shannon

!NOTE Shannon 3.0 is live: deeper security code analysis, more thoroughly vetted findings, a rebuilt CLI, native CI/CD, professional PDF reports, and SARIF. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths, and executes re...

GraySentinel-DSOU-45Day-2026

GraySentinel DSOU — Day 1: The Zero-Day Discovery Blue Team...

metasploit_in_termux

Metasploit Framework 6 in Termux How to Install Before In order to have updated Termux: Purge all data of Termux in Android Settings Uninstall and reinstall latest Termux version from F-Droid Version on Play Store is outdated Then launch Termux to initialization, close it force stop, not swap...

authelia

!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...

strix

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilit...

Exploit for CVE-2026-79387

CVE-2026-79387: SQL Injection in PbootCMS V3.2.5 User Manageme...

Pentest-Windows

Pentest-Windows11 v3.2 The First Windows Penetration Testing Environment on Mac M Chips 中文文档 | English README 📖 Project Overview 📝 System Introduction This environment aims to provide a ready-to-use Windows penetration testing environment. Reposting is welcome. Please indicate the original author...

Freeway

Freeway for Network Pentesting Read the article about Freeway, now on Medium !NOTE User will not be prompted to accept EULA anymore! Therefore, by downloading the software, user automatically agrees to follow every guideline specified in EULA section below. 1. Overview Freeway is a Python...

Exploit for CVE-2026-74586

CVE-2026-74586 — SCTP ASCONF newtransport use-after-free trig...

WordPress Drag and Drop File Upload for Elementor Forms plugin <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter vulnerability

Unauthenticated Arbitrary File Upload via 'type' Parameter vulnerability discovered by Adam Rayyan Aryasatya in WordPress Plugin Drag and Drop File Upload for Elementor Forms versions = 1.6.0...

PhoneSploit-Pro

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Installing dependencies Getting started Device setup...

WordPress Gallagher Website Design plugin <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Gallagher Website Design versions = 2.6.4...

Security Bulletin: Vulnerabilities in Spring, Tomcat, Netty, PostCSS might affect IBM Storage Protect Plus

Summary IBM Spectrum Protect Plus can be affected by vulnerabilities in PostCSS, Spring, HttpClient, Netty, Tomcat, Jackson-Core, RabbitMQ, urllib3, and Node.js. Vulnerabilities include exposure of sensitive information to an unauthorized actor, authentication bypass by primary weakness, improper...

hideNsneak

Bienvenido a hideNsneak. Esta aplicación ayuda a gestionar infraestructura de ataque para pentesters proporcionando una interfaz para desplegar, gestionar y desmantelar rápidamente varios servicios en la nube. Estos incluyen VMs, domain fronting, servidores Cobalt Strike, API gateways y firewalls...

wprecon

WPRecon Una potente herramienta de reconocimiento y escaneo de vulnerabilidades para WordPress, basada en plantillas Características • Instalación • Uso • Arquitectura • Plantillas 📋 Resumen WPRecon es una herramienta moderna de reconocimiento de seguridad para WordPress, construida con Go, que...

CTFs

CTFs Writeups / Files for some of the Cyber CTFs that I've done I've also included a list of CTF resources as well as a comprehensive cheat sheet covering tons of common CTF challenges !NOTE There is now a web mirror of this repo at hackback.zip Table of Contents Resources YouTube Channels Practi...

WordPress Quotes llama plugin < 3.1.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Pablo González Pérez in WordPress Plugin Quotes llama versions 3.1.6...

TuxResponse

TuxResponse v1.1 Respuesta a Incidentes en Linux TuxResponse es un script de respuesta a incidentes para sistemas Linux escrito en bash. Puede automatizar actividades de respuesta a incidentes en sistemas Linux y permitirle evaluar sistemas rápidamente, sin comprometer los resultados. Normalmente...

Turbolist3r

Estado del Proyecto Tenga en cuenta que no estoy apoyando activamente este proyecto. Puede que regrese a la investigación de subdominios en algún momento, pero mis intereses de seguridad se encuentran en otro lugar en este momento y mi tiempo está dividido entre otras cosas. Si encuentra un...

PrivKit

PrivKit Una colección de Archivos de Objetos Beacon BOF para comprobaciones de escalada de privilegios locales en Windows. Descripción PrivKit es una herramienta de código abierto que permite a los equipos rojos y probadores de penetración identificar rápidamente vectores comunes de escalada de...