bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

Vulnerability fixed in Apache HTTP Server

Apache has addressed a vulnerability in the Apache HTTP Server, specifically in the modhttp2 module versions 2.4.55 through 2.4.70 and the modh2 module versions 2.0.8 through 2.0.42. The vulnerability involves a concurrency issue in the assignheaders function of both the modhttp2 and modh2 module...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

bxss

Bxss - Blind XSS Scanner 🚀 Description Bxss is a high-performance Blind XSS scanner that automates the detection of blind XSS vulnerabilities in web applications. ✨ Features Injects Blind XSS payloads into custom headers & parameters Supports multiple HTTP methods PUT, POST, GET, OPTIONS High-spe...

haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

udpx

Fast and lightweight, UDPX is a single-packet UDP scanner written in Go that supports the discovery of over 45 services with the ability to add custom ones. It is easy to use and portable, and can be run on Linux, Mac OS, and Windows. Unlike internet-wide scanners like zgrab2 and zmap, UDPX is...

ssrfuzz

SSRFUZZ SSRFuzz is a tool to find Server Side Request Forgery vulnerabilities, with CRLF chaining capabilities Why? I wanted to write a tool in Golang for concurrency I wanted to fuzz parameters for SSRF vulnerablities, as well as fuzz both paths and parameters for CRLF injections I was inspired ...

kernel: s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects

A flaw was found in the Linux kernel's s390/vfio-ap component. Two functions, vfioapmdevprobe and vfioapmdevforqueue, access a list of apmatrixmdev objects without holding the required mutex. This concurrency issue could allow an attacker to cause kernel memory corruption or a use-after-free...

surf

Surf - Escalate your SSRF vulnerabilities on Modern Cloud Environments surf allows you to filter a list of hosts, returning a list of viable SSRF candidates. It does this by sending a HTTP request from your machine to each host, collecting all the hosts that did not respond, and then filtering th...

react2shell

React2Shell Go Version React2Shell is a high-performance vulnerability scanner written in Go, specifically designed to detect Server-Side Remote Code Execution RCE vulnerabilities in Next.js applications CVE-2025-55182 & CVE-2025-66478. This tool improves upon existing proof-of-concept scripts by...

kernel: s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects

A flaw was found in the Linux kernel's s390/vfio-ap component. Two functions, vfioapmdevprobe and vfioapmdevforqueue, access a list of apmatrixmdev objects without holding the required mutex. This concurrency issue could allow an attacker to cause kernel memory corruption or a use-after-free...

kernel: s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects

A flaw was found in the Linux kernel's s390/vfio-ap component. Two functions, vfioapmdevprobe and vfioapmdevforqueue, access a list of apmatrixmdev objects without holding the required mutex. This concurrency issue could allow an attacker to cause kernel memory corruption or a use-after-free...

hacks

Hacks Hacky one-off scripts, tests etc...

can-i-take-over-xyz

Disclaimer ⚠️ The authors of this document take no responsibility for correctness. This project is merely here to help guide security researchers towards determining whether something is vulnerable or not, but does not guarantee accuracy. This project heavily relies on contributions from the...

CVE-2026-68511

Paaster is a pastebin application. Prior to version 3.3.0, Paaster's "view once" burn-after-reading paste mode can be bypassed with concurrent requests. The check that's supposed to enforce single-use is a plain read followed by a separate write, with no atomicity, so multiple simultaneous reques...

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ !WARNING Gitleaks is feature complete. I'm not merging new features into Gitleaks. Future releases will be security patches only. I'm shifting my focus to Betterleaks Gitleaks is a tool for detecting secrets like passwords, API keys, and tokens in g...

dirsearch

DirSearch This software is a Go implementation of the original dirsearch tool written by Mauro Soria. DirSearch is the very first tool I write in Go, mostly to play and experiment with Go's concurrency model, channels, and so forth : Purpose DirSearch takes an input URL -url parameter and a...

CVE-2026-68511

Paaster is a pastebin application. Prior to version 3.3.0, Paaster's "view once" burn-after-reading paste mode can be bypassed with concurrent requests. The check that's supposed to enforce single-use is a plain read followed by a separate write, with no atomicity, so multiple simultaneous reques...

cngo

cngo v1 Fast Golang Tool take a filename with domains and get cname for every domain s Install $ go get -u github.com/yghonem14/cngo Basic Usage cngo accepts only text files: $ cngo -f /targets/spotify.txt creativeservice.spotify.com - creativeservicespotify.s3.amazonaws.com crashdump.spotify.com...

Zin

Version 1.0 😎 Zin 😎 A Payload Injector for bugbounties written in go Features Inject multiple payloads into all parameters Inject single payloads into all parameters Saves responses into output folder Displays Status Code & Response Length Can grep for patterns in the response Really fast Easy to...