redsails

Redsails About A post-exploitation tool capable of: maintaining persistence on a compromised machine subverting many common host event logs both network and account logon generating false logs / network traffic Based on PyDivert https://github.com/ffalcinelli/pydivert, a Python binding for...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...

opennhp

Make the Internet Invisible to Attackers OpenNHP hides your servers, ports, and domains from the public internet. Nothing answers until a client proves who it is with a single encrypted packet, so scanners, bots, and AI-driven attackers find nothing to attack. OpenNHP is a lightweight,...

meg

meg meg is a tool for fetching lots of URLs but still being 'nice' to servers. It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating. You get lots of results quickly, but non of the individual hosts get flooded with...

hackbox

HackB0x v2.0 HackBox is the combination of awesome tools and techniques. HackBox is a comprehensive and powerful tool that combines a variety of cutting-edge techniques to empower security professionals in their mission to identify and remediate vulnerabilities within web applications and network...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

gattacker

A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install npm install gattacker Usage Configure Running both components Set up variables in config.env: NOBLEHCIDEVICEID : noble...

unicorn

unicorn Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Magic Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David...

MozCache

MozCache Bash script Simple shell script to perform forensic analysis of the Mozilla-Browsers cache Firefox, Iceweasel and Seamonkey. The script orders by date the files cached from a browser of the Mozilla family using the cache version 2. Together with the name of each file the script generates...

MITMf

MITMf Framework for Man-In-The-Middle attacks This project is no longer being updated. MITMf was written to address the need, at the time, of a modern tool for performing Man-In-The-Middle attacks. Since then many other tools have been created to fill this space, you should probably be...

toutatis

Toutatis 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! Toutatis is a tool that allows you to extract information from...

wafw00f

WAFW00F The Web Application Firewall Fingerprinting Tool. — FromEnable Security -blue.svg How does it work? To do its magic, WAFW00F does the following: Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. If that is not successful, it sends a number o...

kwetza

Introduction By Chris Le Roy @brompwnie [email protected] Kwetza is a tool that allows you to infect an existing Android application with a Meterpreter payload. What does it do? Kwetza infects an existing Android application with either custom or default payload templates to avoid detection ...

INE-Web-Application-Penetration-Testing-CTF-1

INE – Web Application Penetration Testing CTF 1 Overview...

PentestGPT

!Contributorscontributors-shieldcontributors-url !Forksforks-shieldforks-url !Stargazersstars-shieldstars-url !Issuesissues-shieldissues-url !MIT Licenselicense-shieldlicense-url !Discorddiscord-shielddiscord-url PentestGPT AI-Powered Autonomous Penetration Testing Agent Published at USENIX...

CVE-2026-11396 Product Filter for WooCommerce by WBW <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via the 'filterSettingsdefaultquery' parameter of the 'filtersFrontend' AJAX action. The handler is registered as...

CVE-2026-11396

The Product Filter for WooCommerce by WBW plugin for WordPress (versions up to and including 3.4.6 ) is vulnerable to Missing Authorization leading to Information Disclosure . The issue exists in the filtersFrontend AJAX action (registered as wp_ajax_nopriv_filtersFrontend), which fails to perfor...

EUVD-2026-114617

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via the 'filterSettingsdefaultquery' parameter of the 'filtersFrontend' AJAX action. The handler is registered as...

CVE-2026-118070

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.12.5 . The root cause is insufficient input sanitization and output escaping of the 'gid' parameter . An unauthenticated attacker can forge a ROBOT PAYMENT browser-retu...

CVE-2026-118070 Welcart e-Commerce <= 2.12.5 - Unauthenticated Stored Cross-Site Scripting via 'gid' Parameter

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gid' parameter in all versions up to, and including, 2.12.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...