autopentest-ai

AutoPentest An agentic pentesting MCP server that automates web application penetration testing using the full OWASP Web Security Testing Guide and PortSwigger Web Security Academy technique references. Point it at a target — it crawls your app, maps every endpoint, then spawns role-specialized...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure 📖 Full Documentation • 🔬 Technical Analysis • ⚡ Quick Commands 🎯 CVE-2025-14847 Summary MongoBleed is a critical memory disclosure vulnerability in MongoDB's network transport...

brutus

The Brutus Exploitation Framework An educational exploitation framework shipped on a modular and highly extensible multi-tasking and multi-processing architecture. Table of Contents Introduction Demos Installation Usage Features Documentation MAC Address Management ARP Network Scanner ARP Spoofin...

authkeysync

AuthKeySync Automatically synchronize SSH public keys from remote URLs to your servers 📖 Full Documentation The Problem Managing SSH access across multiple servers is painful: Team members join or leave, and you need to update authorizedkeys on every server Developers rotate their SSH keys, and n...

httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

httpgrep

الوصف أداة Python سريعة وغير متزامنة تفحص خوادم HTTPS وتبحث عن سلاسل نصية أو أنماط regex في أجسام وترويسات استجابات HTTP. تستقبل مضيفًا واحدًا، أو عناوين URL، أو نطاقات CIDR، أو نطاقات IP، أو ملفات؛ وتفحص منافذ متعددة لكل هدف منفذ واحد، قوائم مفصولة بفواصل أو نطاقات، مع الكشف التلقائي عن TLS مقاب...

Admin-Panel_Finder

Admin Panel Finder A burp suite extension that enumerates infrastructure and application Admin Interfaces. OWASP References: Classification : Web Application Security Testing 02-Configuration and Deployment Management Testing OTG v4 : OWASP OTG-CONFIG-005 WSTG : WSTG-CONF-05 Why should I use this...

HashCheck

PasswordHashCheck This project aims to assist in the search for leaked passwords while maintaining a high level of privacy using the k-anonymity method. To achieve this, the APIs of different services are used, sending only a part of the Hash of the password we want to check, for example, the fir...

Zydra

Zydra Zydra is a file password recovery tool and Linux shadow file cracker. It uses the dictionary search or Brute force method for cracking passwords. Supported Files RAR Files Legacy ZIP Files PDF Files Linux Shadow Files zydra can find all the user’s password in the linux shadow file one after...

DriverBuddyReloaded

Driver Buddy Reloaded Table of Contents Driver Buddy Reloaded Table of Contents Installation Quick Usage Advanced Usage About Driver Buddy Reloaded Finding DispatchDeviceControl Labelling WDM and WDF Structures Finding and Decoding IOCTL Codes Flagging Functions Finding DeviceName Dumping Pooltag...

CVE-2026-93616-check

Check Point Security Management RCE non authentifiée — Script de détection de vulnérabilité Une vérification non authentifiée de l'état de correctif pour CVE-2026-93616, la traversée de répertoire non authentifiée dans le serveur Check Point Security Management CPM qui atteint Runtime.exec,...

CMD_Bypass_Assessment

CMD Bypass Method Analysis CMD Bypass Method Analysis is a PowerShell script that automatically tests CMD bypass methods on Windows systems and evaluates the results. The script checks for various CMD bypass methods and saves the results to a text file, providing security recommendations. Use To...

AIX360

AI Explainability 360 v0.3.0 ✨ NOUVEAU : IBM Research a publié une nouvelle boîte à outils In-Context Explainability 360 ICX360 qui étend l'explicabilité aux LLM , notamment en ce qui concerne l'entrée fournie au LLM. Allez y jeter un œil ! 🚀✨ La boîte à outils AI Explainability 360 est une...

linux-kernel-exploitation

استغلال نواة لينكس مجموعة من الروابط المتعلقة بأمان نواة لينكس واستغلالها. يتم التحديث كل شهرين. طلبات السحب مرحب بها أيضًا. تابع @andreyknvl على X، و @[email protected] على Mastodon، أو @andreyknvl على Bluesky لتلقي إشعارات بالتحديثات. اشترك في @linkersec على Telegram، X، Mastodon، Bluesky،...

power_analysis

Power analysis attack over RSA Index Index Introduction Power Analysis Attacks RSA: A Short Introduction RSA Example Equipment Measuring Power: A Short Introduction Ohm's Law Kirchhoff's Voltage Law KVL Voltage Divider Shunt Resistor Example Power Measurement Fast Exponentiation Fast Exponentiati...

linWinPwn

linWinPwn - Swiss-Army knife for Active Directory Pentesting using Linux Description linWinPwn is a bash script that wraps a number of Active Directory tools for enumeration LDAP, RPC, ADCS, MSSQL, Kerberos, SCCM, vulnerability checks noPac, ZeroLogon, MS17-010, MS14-068, object modifications...

scarce-apache2

ScaRCE Framework - CVE-2021-41773 Hunter This tool can scan websites with CVE-2021-41773 Vulnerability that are affecting Apache2 Webserver, ScaRCE can run too for executing Remote Command Injections at the webservers that found from the scanning method Only if the MODCGI is Enabled at the target...

evine

Evine Interactive CLI Web Crawler. Evine is a simple, fast, and interactive web crawler and web scraper written in Golang. Evine is useful for a wide range of purposes such as metadata and data extraction, data mining, reconnaissance and testing. If you like the project, give it a star. It forces...

evine

Evine زاحف ويب تفاعلي لواجهة الأوامر CLI. إيفين هو زاحف ويب ومستخرج بيانات ويب بسيط وسريع وتفاعلي، مكتوب بلغة Golang. إيفين مفيد لمجموعة واسعة من الأغراض مثل استخراج البيانات الوصفية والبيانات، وتنقيب البيانات، والاستطلاع، والاختبار. إذا أعجبك المشروع، قم بإعطائه نجمة. فهذا يجبرني على تطويره!...

class-dump

class-dump class-dump est un outil en ligne de commande permettant d'examiner la partie Objective-C des fichiers Mach-O. Il génère les déclarations des classes, catégories et protocoles. C'est la même information que celle fournie par 'otool -ov', mais présentée comme des déclarations Objective-C...