46805 matches found
domainim
DOMAINIM Features โข Usage โข Installation โข Usage โข Contributing โข Additional Notes Domainim is a fast domain reconnaissance tool for organizational network scanning. The tool aims to provide a brief overview of an organization's structure using techniques like OSINT, bruteforcing, DNS resolving...
pwndoc
PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...
dnstake
DNSTake A fast tool to check missing hosted DNS zones that can lead to subdomain takeover. What is a DNS takeover? DNS takeover vulnerabilities occur when a subdomain subdomain.example.com or domain has its authoritative nameserver set to a provider e.g. AWS Route 53, Akamai, Microsoft Azure, etc...
dnstake
DNSTake ไธๆฌพ็จไบๆฃๆต็ผบๅคฑๆ็ฎก DNS ๅบๅ๏ผๅฏ่ฝๅฏผ่ดๅญๅๅๆฅ็ฎก๏ผ็ๅฟซ้ๅทฅๅ ทใ ไปไนๆฏ DNS ๆฅ็ฎก๏ผ DNS ๆฅ็ฎกๆผๆดๅ็ๅจๅญๅๅ๏ผsubdomain.example.com๏ผๆๅๅ็ๆๅจๅ็งฐๆๅกๅจ่ฎพ็ฝฎไธบๆไธชๆไพๅ๏ผไพๅฆ AWS Route 53ใAkamaiใMicrosoft Azure ็ญ๏ผ๏ผไฝๆ็ฎกๅบๅๅทฒ่ขซ็งป้คๆๅ ้คๆถใๅ ๆญค๏ผๅฝ่ฏทๆฑ DNS ่ฎฐๅฝๆถ๏ผๆๅกๅจไผ่ฟๅ SERVFAIL ้่ฏฏใ่ฟไฝฟๅพๆปๅป่ ่ฝๅคๅจๅๆฌไฝฟ็จ็ๆๅกไธๅๅปบ็ผบๅคฑ็ๆ็ฎกๅบๅ๏ผไป่ๆงๅถ่ฏฅ๏ผๅญ๏ผๅๅ็ๆๆ DNS ่ฎฐๅฝใยน ๅฎ่ฃ ไปไบ่ฟๅถๆไปถๅฎ่ฃ ็ฎๅๆนๆณ๏ผไฝ ๅฏไปฅไปๅๅธ้กต้ขไธ่ฝฝ้ข็ผ่ฏ็ไบ่ฟๅถๆไปถ๏ผ่งฃๅๅๅณๅฏ่ฟ่ก๏ผ...
muad-dib v2.12.0
Installation | Usage | Features | VS Code | CI/CD Version francaise Why MUAD'DIB? npm and PyPI supply-chain attacks are exploding. Shai-Hulud compromised 25K+ repos in 2025. Existing tools detect threats but don't help you respond. MUAD'DIB combines 22 parallel scanners 278 detection rules, a...
threatspec
threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...
laravel-threat-detection v1.7.2
Laravel Threat Detection Security monitoring and attack logging for Laravel. Detect and log SQL injection, XSS, RCE, directory traversal, bot scanners and/wp-admin-style recon probes โ every hostile request recorded to your database with full application context. It's an IDS, not a WAF: it never...
sbomlyze v0.5.3
sbomlyze git diff for your SBOM. Compare two Software Bills of Materials and see what changed between builds, versions, and releases. sbomlyze compares component hashes, not only version strings. When an attacker swaps a package without bumping its version, sbomlyze flags it. Generators and...
malcom
Malcom - Malware Communication Analyzer Malcom is a tool designed to analyze a system's network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate wit...
HTTP-Basma
Adaptive Fingerprinting: HTTP-Basma's Multi-Stage Probing for Granular Server Differentiation HTTP-Basma is live at https://httpbasma.netomize.ca/ Introduction In the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability...
drinkme
drinkme drinkme is a shellcode test harness. It reads shellcode from stdin and executes it. This allows pentesters to quickly test their payloads before deployment. Formats drinkme can handle shellcode in the following formats: "0x" "\x" "x" "" For example, NOP could be represented as any of...
