BloodHound-Legacy

BloodHound Legacy Edition v4 Has Been Deprecated This repository is for BloodHound Legacy version 4, which was last updated in 2023 and is no longer maintained. It will be archived in the near future. Please Use the New BloodHound Community Edition BloodHound Legacy has been replaced by the free...

semgrep-rules

semgrep-rules Welcome! This repository contains Semgrep's Community Edition rules. In addition to the rules in this repository, the Semgrep Registry offers proprietary Pro rules that offer additional language coverage, and unlock crossfile and deep dataflow analysis. Find rules: search for...

Top10

Top10 Official OWASP Top 10 Document Repository OWASP Top 10 2025 - RELEASED We have released the OWASP Top 10:2025 Final: OWASP Top10:2025 Please log any feedback, comments, or log issues here. OWASP Top 10 2021 - SUPERSEDED OWASP Top10:2021 OWASP Top 10 2017 - HISTORIC OWASP Top 10:2017 PPTX...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

TOTPAuthenticate

TOTP Authenticate Uses session handling rules to add a TOTP token to outgoing requests. For Burp Suite Enterprise Edition Please note that extensions are written by third party users of Burp, and PortSwigger makes no warranty about their quality or usefulness for any particular purpose. Usage 1...

CVE-2022-27925

CVE-2022-27925 Description On May 10, 2022, Zimbra released versions 9.0.0 patch 24 and 8.8.15 patch 31 to address multiple vulnerabilities in Zimbra Collaboration Suite, including CVE-2022-27924 which we wrote about previously and CVE-2022-27925. Originally, Zimbra called CVE-2022-27925 an...

CVE-2023-30533

POC - CVE-2023-30533 A POC for CVE-2023-30533 Copied as per: https://cdn.sheetjs.com/advisories/CVE-2023-30533: All releases of SheetJS Community Edition up to version 0.19.2 are affected. This includes: - scripts and modules on the SheetJS CDN through version 0.19.2 2 - modules published with th...

nwn-exploit

Exploit Neverwinter Nights: Enhanced Edition This repository contains PoC to exploit Neverwinter Nights: Enhanced Editions. This blogpost details vulnerabilities and exploitation. Windows version: 10.0.19045.2965 Neverwinter Night Enhanced Editions: vulnerable version 88.8193.36-13 poc-server-1.j...

CTF-All-In-One

CTF-All-In-One "The Definitive Guide to CTF Competitions" Series The Definitive Guide to CTF Competitions Pwn Edition This book "The Definitive Guide to CTF Competitions Pwn Edition" written by Yang Chao, reviewed by Wu Shi of the eee team is now available!!! Buy on JD.com Buy on Dangdang This bo...

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place. Install go install -v github.com/xm1k3/cent/v2@latest Or download from releases after installation run cent init to initialize cent with the configuration...

RustHound-CE

RustHound-CE is a cross-platform and cross-compiled BloodHound collector tool written in Rust, making it compatible with Linux, Windows, and macOS. It collects over either LDAPS or ADWS Active Directory Web Services, and generates all the JSON files that can be analyzed by BloodHound Community...

CVE-2022-27925

CVE-2022-27925 Description On May 10, 2022, Zimbra released versions 9.0.0 patch 24 and 8.8.15 patch 31 to address multiple vulnerabilities in Zimbra Collaboration Suite, including CVE-2022-27924 which we wrote about previously and CVE-2022-27925. Originally, Zimbra called CVE-2022-27925 an...

owt

Currently unstable will be updated eventually. Offensive Wifi Toolkit owt created by Brennan Mccown clu3bot This tool compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still...

dradis-ce

Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...

CVE-2026-88629-fastgpt-mcp-client-ssrf

FastGPT getTools and runTool SSRF Vulnerability Reproduction English | 简体中文 Vulnerability Description Affected Versions : FastGPT Community Edition 4.10.0 4.14.x Both the getTools and runTool endpoints under /api/support/mcp/client/ accept a url from the request body and have the server actively...

openvas-scanner

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

docker-bench-security

Docker Bench for Security The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.6.0. We are making this available as an open-source utili...

CVE-2025-49706-SharePoint-Spoofing-Vulnerability-Under-Active-Exploitation

🚨 CVE-2025-49706 – SharePoint Spoofing Vulnerability Under Active Exploitation By Aditya Bhatt – VAPT Specialist | Red Teamer 📌 TL;DR Microsoft SharePoint is under active threat. CVE‑2025‑49706, a spoofing vulnerability in SharePoint Server, has evolved from medium-severity to real-world...

Taipan

Taipan is now a sponsored project. The Community sponsor will receive access to the laset version of Taipan Community Edition. The free version is release after three months from the release date. To know more visit: https://github.com/enkomio-sponsor/info or https://taipansec.com. Latest Communi...

Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting

Open-School 3.0, and Community Edition 2.3, allows cross-site scripting via the osv/index.php?r=students/guardians/create id parameter. id: CVE-2019-14696 info: name: Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting author: pikpikcu severity: medium description: Open-School 3.0, and...