pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

nomore403

NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...

sh00t

A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or task management...

changeme

changeme A default credential scanner. About changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials. change...

dirtyZero

dirtyZero Простой инструментарий для кастомизации, использующий CVE-2025-24203. Поддерживает iOS 16.0 – iOS 18.3.2. Последний релиз • Discord сервер • Наш сайт Установка Пожалуйста, убедитесь, что ваше устройство поддерживается перед использованием. Обратитесь к таблице ниже. Версия ОС| Статус...

faraday_plugins

Install pip install faraday-plugins Commands List Plugins List all plugins and if its compatible with command or/and report Optional params: -cpf / --custom-plugins-folder PATH: If given will also look for custom plugins on that path faraday-plugins list-plugins Test autodetect plugin from comman...

Kali-Setup

Kali 사용자 정의 스크립트 이 스크립트 아이디어는 원래 g0tmi1k https://github.com/g0tmi1k/os-scripts에서 가져왔습니다. 저는 이 스크립트의 기초에 대한 공로를 주장하지 않습니다! 그렇지만, 원래 버전에 비해 훨씬 더 많은 도구를 추가하고 많은 오류를 수정했습니다. 이 스크립트를 제 취향에 맞게 유지 관리하고 업데이트하고 있습니다. 파이썬으로 kali.py로 다시 작성했습니다. 이제 실행과 유지 관리가 정말 쉽습니다. 스크립트의 처음 몇 가지 변수를 원하는 대로 편집하세요 실행: pytho...

Win11Debloat

Win11Debloat Win11Debloat — это лёгкий и простой в использовании PowerShell-скрипт, который позволяет быстро очистить и настроить вашу среду Windows без необходимости установки! С его помощью можно удалять предустановленные приложения, отключать телеметрию, убирать навязчивые элементы интерфейса ...

Mandela-Legacy

경고! 이 프로젝트는 Mandela Rewritten으로 대체되어 단계적으로 폐지됩니다! 향후 업데이트는 해당 저장소를 이용해 주세요! Mandela CVE-2022-46689로 구동되는 iOS 커스터마이제이션 앱. 탈옥 불필요. 면책 조항 기기 손상에 대해 책임을 지지 않습니다. 이 앱을 사용함으로써 발생하는 모든 위험은 사용자 본인에게 있습니다. 빌드 방법 git clone https://github.com/BomberFish/Mandela.git cd Mandela make...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

chiasmodon

Chiasmodon Chiasmodon is an OSINT tool that allows users to gather information from various sources and conduct targeted searches based on domains, Google Play applications, email addresses, IP addresses, organizations, URLs, and more. It provides comprehensive scanning capabilities, customizable...

Mandela-Classic

Mandela Rewritten Приложение для настройки iOS, работающее на основе CVE-2022-46689. Jailbreak не требуется. Отказ от ответственности Я не несу ответственности за любой ущерб вашему устройству. Используйте это приложение на свой страх и риск. Инструкции по сборке git clone...

nodesub

NODESUB Nodesub is a command-line tool for finding subdomains in bug bounty programs. It supports various subdomain enumeration techniques and provides flexible options for customization. Features Perform subdomain enumeration using CIDR notation Support input list. Perform subdomain enumeration...

CVE-2020-8423

CVE-2020-8423 Исследование основано на https://ktln2.org/2020/03/29/exploiting-mips-router/testing-environment hook.c модифицирован особенно open vmlinux версии 2.6.31...

EUVD-2026-81051

Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory databases to read, insert, or delete...

CVE-2026-92788

Coze Studio through version 0.5.1 is affected by a cross-tenant database access vulnerability in its workflow SQL customization nodes. The root cause is a missing validation that ensures table names in those nodes belong to the caller's workspace, allowing an authenticated attacker to enumerate p...

CVE-2026-92788: Incorrect Authorization

Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory databases to read, insert, or delete...

dc34-vault — Updated!

DC34 vault Application !WARNING Loading your own firmware onto your badge will wipe the light encryption key and cause your badge to enter developer mode. NOTICE: this repo is now orphaned and will be archived soon, as it is now merged into xous-core. It only existed in the bunnie github reposito...

CVE-2026-12729

The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 2.3.0. This is due to a missing capability check on the domigration function registered as the wedocsmigratebetterdocstowedocs...

GHSA-53H4-8RC4-F539 Slim has Reflected XSS in the HtmlErrorRenderer

Impact If an application uses HttpException::setTitle and/or setDescription to include untrusted/request-derived data in the error title or description e.g. "No products found matching '$query'.", an attacker could inject arbitrary HTML/JavaScript that executes in the victim's browser when they...