Parsero

What's Parsero? Parsero is a free script written in Python which reads the Robots.txt file of a web server and looks at the Disallow entries. The Disallow entries tell the search engines what directories or files hosted on a web server mustn't be indexed. For example, "Disallow: /portal/login"...

CVE-2024-41651

Blind SSRF to RCE Exploit - PrestaShop 8.1.7 This document outlines a Blind SSRF to RCE exploit on a fresh PrestaShop 8.1.7 docker installation. Prerequisites Ensure you have at least an outdated module installed, for example: psfacetedsearch Download the original package: Download psfacetedsearc...

gcp_scanner

Descargo de responsabilidad Este proyecto no es un proyecto oficial de Google. No cuenta con el respaldo de Google y Google específicamente renuncia a todas las garantías sobre su calidad, comerciabilidad o idoneidad para un propósito particular. GCP Scanner Este es un escáner de recursos de GCP...

bashacks

bashacks What? bashacks is a collection of bash functions likely to be useful for programmers, security analysts, and general users who need low-level operations. In fact, there is nothing really new in bashacks; all functions are written using existing software in UNIX-like systems. However, it...

mXtract

mXtract mXtract es una herramienta de código abierto basada en Linux que analiza y vuelca la memoria. Está desarrollada como una herramienta de pruebas de penetración; su propósito principal es escanear la memoria en busca de claves privadas, direcciones IP y contraseñas mediante expresiones...

chaos-mesh

Chaos Mesh is an open source, cloud-native Chaos Engineering platform for Kubernetes. It uses Kubernetes custom resources to define, orchestrate, and observe controlled fault injection against workloads, infrastructure, cloud services, and applications. Chaos Mesh is a Cloud Native Comp...

CVE-2026-88062 OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a self-consistency check before...

EUVD-2026-75705

OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a self-consistency check before...

CVE-2026-88062

OmniRoute (open-source AI gateway) versions 3.8.49 and earlier are affected by a remote code execution flaw in the POST /api/acp/agents custom ACP agent endpoint. Attacker-controlled binary and versionCommand values pass a self-consistency check and a limited metacharacter filter (tokenizeVersion...

open-sammy

SAMMY Open Source v2 This repository hosts the open source version of SAMMY - the OWASP SAMM tool. https://owasp.org/www-project-open-sammy/ License This project is licensed under the Creative Commons Attribution-ShareAlike 4.0 International License. See the LICENSE file for details. SAMMY v2 The...

livewire-honeypot

Livewire Honeypot A high-interaction honeypot that masquerades as a vulnerable Laravel/Livewire application. It captures exploit attempts targeting known Livewire CVEs, stores uploaded malicious files webshells and remote code execution RCE payloads with SHA-256 deduplication, and optionally...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

yamaha-smaf-player

Yamaha SMAF Player C++ by Akustikrausch Andreas Wendorf a small, dependency-free player for Yamaha SMAF ringtones .mmf in c++. you hand it one of those files that made your samsung, sharp, or panasonic go deedle-deedle-dee in 2004, and it hands you clean stereo audio. no phone, no firmware, no...

PoC

PoC Repo for proof of concept exploits and tools. BMCRSCDRCE Unauthenticated remote command execution exploit for BMC Server Automation's RSCD agent. The exploit works against servers affected by CVE-2016-1542 detected by Nessus. This is now a Metasploit module, see...

draytek-arsenal

Draytek Arsenal: Observability and hardening toolkit for Draytek edge devices. Advanced attackers are increasingly choosing edge devices as targets. However, these devices are controlled by closed-source software known as firmware, often distributed in a proprietary format. This is an added...

rastrea2r

.. image:: https://github.com/rastrea2r/rastrea2r/blob/master/logo.png :align: center :alt: logo .. image:: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :target: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :alt: travis-ci for master branch .. image::...

CVE-2026-89043

creationtimestamp| type| source ---|---|--- 2026-09-10 19:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6qvntudj22 2026-09-10 20:09:01+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv6u6yq6fm2r...

CVE-2026-80874

creationtimestamp| type| source ---|---|--- 2026-09-10 19:10:07+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117248321435298878 2026-09-10 19:20:05+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mv6rhi4tke2e...

CVE-2026-52098

creationtimestamp| type| source ---|---|--- 2026-09-10 19:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6qvllffn2j 2026-09-10 20:08:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv6u5vkoqd2f...

ios-mac-app

Proton VPN for iOS and macOS Copyright c 2025 Proton Technologies AG Dependencies This project uses Swift Package Manager for all of it's dependencies. Allow Xcode to resolve packages before running any target. Third-party dependencies ACKNOWLEDGEMENTS.md Setup Enable Git LFS on your machine Clon...