react2shell-scanner

React2Shell Vulnerability Scanner A safe, non-invasive scanner for detecting React Server Components RSC and Next.js Remote Code Execution vulnerabilities CVE-2025-55182 & CVE-2025-66478. Overview This scanner helps organizations identify whether their web services are vulnerable to the React2She...

HuntCyberArk

HuntCyberArk - CyberArk Security Audit Suite A comprehensive PowerShell-based security assessment tool for CyberArk Privileged Access Management PAM platforms. Designed for offensive security professionals, red teamers, and penetration testers. This tool is designed to run REMOTELY against CyberA...

WebSecProbe

.png WebSecProbe is a security testing utility designed for web security researchers, penetration testers, and system administrators to analyze HTTP 403 Forbidden responses and access control behavior in web applications. The tool assists in identifying misconfigurations, inconsistent authorizati...

TInjA

TInjA – the Template INJection Analyzer TInjA is a CLI tool for testing web pages for template injection vulnerabilities. It supports 44 of the most relevant template engines as of September 2023 for eight different programming languages. TInjA was developed by Hackmanit and Maximilian Hildebrand...

frp

frp README | 中文文档 Sponsors frp is an open source project with its ongoing development made possible entirely by the support of our awesome sponsors. If you'd like to join them, please consider sponsoring frp's development. Gold Sponsors The complete IDE crafted for professional Go developers The...

PyShell

PyShell PyShell is Multiplatform Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operati...

CVE-2026-20700

dyld-signing-oracle-poc A controlled exploration of dyld's page-in linking and chained fixup machinery as a PAC signing oracle, in the context of CVE-2026-20700. On arm64e, every function pointer is hardware-authenticated. The goal here is to show that dyld itself can be directed — through a...

fraud-bridge

Intro fraud-bridge helps bypassing restrictive censorship environments that block direct TCP or UDP connections, by setting up ICMP, NTP or DNS over IPv4 or IPv6 tunnels. It automatically patches TCP MSS option to achieve a non-fragmented stream of packets known as MSS-clamping to gain performanc...

CVE-2022-36946

CVE-2022-36946 Reported-by: Domingo Dirutigliano and Nicola Guerrera While we were working on firegex, our application firewall for CTF Attack-Defence competitions, we stumbled upon a few kernel panics. This strange behavour was than isolated and anlayzed, leading to the discovery of this potenti...

Cloak

Cloak is a pluggable transport that enhances traditional proxy tools like OpenVPN to evade sophisticated censorship and data discrimination. Cloak is not a standalone proxy program. Rather, it works by masquerading proxied traffic as normal web browsing activities. In contrast to traditional tool...

coalmine

Cloud Canary Token Management — Deploy, monitor, and rotate deceptive credentials across AWS and GCP to detect unauthorized access. !WARNING Alpha Version — Coalmine is in early development. Basic functionality is the current priority, and the application should not be considered fully security...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

phone-deck

phone-deck Turn a spare Android phone or any device with a browser into a self-hosted control deck and remote desktop for your Linux workstation — over your private Tailscale network, with no third-party apps. It started as "what do I do with an old phone?" and became a control plane for a Hyprla...

catphish

CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation bundle install Current Algorithms...

SocialFish

SocialFish v3.0 Modern Dynamic Phishing Toolkit SocialFish v3.0 brings powerful new features for cloning modern login pages, capturing cookies, and intercepting 2FA codes with a live operator panel. 🆕 What's New in v3.0 Playwright Browser Automation — Clone modern JS-heavy login pages Full Cookie...

LCSAJdump

LCSAJdump Universal Graph-Based Framework for Automated Gadget Discovery LCSAJdump is a static analysis framework designed to discover Return-Oriented Programming ROP and Jump-Oriented Programming JOP gadgets. Unlike traditional scanners, LCSAJdump is architecture-agnostic and employs a graph-bas...

depx

depx Malicious package & supply-chain intelligence Features • Installation • Usage • Running depx • JSON • Join Discord depx is a fast, passive supply-chain intelligence CLI. It tells you whether a package is known malicious hijacked publishes, credential stealers, install-script backdoors by...

KsDumper

🔴 This repo is outdated due to the Capcom driver being patched 🔴 Thanks to mastercodeon314 there's now a port working on Windows 11. Enjoy ! https://github.com/mastercodeon314/KsDumper-11 KsDumper I always had an interest in reverse engineering. A few days ago I wanted to look at some game...

nmap-vulners

nmap-vulners Turn an nmap service scan into a ranked list of CVEs, exploits and what is being attacked in the wild. One NSE script that takes the software nmap already identified, asks the Vulners database what is known about it, and prints the answer inside the scan report - worst first, by what...

PRET

PRET - Printer Exploitation Toolkit Is your printer secure? Check before someone else does... PRET is a new tool for printer security testing developed in the scope of a Master's Thesis at Ruhr University Bochum. It connects to a device via network or USB and exploits the features of a given...