keeweb

Password Manager KeeWeb Password Manager🔑 KeeWeb is a browser and desktop password manager which is capable of opening up existing KeePass database kdbx files, or creating new vaults to store your important credentials in. !Versiongithub-version-imggithub-version-uri...

Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc

Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc WolfCMS-v0.8.3.1 Cross Site ScriptingXSS Assigned CVE Number: CVE-2017-11611...

VulFi

VulFi v3.0 Introduction The VulFi Vulnerability Finder tool is a plugin to IDA Pro which can be used to assist during bug hunting in binaries. Its main objective is to provide a single view with all cross-references to the most interesting functions such as strcpy, sprintf, system, etc.. For case...

XMachOViewer

XMachOViewer Resumen XMachOViewer es un visor de Mach-O para Windows, Linux y macOS. Características Escaneo heurístico : Detecta automáticamente diversas características y anomalías en archivos Mach-O. Visor de cadenas : Muestra todas las cadenas legibles dentro del archivo Mach-O. Visor...

envsec

envsec Secure environment secrets management using native OS credential stores. Demo Features Store secrets in your OS native credential store not plain text files Cross-platform: macOS, Linux, Windows Organize secrets by context e.g. myapp.dev, stripe-api.prod, work.staging Track secret metadata...

OnionHop

OnionHop V3 OnionHop V3 is a modern, cross-platform desktop app Windows, macOS and Linux that routes your traffic through Tor. It can run Tor as a local SOCKS proxy or as a system-wide tunnel, automatically pick a working connection strategy for your network with Smart Connect , scan and apply...

Zetsu

A personal offline RAG system for offensive security knowledge. Ingest your writeups, lab solutions, bug bounty reports, and security blogs, then query them in natural language during engagements. No cloud, no SaaS, your knowledge stays yours. What it does ZETSU turns your accumulated knowledge...

CVE-2020-23586

CVE-2020-23586 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" vulnerability found in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028"which allows an unauthenticated, remote attacker to conduct a...

007-TheBond

Light Weight OSNIT Script for All platfrom Disclaimer : - DeadShot0x7 will not responsible if you misuse the script . You can download the script on various platform Linux : 1. Clone the Repository by using git clone command 2. git clone 007-TheBond 3. cd 007-TheBond 4. pip install -r...

GO-CVE-2011-4862

CVE-2011-4862 GO Exploit for CVE-2011-4862 Cross Compile with: GOOS=linux GOARCH=arm go build main.go...

xurlfind3r

xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...

CVE-2022-31299

CVE-2022-31299 Haraj Script 3.7 - Reflected XSS Exploit Title: Haraj Script 3.7 - Reflected XSS Date: 2022-06-13 CVE: CVE-2022-31299 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3 Version: 3.7 Tested on: LAMP, Ubuntu...

Azure-APIM-Cross-Tenant-Signup-Bypass

Bypass de registro entre inquilinos de Azure APIM Estado 01.12.2025: Esta vulnerabilidad sigue activa y explotable. Microsoft no ha corregido este problema y lo considera «por diseño». Aviso de seguridad GHSA-vcwf-73jp-r7mv CVE-2025-66390 Resumen Una vulnerabilidad de seguridad en el portal para...

theftfuzzer

┌┬┐┬ ┬┌─┐┌─┐┌┬┐┌─┐┬ ┬┌─┐┌─┐┌─┐┬─┐ │ ├─┤├┤ ├┤ │ ├┤ │ │┌─┘┌─┘├┤ ├┬┘ ┴ ┴ ┴└─┘└ ┴ └ └─┘└─┘└─┘└─┘┴└─ Introduction: TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations. Usage: python theftfuzzer.py -d 'http://example.com/api/data' Help: python...

fsmon

fsmon 适用于 Linux、Android、iOS 和 macOS 的底层文件系统监控工具。 作者 ：pancake @ nowsecure 许可证 ：MIT 设计目标用户： 系统管理员和事件响应人员 安全研究人员和取证分析师 调试 I/O 密集型应用的开发人员 对观察文件系统访问行为感兴趣的逆向工程师 安装 在 macOS 上，现在可以通过 brew 安装，命令如下： brew tap nowsecure/fsmon https://github.com/nowsecure/fsmon brew install nowsecure/fsmon/fsmon 或者直接运行...

cve-2020-35717

CVE-2020–35717 zonote allows XSS via crafted note, with resultant Remote Code Execution because Node.js integration is enabled. Steps to exploit the vulnerability Download any zonote affected version Open zonote app Import xss-rce.znt in zonote via Menu Open Hover over the different links in...

Tiredful-API

什么是 Tiredful API？ Tiredful API 是一个故意设计存在漏洞的应用。本 Web 应用旨在帮助开发者、QA 或安全专业人员了解由于不安全的编码实践而导致的 Web 服务（REST API）中的缺陷。 谁可以使用 Tiredful API？ Web 开发者 Web 渗透测试人员 安全专业人员 学生 Tiredful API 包含哪些内容？ 我尝试覆盖了大部分漏洞，但我确信我们还遗漏了一些漏洞。如果你知道任何适合包含在其中的良好漏洞，请与我联系。目前，我包含了以下漏洞： 信息泄露 不安全的直接对象引用 访问控制 限流 SQL 注入（SQLite） 跨站脚本...

CVE-2023-30256

Webkul Qloapps 1.5.2 - Cross-Site Scripting XSS Webkul QloApps 1.5.2: Vulnerable to XSS on two Parameter emailcreate and back Exploit - Proof of Concept POC XXS: 'back' Parameter Payload Parameter back – Plain text: xss onfocus=alert1 autofocus= xss Payload Parameter back – URL Encoded:...

SimpleRemoter

SimpleRemoter 简体中文 | 繁體中文 | English ⚠️ Unmaintained & Legal Notice / 停止维护与合规声明 !CAUTION This project is NO LONGER MAINTAINED. Use at your own risk. 本项目已停止维护，不再更新，请自行承担使用风险。 ⚖️ Compliance Reminder / 合规提醒 Legal Use Only: Unauthorized remote access is strictly prohibited. Comply with all local laws...

SpiderSuite

SpiderSuite is an advance cross-platform and multi-feature web crawler designed for security professionals. For more information visit SpiderSuite's website. Installation and Usage Spider Suite is designed for easy installation and usage even for first timers. First, download the package of your...