noapi-google-search-mcp

noapi-google-search-mcp [email protected] Si quieres apoyar noapi-google-mcp o gpt-oss-20B/120B-Vision y otros modelos de código abierto en desarrollo, por favor contribuye a mi fondo de cómputo en GPU: se necesitan alrededor de $3000. Si encuentras esto útil, considera apoyar el desarrollo...

XSS-Scanner

XSS Scanner Cross-Site Scripting XSS es una de las vulnerabilidades de aplicaciones web más conocidas. Incluso tiene un capítulo dedicado en el proyecto OWASP Top 10 y es una vulnerabilidad muy buscada en programas de bug bounty. El escáner recibe un enlace del usuario y analiza el sitio web en...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

asn-search

asn-search Esta herramienta volcará la información ASN utilizando Hurricane Electric Esta herramienta se ejecuta en Docker, y puedes usar una imagen que ya he creado: root@kitploit: docker run -it --cap-add=SYSADMIN tuxotron/asn-search O puedes construir la tuya propia: root@kitploit: docker buil...

mulot

mulot -4285F4?logo=googlechrome&logoColor=white Agentic AI web pentester that drives a browser. An open-weights LLM GLM-5.2, Gemma or Qwen drives a real headless Chromium through a Burp-style toolkit and works a target the way a human pentester would. No frontier model, no agent running inside a...

CVE-2026-13832

An use after free flaw was found in the Headless component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513822378...

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that's designed to gain surreptitious access to a victim's email correspondence via the Google API. "In this campaign, the attackers focused their attention on corporate email communications hosted on Gmail,...

DEBIAN-CVE-2026-12027

Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Remote Code Injection

Overview convert-svg-core is a package that supports converting SVG into another format using headless Chromium. Affected versions of this package are vulnerable to Remote Code Injection via sending an SVG file containing the payload. PoC: js const convert = require'convert-svg-to-png'; const...

Directory Traversal

Overview convert-svg-to-png is a package for converting SVG to PNG using headless Chromium. Affected versions of this package are vulnerable to Directory Traversal. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show the file content as a...