bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

skyhook

Skyhook Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It comes with a pre-packaged web client that uses a blend of React, vanilla JS, and web assembly to manage file transfers. Key Links Download here See the user documentation to...

graphw00f

Credits to Nick Aleks for the logo! graphw00f - GraphQL Server Fingerprinting Table of Contents How does it work? Detections GraphQL Threat Matrix Prerequisites Installation Configuration Example Usage Fingerprinting GraphQL Detecting & Fingerprinting GraphQL Support & Issues Resources How does i...

graphw00f

क्रेडिट्स निक अलेक्स को लोगो के लिए! graphw00f - GraphQL सर्वर फिंगरप्रिंटिंग विषय सूची यह कैसे काम करता है? पहचान GraphQL खतरा मैट्रिक्स पूर्वापेक्षाएँ स्थापना विन्यास उपयोग उदाहरण GraphQL फिंगरप्रिंटिंग GraphQL का पता लगाना और फिंगरप्रिंट करना समर्थन और समस्याएँ संसाधन यह कैसे काम करता है?...

adfsbrute

adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...

CVE-2026-62249 Weblate: Restricted-component change history leaked to non-member project users through the nested `GET /api/projects/{slug}/changes/` endpoint

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, an authenticated user with access to a project can retrieve the change history of restricted components in that project through nested API change endpoints, even without...

CVE-2026-62249 Weblate: Restricted-component change history leaked to non-member project users through the nested `GET /api/projects/{slug}/changes/` endpoint

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, an authenticated user with access to a project can retrieve the change history of restricted components in that project through nested API change endpoints, even without...

CVE-2026-62249 Weblate: Restricted-component change history leaked to non-member project users through the nested `GET /api/projects/{slug}/changes/` endpoint

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, an authenticated user with access to a project can retrieve the change history of restricted components in that project through nested API change endpoints, even without...

enumy

Enumy Enumy è un eseguibile portatile ultra veloce che si inserisce nella macchina Linux di destinazione durante un pentest o CTF nella fase di post-exploitation. Eseguire enumy enumererà la macchina per vulnerabilità di sicurezza comuni. Installazione Puoi scaricare il binario finale dalla sched...

enumy

Enumy Enumy is an ultra fast portable executable that you drop on target Linux machine during a pentest or CTF in the post exploitation phase. Running enumy will enumerate the box for common security vulnerabilities. Installation You can download the final binary from the release x86 or x64 tab...

Detections-CVE-2026-31431

UMZUG NACH: https://github.com/insomnisec/publiccvedetections FÜR BESSERES LANGZEITMANAGEMENT VON ERKENNUNGSVERÖFFENTLICHUNGEN DIESES REPO WIRD IM JUNI 2026 ENTFERNT BITTE NUTZEN SIE IN ZUKUNFT DAS ANDERE REPO CVE-2026-31431 "Copy Fail" – Erkennungs- und Reaktionspaket Veröffentlicht: 2026-04-30...

pyghidra-mcp

PyGhidra-MCP - Ghidra Model Context Protocol Server Overview pyghidra-mcp is a command-line Model Context Protocol MCP server that brings the full analytical power of Ghidra, a robust software reverse engineering SRE suite, into the world of intelligent agents and LLM-based tooling. It bridges...

rita

RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...

goca

Goca is a FOCA fork written in Go, which is a tool used mainly to find metadata and hidden information in the documents its scans. These documents may be on web pages, and can be downloaded and analyzed with Goca. It is capable of analyzing a wide variety of documents, with the most common being...

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

pbscan

SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-Vulnerabilidade-de-Injeção-SQL-OOB Autor do Exploit: ersinerenler Página do Fornecedor https://code-projects.org/blood-bank-in-php-with-source-code Link do Software https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Visão...

Android-Disassembler

Android-Disassembler CodeFactor Analysieren Sie bösartige Apps auf Ihrem Telefon Wartungsstatus Die Wartung wurde wieder aufgenommen, aber das Projekt befindet sich noch in einer Wiederherstellungs- und Modernisierungsphase. Die Basis erwartet nun initialisierte Git-Submodule vor dem Build...

CVE-2026-37069

CVE-2026-37069 Offenlegung des absoluten Pfads in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php im Veno File Manager Projekt 4.4.9 ermöglicht es einem nicht authentifizierten Angreifer zu erfahren, in welchem Systemverzeichnis der Anwendungscode ausgeführt wird, indem ...