decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

dnsrecon

DNSRecon DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a...

awesome-game-security

awesome-game-security root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the projects below, perfect works of art 🫡 NeverC & NeverD — Your Compiler & Decoder for the AI Era As AI agents...

attack_monitor

Attack Monitor Attack Monitor is Python application written to enhance security monitoring capabilites of Windows 7/2008 and all later versions workstations/servers and to automate dynamic analysis of malware. Current modes mutually exclusive: Endpoint detection ED Malware analysis on dedicated...

CVE-2020-13654

CVE-2020-13654 - XWiki Platform اكتشف وأبلغ به: Astaruf الشرح الكامل: https://nstsec.com/en/posts/xwiki-xss-cve-2020-13654/ مدخل NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-13654 الثغرة لا يقوم XWiki Platform قبل الإصدار 12.8 بتطبيق ترميز HTML على الحقول التي يتحكم فيها المستخدم في محرر الملف...

b374k

b374k shell 3.2 This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser Features : File manager view, edit, rename, delete, upload, download, archiver, etc Search file,...

wig

wig - WebApp Information Gatherer wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications. The application fingerprinting is based on checksums and string matching of known files for different versions of...

openvpn v2.7.7

OpenVPN -- A Secure tunneling daemon Copyright C 2002-2026 OpenVPN Inc. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2 as published by the Free Software Foundation. To get the latest release of OpenVPN, go to:...

linux-soft-exploit-suggester

linux-soft-exploit-suggester Script to find exploits for all vulnerable software on the system, targeting software packages rather than just kernel vulnerabilities. It uses the exploit database to assess the security of packages and search for exploits to help with privilege escalation. Usage...

SUSE CVE-2026-34033

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. User-supplied content was included in notification emails without proper escaping, allowing authenticated users to inject arbitrary HTML int...

SUSE CVE-2026-84371

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From version 1.9.0 until version 2.17.7, packages/sanitize-html/index.js validates an animation value attribute as one flat URL and does not recognize that...

httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

DeTTECT

كشف التكتيكات والتقنيات ومواجهة التهديدات أحدث إصدار: 2.2.0 لبدء استخدام DeTT&CT، راجع أحد هذه الموارد: هذه الصفحة في الويكي. هذه المقالة التي كتبها Renaud Frère من NVISO تتضمن وصفًا شاملًا وحديثًا لقدرات DeTT&CT. مدونة: mbsecure.nl/blog/2019/5/dettact-mapping-your-blue-team-to-mitre-attack أو...

Linux Distros Unpatched Vulnerability : CVE-2026-80741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/log: Fix out-of-bounds read on empty message length drmlogdrawkmsgrecord accesses slen - 1 to strip the trailing newline, but len is unsigned int. If len is...

Linux Distros Unpatched Vulnerability : CVE-2026-86144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, t...

Linux Distros Unpatched Vulnerability : CVE-2026-86138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. CVE-2026-86138 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2026-86098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer...

PT-2026-86321

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Body Field Value in all versions up to, and including, 2.10.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

Linux Distros Unpatched Vulnerability : CVE-2026-18540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the...

Linux Distros Unpatched Vulnerability : CVE-2026-84989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntopng is a web-based network traffic monitoring application. In versions 6.7.0 through 6.7.260717, two REST v2 endpoints that manage ntopng's tag/badge feature...