WhatsMyName

WhatsMyName WhatsMyName WMN es un conjunto de datos mantenido por la comunidad que te permite averiguar si un nombre de usuario existe en cientos de sitios web. Si estás investigando a una persona de interés, verificando una identidad en línea, o simplemente sientes curiosidad por tu propia huell...

crowdsec

CrowdSec es una solución de seguridad de código abierto y participativa que ofrece detección y protección contra IPs maliciosas mediante crowdsourcing. Detecta y bloquea con nuestro Motor de Seguridad, contribuye a la red y disfruta de nuestra lista de bloqueo comunitaria en tiempo real...

metlo

Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...

bettercap

¡Únete a la comunidad del proyecto en nuestro servidor!...

CVE-2023-30533

POC - CVE-2023-30533 A POC for CVE-2023-30533 Copied as per: https://cdn.sheetjs.com/advisories/CVE-2023-30533: root@kitploit: All releases of SheetJS Community Edition up to version 0.19.2 are affected. This includes: root@kitploit: - scripts and modules on the SheetJS CDN through version 0.19.2...

SNMP-Brute

SNMP Brute SNMP brute force, enumeration, CISCO config downloader and password cracking script. Listens for any responses to the brute force community strings, effectively minimising wait time. Requirements metasploit snmpwalk snmpstat john the ripper Usage python snmp-brute.py -t IP Options...

ngrev

ngrev Herramienta gráfica para la ingeniería inversa de proyectos Angular. Permite navegar en la estructura de tu aplicación y observar la relación entre los diferentes módulos, proveedores y directivas. La herramienta realiza análisis estático de código , lo que significa que no necesitas ejecut...

oss-bounty-program

ProjectDiscovery OSS Bounty Program Purpose The ProjectDiscovery OSS Bounty Program exists to democratize security by rewarding meaningful contributions from the global community. Our tools are used by researchers, defenders, and builders worldwide. This program ensures that anyone, anywhere, can...

Community-Security-Prompts

Este repositorio no tiene un README...

React Native Community CLI - Unauthenticated OS Command Injection

The Metro development server started by the React Native Community CLI binds to external network interfaces by default and exposes an unauthenticated /open-url endpoint. Affected versions pass the attacker supplied url value straight to the open helper without validating the scheme, allowing an...

Invision Community <=5.0.6 Unauthenticated RCE via Template Injection

Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller /applications/core/modules/front/system/themeeditor.php, where a protected method named customCss can be invoked by unauthenticated...

CVE-2025-20352

CVE-2025-20352 SNMP Exposure Check onesixtyone + parser Fast, safe black-box exposure check for Cisco IOS/IOS XE devices related to CVE-2025-20352 SNMP subsystem: 1. Scan your subnets for SNMP using onesixtyone with default communities. 2. Parse sysDescr.0 banners with a small Python script to fl...

100DaysofYARA

100 Days of YARA 2026 Welcome to 100 Days of YARA! This repository will act as the store for all YARA ideas created during this time. Any fun scripts, tools, or rules you write can be committed to this GitHub repository! For now, any associated blogging, walkthroughs, or other musing can be hoste...

CVE-2025-48932-Invision-Community-SQLi-Exploit

🔓 CVE-2025-48932 - Invision Community SQL Injection Exploit ⚡ Critical Vulnerability Overview CVE-2025-48932 is a critical unauthenticated blind SQL injection vulnerability discovered in Invision Community versions ≤ 4.7.20. This exploit allows remote attackers to: 🔍 Extract sensitive database...

CVE-2026-79483

FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat...

EUVD-2026-68876

FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat...

KapeFiles

KAPE Files Community-created Targets and Modules for use with KAPE Download KAPE · Report a Bug · Request Feature KapeFiles KAPE Overview KAPE is an efficient and highly configurable triage program that will target essentially any device or storage location, find forensically useful artifacts, an...

Brute-Ratel-C4-Community-Kit

Brute-Ratel-C4 This repository contains scripts, configurations and deprecated payload loaders for Brute Ratel C4 https://bruteratel.com/. Anything which is added in the deprecated folder will not be a part of the latest release of BRc4...

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place. Install root@kitploit: go install -v github.com/xm1k3/cent/v2@latest Or download from releases after installation run cent init to initialize cent with the...

community

comunidad Plugins de Volatility desarrollados y mantenidos por la comunidad. Consulta el archivo README dentro del subdirectorio de cada autor para obtener un enlace a su página de perfil de GitHub correspondiente, donde encontrarás instrucciones de uso, dependencias, información de licencia y...