Exploit for CVE-2026-58115

node-red-scanner Local triage for CVE-2026-58115, the 10...

pg_dump Code Execution

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

pg_dump Code Execution

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Linux Bluetooth Buffer Overflow DoS

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

C-Game-Modding-Utility

C/C++ Game Modding Utility This utility aims to make writing mods for 5th/6th generation console games in C/C++ easier. It handles all the tedious setup, letting you focus on actually writing code. No manual cross-compiler setup. No manual ISO rebuilding. No complicated testing workflows. Feature...

prowler

Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...

MASTG-Hacking-Playground

MASTG Hacking Playground Welcome to the MASTG Hacking Playground which is part of the OWASP Mobile Application Security MAS project. The MASTG Hacking Playground is a collection of educational iOS and Android mobile apps, that are intentionally build insecure in order to give practical guidance t...

Chimera

Chimera is a shiny and very hack-ish PowerShell obfuscation script designed to bypass AMSI and antivirus solutions. It digests malicious PS1's known to trigger AV and uses string substitution and variable concatenation to evade common detection signatures. Chimera was created for this write-up an...

invisible_playwright

Playwright gets caught by anti-bots and captchas. This one runs on an anti-detect Firefox with an undetected fingerprint, compatible with your existing Playwright code. How it works Anti-bots ask two questions, and reCAPTCHA, hCaptcha and Cloudflare Turnstile score the answers. invisibleplaywrigh...

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

stegbrute

stegbrute stegbrute is a fast steganography brute force tool written in Rust Dependencies Stegbrute cannot run without steghide!, to install steghide run : apt-get install -y steghide if you are not in a debian distribution you can download it from steghide website Installation stegbrute can be...

wolfGuard

WolfGuard VPN with FIPS 140-3 cryptography WolfGuard is the wolfSSL FIPS-compliant refactor of Linux kernel-based WireGuard, originally designed and authored by Jason Donenfeld. Usage is essentially identical. There are two principal components to WolfGuard, the wolfguard.ko kernel module and the...

depx

depx Malicious package & supply-chain intelligence Features • Installation • Usage • Running depx • JSON • Join Discord depx is a fast, passive supply-chain intelligence CLI. It tells you whether a package is known malicious hijacked publishes, credential stealers, install-script backdoors by...

chomp-scan

Chomp Scan A scripted pipeline of tools to simplify the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs. If you've found any bugs using this tool, please let me know! Scope Chomp Scan is a Bash script that chains together the fastest and most effective tools in...

procrustes

Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...

DNSStager

What is DNSStager? DNSStager is an open-source project based on Python used to hide and transfer your payload using DNS. DNSStager will create a malicious DNS server that handles DNS requests to your domain and return your payload as a response to specific record requests such as AAAA or TXT...

Compose Aperisite

AperiSite Requirements Docker; Docker Compose; Less time to prepare environment, more time to compose. Download git clone https://gitlab.com/AperiKube/compose-aperisite aperisite pushd aperisite/ git submodule update --init --recursive git submodule foreach --recursive git checkout master Prepare...

murphysec

中文 | EN MurphySec CLI is used for detecting vulnerable dependencies from the command-line, and also can be integrated into your CI/CD pipeline. Features 1. Analyze dependencies being used by your project, including direct and indirect dependencies 2. Detect known vulnerabilities in project...

nibble

Nibble is a CLI tool for local network scanning that focuses on speed and ease of use. Select a network interface, and it scans your local subnet. Lists hosts, hardware manufacturer, open ports and their services. ⚡ Lightning fast, scans using lightweight threads 🔒 Safe, does not need admin acces...

magescan

Mage Scan The idea behind this is to evaluate the quality and security of a Magento site you don't have access to. The scenario when you're interviewing a potential developer or vetting a new client and want to have an idea of what you're getting into. Installation .phar Download the magescan.pha...