HashDump-BypassEDR

1 Project Overview By leveraging the extended capabilities of the system whitelisted program Reg.exe, we cleverly bypass the interception points of antivirus software, achieving the goal of bypassing EDR to dump hashes. According to actual testing, this method is effective against Windows-series...

trufflehog-explorer

TruffleHog Explorer 🕵️‍♂️ Welcome to TruffleHog Explorer, a user-friendly web-based tool to visualize and analyze data extracted using TruffleHog. TruffleHog is one of the most powerful secrets discovery, classification, validation, and analysis open source tool. In this context, a secret refers to...

prithvi

Prithvi 安全评估报告生成工具 使用方法 我们的这个项目可用于生成报告，而且非常易于使用。 它包括以下功能： 1. 我们可以添加OWASP类型及其详细建议。 2. 我们可以添加多个项目并分别进行处理。 3. 我们可以在不同项目上添加多个漏洞，并附带概念验证。 4. 生成报告时，提供文档文件（.docx）。 5. 目前我们正在尝试添加更多功能，如图表，并将很快更新。 设置 1. 在服务器上创建数据库 reporting（我们使用了XAMPP）。 2. 将 reporting.sql 导入本地服务器。 3. 下载完整源代码并解压 nodemodules。 4. 运行 index.js...

EUVD-2026-85704

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re-import workflow. The vulnerability exists because the exporter writes CSV cells using fputcsv with a NUL byte \0 as...

cypheroth

Cypheroth 自动化、可扩展工具集，对 Bloodhound 的 Neo4j 后端运行 Cypher 查询，并将输出保存为电子表格。 描述 这是一个 bash 脚本，可自动化对存储在 Neo4j 数据库中的 Bloodhound 数据运行 Cypher 查询。 我发现自己多次重新运行相同的查询（通过 Neo4j Web 界面）进行多个评估，心想一定有更简单的方法。😅 要运行的 Cypher 查询列表是完全可扩展的。下面的格式示例展示了如何添加你自己的查询。 请分享任何其他有用的查询，以便我将它们添加到这个项目中！ 已全面测试，可在 Linux、macOS 和 Windows 的...

HiddenNetworks-Python

HiddenNetworks-Python v0.9 May 2020 Hidden Networks is a new concept test based on the paper of the same name, that is programmed using Python 3.4. It facilitates the task of analysing local and remote machines within a domain, using WMI in searching for traces of connections by USB devices. With...

CVE-2026-86583

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re-import workflow. The vulnerability exists because the exporter writes CSV cells using fputcsv with a NUL byte \0 as...

CVE-2026-86583

The Import and export users and customers plugin for WordPress (versions up to and including 2.4.17 ) is vulnerable to Privilege Escalation . The root cause is an escape character mismatch during the plugin's export and re-import workflow: the exporter uses fputcsv() with a NUL byte as an escape ...

CVE-2026-86583 Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re-import workflow. The vulnerability exists because the exporter writes CSV cells using fputcsv with a NUL byte \0 as...

operative-framework

operative framework 是一个数字调查框架，你可以与多个目标交互、执行多个模块、与目标建立链接、将报告导出为 PDF 文件、为目标或结果添加备注、与 RESTful API 交互以及编写你自己的模块。 重要 该项目已使用 Rust 进行了重新设计，并在过去几个月内处于活跃开发状态。欢迎提交 PR。 路线图 功能| 状态 ---|--- 增删改查目标| ✓ 增删改查链接| ✓ 增删改查工作区| ✓ 导出为 dot 格式| ✓ 异步核心实现| ✓ 编译模块| ✓ Lua 接口| 待定 P2P 节点| 待定 REST API| 待定 TOML 配置| 待定 下载最新版本...

creepy

creepy 当前版本 1.1 作者 Yiannis Kakavas 主页 http://www.geocreepy.com 安装说明 参见 http://www.geocreepy.com 描述 地理开源情报（OSINT）工具。 Creepy 是一款地理开源情报工具。它从在线来源收集与地理位置相关的信息，并支持在地图上展示、基于精确位置和/或日期进行搜索过滤、导出为 CSV 格式或 KML 格式以在 Google 地图中进行进一步分析。 特别鸣谢 Creepy 图标：© "索伦之眼" 图像来自 deviantart 上的 blood-solice...

EUVD-2026-85506

Shop manager PHP Object Injection in Reycob Product Import Export = 2.3.0 versions...

CVE-2026-95603

The Reycob Product Import Export plugin for WordPress, specifically versions

ip-finder-cli

IPFinder CLI Command Line Interface https://ipfinder.io/ Supports Single IP Address, asn, ranges, firewall as Input Supports Bulk Exports Results to Screen or to An Output File Supports IPv4 and IPv6 Supports ASN number , RANGES , Firewall Getting Started sign up for a free account at...

kyocera-cve-2022-1026

kyocera-cve-2022-1026 Una vulnerabilidad de extracción de datos no autenticada en impresoras Kyocera, que permite recuperar la libreta de direcciones en texto claro y las contraseñas de dominio. Resumen de la vulnerabilidad A finales de 2021, durante una prueba de penetración, estaba experimentan...

heatbleeding

Test 1Password database for Heart Bleeding problems Test script for 1Password database for SSL Heart Bleeding CVE-2014-0160 To test 1Password database export it to local disk. Locate file data.1pif and run in same directory: root@kitploit: git clone https://github.com/aefimov/heatbleeding.git...

WordPress Import and export users and customers plugin <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by khanhnv in WordPress Plugin Import and export users and customers versions = 2.4.17...

Burp_Collector

Burp Collector Burp Collector is a multi-processing tool that is specifically designed to aid Pentesters and Bug Hunters in Web/Mobile Application testing. With its powerful capabilities, it streamlines the process of collecting and extracting information from Burp Suite files, empowering you to...

Masscan-Report

Masscan Report Generator A Python tool that generates interactive React-based HTML visualizations from masscan JSON output, featuring a D3.js force-directed network graph. Screenshot Features Interactive Network Graph Force-directed D3.js visualization showing network topology Hierarchical...

osTicket - Arbitrary File Read

Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export functionality. A remote attacker can submit a ticket containing crafted rich-text HTML that includes PHP filter expressions which are insufficientl...