tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

VK-Scraper

VK Scraper vk-scraper is a command-line application written in Python that scrapes and downloads VK user's / community's data. Use responsibly. To get a better understanding of how it works, head to the docs. Features Scrape photos Scrape videos both uploaded and external Scrape saved photos Scra...

Scavenger

Scavenger - OSINT Bot - 3.0 bot in action Intro Just the code of my OSINT bot searching for sensitive data leaks on paste sites. email:password combinations are always collected. It detects sensitive information based on the file searchterms.txt and some regexes in classes/utility.py. Search term...

OLIMPOX Authentication Bypass Info Disclosure

The vulnerability of the software for the training and control system “OLIMPOX” is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential information and modify data within...

CRM Platform SQL Injection

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

Solitude

Solitude Solitude is a privacy analysis tool that enables anyone to conduct their own privacy investigations. Whether a curious novice or a more advanced researcher, Solitude makes the process of evaluating user privacy within an app accessible for everyone. Important Note Prior to installing...

Digital Inspector Unauthorized Access

The vulnerability of the “Digital Inspector” software architecture is related to the use of pre-installed account data. Exploiting this vulnerability can allow an unauthorized actor to gain unauthorized access to protected information...

CVE-2026-87937

The Drupal Central Authentication System (CAS) Server module is vulnerable to an open redirect (CWE-601) due to insufficient validation of the service URL during the logout process. This flaw allows an attacker to redirect users to untrusted sites, potentially facilitating data source spoofing. T...

awesome-privacy

Awesome Privacy List of free, open source and privacy respecting services and alternatives to privative services. About | Contributing | Quotes | Discussions !IMPORTANT Anonymity, Privacy, and Security are often used interchangeably, but they actually represent distinct concepts. It is important ...

Directum RX Data Compromise

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

Directum HR Pro Disclosure

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

CVE-2026-87945

The miniorange_saml module for Drupal is vulnerable to an Open Redirect (CWE-601) because it fails to sufficiently validate certain user-supplied URLs before performing redirects. This flaw affects versions 0.0.0 through 3.2.0 . An attacker could exploit this to redirect users to an external webs...

CVE-2026-87950

The Drupal SAML SSO - Service Provider module (versions 0.0.0 to 3.2.0 ) is vulnerable to a Use of Hard-coded Credentials (CWE-798) issue. The module contains embedded credentials necessary for its functionality, which could allow an attacker to retrieve embedded sensitive data or disclose inform...

CVE-2023-21036

Acropalypse detection and sanitization tools You can use the python script acropalypsedetection.py or the yara rule acropalypsedetection.yar to detect cropped images affected by acropalypse: $ for i in testimgs/; do python3 acropalypsedetection.py $i; done testimgs/windows10snippingtool1cropped.p...

CVE-2025-31161

CVE-2025-31161 is a critical severity vulnerability allowing attackers to control how user authentication is handled by CrushFTP managed file transfer MFT software. Affected versions: 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 Exploit summary: Remote and unauthenticated HTTP requests to...

shotlooter

Introduction Shotlooter tool is developed to find sensitive data inside the screenshots which are uploaded to https://prnt.sc/ via the LightShot software by applying OCR and image processing methods. +-------------------+ IMAGE FILE |!/usr/bin/python | +--------------------+ | +-----SENSITIVE...

azurelinux

Azure Linux 4 An open-source Linux distribution built and optimized forAzure, with sources derived from Fedora Linux. Azure Linux provides a secured, reliable operating system for virtual machines, containers, and bare-metal platforms. Azure Linux is built on a robust open-source foundation from...

PoC-CVE-2024-44349

PoC-CVE-2024-44349 Vulnerability found and tested in Anteeo WMS - v4.7.31 The vulnerability allows threat actors to craft an SQL command inside the username parameter and disclose data in the underlying database. The impacted versions of ANTEEO B2B WMS are from v.4.7.x to v.4.7.34 excluded. Usage...

PowerExfil

PowerExfil A collection of custom data exfiltration scripts for Red Team assessments. ExfilCards.ps1 - This script will exfil credit card numbers via base64 encoded strings to a custom DNS server. ExfilDataStreamDNS.ps1 - This script will exfil the entire contents of a file via base64 encoded...

pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...