darkgrid

DarkGrid – Global Threat Intelligence Dashboard OSINT threat‑intel dashboard: a 3D globe and live feed showing malicious infrastructure from public sources like AbuseIPDB and OpenPhish. https://github.com/user-attachments/assets/e4f6a4fa-6ff4-4ad1-8e5c-5b50ce6ad722 Overview DarkGrid visualizes...

cygor

Cygor General Overview Cygor is a modular asset discovery framework that brings scanning, parsing, and service enumeration together in one workflow. It replaces the patchwork of separate tools with an automated process that handles discovery, enrichment, and targeted enumeration seamlessly —...

Stormspotter

Stormspotter creates an “attack graph” of the resources in an Azure subscription. It enables red teams and pentesters to visualize the attack surface and pivot opportunities within a tenant, and supercharges your defenders to quickly orient and prioritize incident response work. Installation With...

grubcrawler

Agentic web crawler with anti-detection, vision fallback, and peer-to-peer mesh. Endpoints · Mesh · Anti-Detection · Ghost Protocol · Live Stream · MCP Tools · Quick Start · Benchmarks · Architecture Full-stack web crawling engine with JavaScript rendering, Camoufox anti-detect browser, per-reque...

Recon-Scan

Recon-Scan ReconScan is a open-source passive recon scanner with a FastAPI backend, async worker pipeline, and a single-page frontend. You can check the deployed site at https://recon-scan.vercel.app/ The point is fast signal: run a scan, get module-by-module findings, and get an AI summary that...

Reconator

Reconator is an automated reconnaissance framework. Add a target — alone or in bulk — and the worker runs 17 recon modules against it subdomain enum, dirbrute, JS/link mining, WAF fingerprint, takeover check, GF triage, and more. The dashboard shows per-module output as it lands. Stack Layer| Tec...

iKy

Description | Installation | Website | Modules | Issues | Supporting iKy Description iKy is an OSINT tool that collects information from an email address or other selectors and displays the results in a visual interface. pending update: reflects the previous frontend Video Demo Installation...

ZeroPulse

ZeroPulse A Modern Command & Control C2 Platform with Cloudflare Tunnel Integration CodeFactor 📋 Table of Contents Overview Features Architecture Prerequisites Installation Configuration Usage API Documentation Security Project Structure...

DeepAudit

DeepAudit - Your AI Security Audit Team, Making Vulnerability Discovery Accessible...

CVE-2025-23266

CVE-2025-23266 Author: Mark Mallia Target platform: Ubuntu 22.04, FastAPI v2.4.3 → patched to v2.5.1 on 2025‑10‑02 1 – In a nutshell: what does this attack involve FastAPI’s parserequest routine copies HTTP request headers into a small buffer that lives on the caller’s stack. If an attacker sends...

PCLink

PCLink Server The secure backbone for your personal PC remote control ecosystem. PCLink is a modern, web-first server designed for secure remote PC management and high-performance screen streaming. Featuring a high-performance FastAPI backend, a responsive Web UI, and an extensible plugin system...

damn-vulnerable-MCP-server

Damn Vulnerable MCP용 Cursor SSE 호환성 이 문서는 Damn Vulnerable Model Context Protocol DVMCP 프로젝트가 Cursor의 Server-Sent Events SSE 구현과 호환되도록 적용된 업데이트에 대한 개요를 제공합니다. 개요 기존 DVMCP 프로젝트는 Cursor의 SSE 구현을 지원하도록 개선되어, 챌린지 서버를 Cursor에서 직접 접근할 수 있게 되었습니다. 이로써 실제 MCP 클라이언트로 챌린지를 테스트할 수 있어 챌린지의 접근성과 현실성이 높아졌습니다. 구...

MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes

A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled --app-name basic-auth and served via uvicorn ASGI. The FastAPI permission middleware only enforces authentication on /gateway/...

FencePost

FencePost Multi-host UFW firewall dashboard. Connects to Linux hosts over SSH, parses firewall rules and listening ports, explains everything in plain English, and flags security gaps. Features Multi-host overview -- see UFW status, default policies, and active services across all hosts at a...

SubMon

SubMon Some say bug bounty isn't just about finding bugs, but being the "first" to find them. I'm building this tool to notify hunters when new subdomains appear. Features You can add your favorite target: name + domain. Then you can either click scan or schedule a scan. When the scan finishes, y...

CVE-2025-62727-Demo

CVE-2025-62727 데모 피해자Victim 설명 CVE-2025-62727의 대상 피해자는 다음과 같은 간단한 FastAPI 앱입니다: /에서 Hello World를 제공합니다. Starlette의 StaticFiles를 사용하여 /static 아래에서 정적 파일을 제공합니다. 시작 시 1024, 2048, 50176 중 N에 대해 A가 N번 반복된 텍스트 파일을 자동 생성합니다. 피해자 실행 방법 1. 선택 사항 virtualenv를 생성하고 활성화합니다. 2. 의존성을 설치합니다: root@kitploit: pip...

k4_cve-2023-41064

k4cve-2023-41064 Шаги для запуска проекта Настройка фронтенда: Перейдите в папку frontend: root@kitploit: Copier Modifier cd frontend Установите необходимые зависимости Node.js, выполнив: root@kitploit: Copier Modifier npm install Настройка бэкенда: Перейдите в папку backend: root@kitploit: Copie...

enforcement-coverage

시행 범위 형제 라우트보다 더 약한 권한 제어 를 가진 API 라우트를 찾습니다. 보안 권고에 대한 사전 지식 없이 소스만으로 Open WebUI에서 CVE-2026-45316을 발견했습니다: root@kitploit: MISMATCH POST /notes/id/pin notes.py:pinnotebyid 3/3 comparable write operations on note require hasaccesswrite; this route requires only hasaccessread POST /notes/id/update...

BadHost-CVE-2026-48710-Exploit

BadHost — CVE-2026-48710 스캐너 Starlette / FastAPI의 BadHost 인증 우회 전용 스캐너 — 인증 미들웨어가 request.scope"path" 대신 request.url.path를 읽어서, 조작된 Host 헤더로 허용된 경로를 밀수하여 인증을 우회할 수 있습니다. root@kitploit: GET /admin HTTP/1.1 Host: api.internal/health?badhost= Starlette sees request.url.path == "/health" → allowed AS...

CVE-2026-46645-Analysis-Lab

CVE-2026-46645 - SQLAdmin ajaxlookup Authorization Bypass Executive Summary This repository contains a local Docker lab for reproducing CVE-2026-46645, an authorization bypass vulnerability affecting SQLAdmin's ajaxlookup endpoint. SQLAdmin is an admin interface for SQLAlchemy models in Starlette...