EyeWitness

EyeWitness - Web Screenshot Tool EyeWitness is designed to take screenshots of websites, provide server header info, and identify default credentials if known. Now powered by Chromium browser for better reliability and easier installation. 🚀 Key Features Cross-platform support - Windows, Linux,...

LdrShuffle

LdrShuffle Stealthy code execution via modification of the EntryPoint of loaded modules at runtime. Summary Windows processses have various modules loaded at runtime. Each of theses modules has a DllMain function defined, which will be invoked on process or thread creation/destruction four possib...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

LolDriverScan

LolDriverScan LolDriverScan is a golang tool that allows users to discover vulnerable drivers on their system. This tool fetches the loldrivers.io list from their APIs and scans the system for any vulnerable drivers This project is implemented in Go and does not require elevated privileges to run...

cve-lite-cli

Most tools tell you what's wrong. CVE Lite CLI tells you what to run. CVE Lite CLI 🏆 Officially recognized as anOWASP Lab Project Vulnerability scanning that starts in your terminal and fits cleanly into CI. Scan your lockfile, get copy-and-run fix commands, and ship clean code. Scan. Understand...

qu1ckdr0p2

About Rapidly host payloads and post-exploitation bins over HTTP or HTTPS. Designed to be used on exams like OSCP / PNPT or CTFs HTB / etc. Pull requests and issues welcome. As are any contributions. Qu1ckdr0p2 comes with an alias and search feature. The tools are located in the qu1ckdr0p2-tools...

claude-code-guardrails

We have since built a dedicated product to help developers manage AI permissions better, which we intend to make open source. Check it out atstoplight.ai. Claude Code Guardrails settings.json works if: You're fine editing JSON and killing Claude Code sessions every time policy changes Your securi...

harbian-audit

harbian-audit Hardening Introduction Hardened Debian GNU/Linux and CentOS 8 distro auditing. The main test environment is in debian GNU/Linux 9/10/11/12/13 and CentOS 8 and ubuntu 22, and other versions are not fully tested. There are no implementations of desktop related items in this release. T...

opensvp

======= Opensvp Introduction Opensvp is a security tool implementing "attacks" to be able to test the resistance of firewall to protocol level attack. It implements classic attacks as well as some new kind of attacks against application layer gateway called helper in the Netfilter world. For...

CVE-2025-55182-NextJS-Scanner-React2Shell-PoC

CVE-2025-55182 Exploitation Tool A comprehensive security research tool for testing Next.js React Server Components Remote Code Execution vulnerability CVE-2025-55182. Overview This toolkit provides automated detection and exploitation capabilities for CVE-2025-55182, a critical RCE vulnerability...

Intel-Linux-Processor-Microcode-Data-Files

Intel Processor Microcode Package for Linux About The Intel Processor Microcode Update MCU Package provides a mechanism to release updates for security advisories and functional issues, including errata. In addition, MCUs are responsible for starting the SGX enclave on processors that support the...

React2Shell-Vulnerability-Verification-Script

React2Shell Vulnerability Verification Script verifyreactvulnerability.py What is this script? This is a simple, standalone Python script created to help you quickly determine if your project is affected by the critical React2Shell vulnerability also known as CVE-2025-55182. It performs a two-lev...

CVE-2024-11680_PoC_Exploit

CVE-2024-11680 PoC Exploit This repository contains a Proof of Concept PoC exploit for CVE-2024-11680, a critical vulnerability in ProjectSend r1605 and older versions. The exploit targets an improper authentication flaw due Privilege Misconfiguration issues. Features Exploits improper auth to...

EUVD-2026-100897

Koha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.pl handler accepts the jobid request parameter for op=cud-delete and passes it to C4::Scheduler::removeatjob without validating it. Schedule::At::remove substitutes the supplied job ID into an atrm...

CVE-2026-105106 Koha authenticated OS command injection in tools/scheduler.pl via the jobid parameter when deleting a scheduled task

Koha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.pl handler accepts the jobid request parameter for op=cud-delete and passes it to C4::Scheduler::removeatjob without validating it. Schedule::At::remove substitutes the supplied job ID into an atrm...

CVE-2026-105106

The Koha library is vulnerable to OS command injection within the Task Scheduler deletion path. The tools/scheduler.pl handler accepts a jobid parameter for op=cud-delete and passes it to C4::Scheduler::remove_at_job without proper validation. Specifically, Schedule::At::remove substitutes the un...

pylane

pylane 简体中文 Pylane is a python vm injector with debug tools, based on gdb and ptrace. Pylane uses gdb to trace python process, inject and run some code in its python vm. Usage use inject command to inject a python script in an process: pylane inject use shell command to inject an interactive shel...

CVE-2026-87902

CVE-2026-87902 - WordPress Core Unauthenticated LFI → RCE Validation Lab Security-research material for reproducing and validating CVE-2026-87902 GHSA-7hp8-65ch-5whp in an isolated, loopback-only Docker lab: an unauthenticated local file inclusion in WordPress core page-template resolution,...

AFLplusplus

American Fuzzy Lop plus plus AFL++ Release version: 5.03c GitHub version: 5.03c Repository: https://github.com/AFLplusplus/AFLplusplus AFL++ is maintained by: Marc "van Hauser" Heuse [email protected] Dominik Maier [email protected] Andrea Fioraldi [email protected] Heiko "hexcoder...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...