pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

archerysec

Support. Your generous donations will keep us motivated. Paypal: Archery Overview of the tool Note Requirements OpenVAS OWASP Zap Burp Scanner SSLScan Nikto NMAP Vulners Installation Windows Installation Note on installation for developers and contributors Note on manual and automated installatio...

Disable-Spooler-Service-PrintNightmare-CVE-2021-34527

Disable-Spooler-Service-PrintNightmare-CVE-2021-34527 Simple batch script to disable the Microsoft Print Spooler service from system Run 1. Open the Command and Prompt with elevated privileges, administrative privileges are required to disable the service. 2. Run the script .\DisableSpooler.bat...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Remote Command Injection Vulnerability CVE-2022-30525 Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Usage python3 CVE-2022-30525.py -u http://127.0.0....

fpicker

fpicker fpicker is a Frida-based fuzzing suite that offers a variety of fuzzing modes for in-process fuzzing, such as an AFL++ mode or a passive tracing mode. It should run on all platforms that are supported by Frida. Installation Instructions Building and Running Creating a Fuzzing Harness Mode...

NorthStarC2

NorthStarC2 is an open-source command and control framework developed for penetration testing and red teaming purposes by Engin Demirbilek. NorthStar C2 Framework consists of two applications, a server-side GUI web application for managing sessions and a client-side stager to communicate with C2...

Security update for cifs-utils

This update for cifs-utils fixes the following issue: CVE-2026-104715: mount options injection via CIFS credentials-file parsing bsc1284932. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...

CVE-2026-31431

CVE-2026-31431 CVE-2026-31431 detection and testing 0x01 Quick Start Some target environments do not have Python installed, so this privilege escalation logic was rewritten in C. 1. Compile Run the following command on your Linux machine or WSL using -static is recommended to avoid GLIBC version...

cve-2026-5147-exp

cve-2026-5147 Exploitation Script For authorized vulnerability validation and lab practice: performs MySQL boolean-based blind injection EXP / INSTR or ASCII and time-based blind injection if + ascii + sleep against SQL injection endpoints, with optional extraction of version, database name,...

Salamandra

Salamandra Spy Microphone Detection Tool Salamandra is a tool to detect and locate spy microphones in closed environments. It find microphones based on the strength of the signal sent by the microphone and the amount of noise and overlapped frequencies. Based on the generated noise it can estimat...

meizu21-ghostlock-root

MEIZU 21 GhostLock Root Runtime root for the MEIZU 21 with a locked bootloader, based on GhostLock / CVE-2026-43499. This repository contains only the device-specific offsets, the prebuilt ARM64 payload, and scripts required to reproduce the setup. It does not contain Flyme OTA packages, boot.img...

xsser

XSSER Presentation From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 Demo Version 2.0 - 2015: https://www.youtube.com/playlist?list=PLIjb28IYMQgqqqApoGRCZO40vP-eKsgf Version 2.5 - 2016: https://www.youtube.com/playlist?list=PLRic6PgcrsWGkgacL6WFnSQKVRZIoofRj Version 2.75 - 2017: None Currently...

spiderfoot

SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...

Security update for mutt

This update for mutt fixes the following issue: CVE-2026-107570: heap out-of-bounds write in convertfilefromto via a crafted Content-Type header bsc1284739. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issue: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

Lepus

Lepus Lepus is a tool for enumerating subdomains, checking for subdomain takeovers and perform port scans - and boy, is it fast! Basic Usage lepus.py yahoo.com Summary Enumeration modes Subdomain Takeover Port Scan Installation Arguments Full command example Enumeration modes The enumeration mode...

Security update for poppler

This update for poppler fixes the following issues: CVE-2026-93313: JBIG2 stream processing can cause integer overflows bsc1282532. CVE-2026-93314: TrueType font processing can cause integer overflows bsc1282531. CVE-2026-102620: Data corruption via integer overflow in FoFiTrueType:cvtSfnts...

quasibot

quasiBot quasiBot 0.3 - Read Me 07.08.14 Agenda QuasiBot is a complex webshell manager written in PHP, which operate on web-based backdoors implemented by user himself. Using prepared php backdoors, quasiBot will work as C&C trying to communicate with each backdoor. Tool goes beyond average...

Security update for libheif

This update for libheif fixes the following issues: CVE-2026-84449: hOpRGB2432toYCbCr Memory Access Error / SEGV bsc1281829. Out-of-bounds read and write in derived-item and pixel-plane handling bsc1279444. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

Security update for libpng16

This update for libpng16 fixes the following issues: CVE-2026-46675: Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression bsc1283183. Changes for libpng16: version update to 1.6.59 jscPED-16190: Fixed a regression introduced in version 1.6.47 that caused...