pentest-tools

pentest-tools A collection of custom security tools for quick needs. Important note ‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: apk-analyzer...

ilk-toolkit

IoT Lab KiiT ToolKit ilk-toolkit A Toolkit designed for IoT Lab KiiT to convert any Linux Distro into a Red Team Machine. This project was necessitated by the unreliability of 'kali-linux-everything' repo on certain installations and the subsequent depracation of 'katoolin' repo in Debian-based...

gobuster

Gobuster 💻 Introduction A fast and flexible brute-forcing tool written in Go Gobuster is a high-performance directory/file, DNS and virtual host brute-forcing tool written in Go. It's designed to be fast, reliable, and easy to use for security professionals and penetration testers. ✨ Features 🚀...

Pentest-Cheat-Sheet

Hoja de referencia de Pentest Hay muchas hojas de referencia por ahí, pero esta es la mía. Es un trabajo en progreso ahora mismo, y vive como un borrador que se actualiza mucho , a veces. Lo empecé mientras estudiaba para mi OSCP, pero ahora está evolucionando para incluir cosas más prácticas que...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

catnip

Cat-Nip Herramienta Automatizada de Pentesting Básico Esta herramienta realizará tus tareas básicas de pentesting como recopilación de información, auditoría e informes, de forma completamente automática. Guía de Uso Descargar / Clonar Cat-Nip git clone https://github.com/baguswiratmaadi/catnip I...

catnip

Cat-Nip Automated Basic Pentest Tool this tool will make your basic pentesting task like Information Gathering, Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone Cat-Nip git clone https://github.com/baguswiratmaadi/catnip Go Inside Cat-Nip Dir c...

Sudomy

Sudomy Enumeración y Análisis de Subdominios Sudomy es una herramienta de enumeración de subdominios para recolectar subdominios y analizar dominios mediante reconocimiento automatizado avanzado framework. Esta herramienta también se puede utilizar para actividades de OSINT inteligencia de fuente...

AlienTec-Recon-Tool

AlienTec 👽 Recon-Tool ❤️ Your Support Makes a Difference Thanks for using the AlienTec Recon-Tool! This is a passion project and will always be available as a free, open-source version. Your support helps accelerate the development of the planned Pro version and keeps this free tool maintained. If...

GO-2026-5052 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, telegraf, crossplane-provider-azure-sql, crossplane-provider-azure-authorization, gobuster, crossplane-provider-azure-managedidentity, crossplane-provider-family-azure, goreleaser, nfpm, nuclei, splunk-otel-collector,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: k3s, docker-cli, render-template, mockgen, kpt, kind, harbor-registry, step-kms-plugin, pluto, aws-otel-collector, k3d, docker-cli-buildx, src, ratify, dex, gobuster, kubernetes-dashboard-auth, guac, conftest, amazon-cloudwatch-agent-operator, gobump, ini-file,...

web-exploitation-lab

🌐 Web Exploitation Lab Payloads, techniques et cheatsheet w...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: mockery, k3s, yunikorn-web, buf, aws-node-termination-handler, harbor-scanner-trivy, kind, speedtest-go, smokescreen, vault-k8s, k3d, cri-tools, cue, openbao-k8s, prometheus-pushgateway, nri-consul, terraform-provider-azapi, cloud-sql-proxy, boring-registry,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: linkerd2-cni-plugin, chisel-fips, grafana-mimir, apache-exporter, metacontroller, crossplane-aws-provider-fips, manifest-tool, nri-f5-fips, jupyterhub-k8s-image-awaiter, cert-manager-openshift-routes-fips, pgpool2exporter, milvus, azure-workload-identity-webhook,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: linkerd2-cni-plugin, nri-memcached, manifest-tool, nri-f5-fips, azure-workload-identity-webhook, longhorn-share-manager-fips, minio-operator, amazon-cloudwatch-agent-operator-fips, buildtools, kubevirt-cdi-controller-fips, kiam, helm-exporter-fips, gitlab-kas,...

[SECURITY] Fedora 42 Update: gobuster-3.8.2-2.fc42

Directory/File, DNS and VHost busting tool written in Go...

[SECURITY] Fedora 43 Update: gobuster-3.8.2-1.fc43

Directory/File, DNS and VHost busting tool written in Go...

Fedora: Security Advisory (FEDORA-2025-36b3527937)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : gobuster (2025-36b3527937)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-36b3527937 advisory. Fixes CVE-2025-58188, unretire package and update to 3.8.2. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 43 : gobuster (2025-723b7f2990)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-723b7f2990 advisory. Fixes CVE-2025-58188, unretire package and update to 3.8.2. Tenable has extracted the preceding description block directly from the Fedora security advisory...