GoogleRecaptchaBypass — Updated!

Google Recaptcha Solver We love bots ❤️, but Google doesn't. So, here is the solution to bypass Google reCAPTCHA. Solve Google reCAPTCHA less than 5 seconds! 🚀 This is a Python script to solve Google reCAPTCHA using the DrissionPage library. Selenium implementation will be added soon. Recent...

nightcrawler — Updated!

Nightcrawler An autonomous penetration testing agent that runs entirely on a smartphone. Drop the phone on a network, walk away, and it discovers hosts, maps services, finds vulnerabilities, and generates a pentest report — all without cloud connectivity. root@kitploit: ░█▄░█ █ █▀▀ █░█ ▀█▀ █▀▀ █▀...

tcpreplay v4.6.1

Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like tcpdump and Wireshark. It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the...

ship-safe v9.7.5

The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...

awesome-connected-things-sec — Updated!

🔐 Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. Contents Hardware Attacks Fundamentals Interface Attacks Memory Extraction Side-Channel and Fault Injection PCIe and DMA Attacks Wireless Protocols RF...

CVE-2026-72924

A flaw was found in GitHub CLI. The gh codespace ports forward command, by default, exposes forwarded services on all local network interfaces. This allows a network-adjacent attacker to access these services through the user's machine while port forwarding is active, even if the original...

cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack

A flaw was found in the 'go bug' command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system's temporary directory could exploit this by creating a symbolic link symlink with one of these predictable...

cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy

A flaw was found in the Go command cmd/go. A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the go command may then download and execute without proper verification...

Important: Red Hat Security Advisory: golang security update

An update for golang is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-60004-Gitea-RCE-PoC

🫖 CVE-2026-60004 — Gitea RCE PoC A direct, single-target validation tool for Gitea's diffpatch Git-hook remote code execution vulnerability. This repository contains the focused AfterDark validator: one script, one target, one run. There are no discovery, reconnaissance, verification, or other...

CVE-2026-60004-Gitea-Validator

🫖 CVE-2026-60004 Gitea Validator A standalone discovery, assessment, and contract-correlated validation tool for the Gitea diffpatch Git-hook remote code execution vulnerability. scanner.py gives penetration testers, defenders, and security researchers one dependency-free tool for: 🔎 Passive Gite...

dracut: dracut: Root code execution via DHCP options command injection

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...

awspwn

AWSPwn - AWS attack-path automation Enumerate an account's IA...

FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files

A flaw in FreeRDP's file parser incorrectly treats lines starting with a forward slash / as command-line options. If a victim opens a maliciously crafted .rdp file, an attacker can silently inject CLI flags to execute arbitrary code, expose local filesystems, or bypass certificate validation...

android-security-awesome — Updated!

android-security-awesome A collection of Android security-related resources. 1. Tools 2. Academic/Research/Publications/Books 3. Exploits/Vulnerabilities/Bugs Tools Online Analyzers 1. Appknox - not free 2. Virustotal 3. NowSecure Lab Automated - Enterprise tool for mobile app security testing...

sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

Important: Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update

An update for sg3utils is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...