TCPViewer v1.14.0
TCP Viewer A simple, native packet viewer for Mac. Website ยท Download ยท Docs ยท Releases TCP Viewer captures and reads network packets on macOS. It uses system libpcap for capture and Wireshark libraries for deep packet details. Features Native macOS app, built with AppKit Built on top of Wireshar...
hosts v3.16.111
!IMPORTANT Cloning this repository can take a long time! You probably just want to start with the latest version, not its whole history since 2018. Therefore you probably want to use git clone --depth 1 ... to save significant time. !NOTE With the exception of issues and PRs regarding changes to...
hdwebmobile-photo-video-reviews
HDWebmobile ็ ง็ไธ่ง้ข่ฏ่ฎบ ไธๆฌพ WooCommerce ๆไปถ๏ผๅ ่ฎธๅฎขๆทๅจไบงๅ่ฏ่ฎบไธญ้ๅ ็ ง็ๅ็ญ่ง้ข๏ผๅนถ็ดๆฅๆพ็คบๅจไบงๅ้กต้ข็่ฏ่ฎบๅ่กจไธญใ WordPress.org๏ผ https://wordpress.org/plugins/hdwebmobile-photo-video-reviews/ ๏ผ็ญๅพ ้ฆๆฌกๆไบค๏ผ ่ฆๆฑ๏ผ WordPress 6.9+ใWooCommerceใPHP 7.4+ ่ฎธๅฏ่ฏ๏ผ GPLv2 ๆๆด้ซ็ๆฌ ๆญคๆไปถๅญๅจ็ๅๅ ไธๆฌพ็ซๅโCustomer Reviews for WooCommerceโๆไปถ้ๅธฆไบไธไธช็ฌ็ซ็ AJAX...
rehex
Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...
creepy-plugins
creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...
checkov v3.3.16
Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...
WordPress Core <6.5.2 - Cross-Site Scripting
WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. id: CVE-2024-4439 info: name: WordPress Core 6.5.2 - Cross-Site Scripting author: nqdung2002 severity: hi...
vbsmin
VBSmin VBScript minifier Features โฌ๏ธ Remove extra whitespace Trailing whitespace Leading whitespace Blank lines Inline extra spaces ๐ฌ Remove comments Single quote start of the line Single quote inline REM 1๏ธโฃ One-line Line splitting underscore Colon Quick start Quick install root@kitploit: $ gem...
CVE-2026-24858
CVE-2026-24858 ๆผๆดๅๆๆฅๅ๏ผๅซๆฅๆบๅฎๆด็๏ผ Fortinet FortiCloud SSO ่ฎค่ฏ็ป่ฟๆผๆด๏ผAuthentication Bypass๏ผ ๆๆกฃ็ๆฌ ๏ผ2.0๏ผๆฅๆบๅฎๆดๆ ๆณจ็๏ผ ๆๅๆดๆฐ ๏ผ2026ๅนด1ๆ29ๆฅ ็ผๅ็ฎ็ ๏ผๅฎๅ จๅฎก่ฎกใๆๆฏๆๆกฃๅใไบไปถๅๅบ ๐ ็ฎๅฝ 1. ๆฆ่ฟฐๅๅบๆฌไฟกๆฏ 2. ๆผๆดๆบๅถ่ฏฆ็ปๅๆ 3. ๅๅฝฑๅไบงๅๅ็ๆฌ 4. CVSS ่ฏๅๅไธฅ้ๆง่ฏไผฐ 5. ๅฎ้ ๆปๅปๅบๆฏๅๆดปๅจ 6. ๆฃๆตๅๅ่ฏๆๆ ๏ผIOCs๏ผ 7. ๅณๆถๅๅบๆชๆฝ 8. ๅฎๅ จๅ ๅบๅปบ่ฎฎ 9. ๅ่่ตๆๅๆฅๆบ ๐ ๆฆ่ฟฐๅๅบๆฌไฟกๆฏ 1.1 ๆผๆดๆ่ฆ CVE-2026-24858 ๆฏ...