redamon

Unmask the hidden before the world does An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merge...

Arjun

Arjun HTTP Parameter Discovery Suite What's Arjun? Arjun can find query parameters for URL endpoints. If you don't get what that means, it's okay, read along. Web applications use parameters or queries to accept user input, take the following example into consideration...

kubernetes-goat

Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...

CVE-2026-19591

OpenAI Codex CLI (Windows, macOS, Linux) and Codex Desktop (Windows, macOS) misclassified certain PowerShell commands as safe due to a command-safety parser that interpreted PowerShell's stop-parsing token (--%) differently than PowerShell itself. An attacker who plants instructions in a reposito...

CVE-2026-19591

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...

EUVD-2026-69394

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...

pomerium

Pomerium es un proxy inverso consciente de la identidad y el contexto. Pomerium establece conexiones seguras y sin cliente a aplicaciones web internas y otros servicios sin necesidad de una VPN corporativa. Pomerium es: Más fácil con acceso sin cliente. Más rápido por ser sin túneles y desplegado...

Reticulum

Reticulum Network Stack This repository isa public mirror. All development is happening elsewhere. To understand the foundational philosophy and goals of this system, read the Zen of Reticulum. Reticulum is the cryptography-based networking stack for building local and wide-area networks with...

docker-onion-nmap

docker-onion-nmap Use nmap to scan hidden "onion" services on the Tor network. Minimal image based on alpine, using proxychains to wrap nmap. Tor and dnsmasq are run as daemons via s6, and proxychains wraps nmap to use the Tor SOCKS proxy on port 9050. Tor is also configured via DNSPort to...

fatt

66 61 74 74 2e fingerprint all the things! More info about the fingerprinting methods, sample use-cases and research results will be added to the repo soon. Stay tuned! A script for extracting network metadata and fingerprints such as JA3 and HASSH from packet capture files pcap or live network...

cameradar

Cameradar RTSP 流访问工具 Cameradar 在授权目标上扫描RTSP端点，并使用字典攻击暴力破解其凭据和路由。 Cameradar 的功能 检测可访问目标上的开放 RTSP 主机。 检测提供 RTSP 流的设备型号。 尝试基于字典的流路由发现（例如 /live.sdp）。 尝试基于字典的摄像头凭据发现。 生成结果报告。 目录 使用 Docker 快速开始 安装二进制文件 在 Android Termux 上安装 配置 安全与负责任的使用 输出 检查摄像头访问 命令行选项与环境变量 输入文件格式 构建和贡献 常见问题 示例 许可证 使用 Docker 快速开始 安装...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

spectre-meltdown-checker

Spectre & Meltdown Checker 一个独立的 Shell 脚本，用于评估您的系统在面对自 2018 年初以来发布的多个瞬态执行 CVE 时的抵御能力，并指导您如何缓解它们。 CVE 列表 CVE| 名称| 别名 ---|---|--- CVE-2017-5753| 边界检查绕过| Spectre V1 CVE-2017-5715| 分支目标注入| Spectre V2 CVE-2017-5754| 恶意数据缓存加载| Meltdown CVE-2018-3640| 恶意系统寄存器读取| Variant 3a CVE-2018-3639| 预测存储绕过| Variant...

EUVD-2026-69393

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlle...

CVE-2026-19590

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlle...

CVE-2026-19590

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because its automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-contr...

leakdb

LeakDB LeakDB 是一套工具集，旨在帮助组织构建和部署自己的内部明文“Have I Been Pwned”类服务。LeakDB 工具集能够对多 TB 级别的泄露数据集进行规范化、去重、索引、排序和搜索，无需向单个用户分发大文件。整理后，LeakDB 可以在不到十分之一秒内搜索 TB 级的数据，并且 LeakDB 服务器暴露了一个简单的 JSON API，可以通过命令行客户端或任何 HTTP 客户端进行查询。它可以部署为无服务器配置（使用 BigQuery 后端，无索引），也可以部署为带有索引的离线/传统服务器。 LeakDB...

leakdb

LeakDB LeakDB is a tool set designed to allow organizations to build and deploy their own internal plaintext "Have I Been Pwned"-like service. The LeakDB tool set can normalize, deduplicate, index, sort, and search leaked data sets on the multi-terabyte-scale, without the need to distribute large...

Venom-JWT

Venom-JWT Penetration Tool - JWT Vulnerability and Secret Cracking Service Penetration Testing Solemn Statement: The techniques, ideas, and tools mentioned in this document are for learning and communication purposes only for security. No one shall use them for illegal purposes or for profit,...

brutespray

Brutespray 创建者：Shane Young/@x90sky && Jacob Robles/@shellfail 灵感来源：Leon Johnson/@sho-luv 描述 Brutespray 自动对发现的服务尝试默认凭据。它接收来自 Nmap（GNMAP/XML）、Nessus、Nexpose、JSON 和列表的扫描输出，然后并行对 40 多种协议进行凭据暴力破解。使用 Go 构建，具有交互式终端界面、内置字典和恢复功能。 快速安装 root@kitploit: go install github.com/x90skysn3k/brutespray/v2@latest...