password: python3 poc.py --host --port 443 --ssl \ --reset-user Admin2 --new-pass Forti2024! Developer Telegram: @chernyzhizn Disclaimer: This tool is provided for educational and authorized testing purposes...

prefect-cve-2026-5366

PoC: CVE-2026-5366 - Git Argument Injection in Prefect GitRepository Vulnerability: git argument injection leading to RCE via commitsha plus argument injection via directories Version: vulnerable in 3.6.23, fixed in 3.6.25+ File: src/prefect/runner/storage.py Huntr:...