CVE-2026-121621

A command injection vulnerability was found in Argo CD Image Updater, where a proxy URL configured on an SSH Git repository is passed unsanitized into a shell-interpreted SSH command. An attacker able to set a malicious proxy value can inject shell metacharacters to execute arbitrary commands and...

dive

dive A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image. To analyze a Docker image simply run dive with an image tag/id/digest: dive or you can dive with Docker directly: alias dive="docker run -ti --rm -v...

vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

CVE-2026-82976

A flaw in the image-customization-controller within OpenShift's bare metal provisioning stack allows an adjacent network attacker to access sensitive secrets. The controller hosts an unauthenticated HTTP file server on port 8084 that provides a browsable HTML directory listing. This listing discl...

FakeImageExploiter

FakeImageExploiter v1.4 - backdoor images.jpg.ps1 CodeName: Metamorphosis Version release: v1.4 Stable Author: pedro ubuntu r00t-3xp10it Distros Supported : Linux Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 Legal Disclamer: The author does not hold any...

Invoke-PSImage

Invoke-PSImage Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute Invoke-PSImage takes a PowerShell script and encodes the bytes of the script into the pixels of a PNG image. It generates a oneliner for executing either from a file of from the web. It can...

autotimeliner

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. AutoTimeliner runs multiple Volatility3 plugins against Windows, Linux, and macOS memory images, then merges their output into a single, sorted CSV timeline: Generic Timeline Plugin Plugin| What it captures ---|---...

unve1ler

Revealing Digital Footprints and Visual Clues on the Internet. A social engineering tool designed to seamlessly locate profiles using usernames while offering convenient reverse image search functionality. This tool is a Proof of Concept and is for Educational Purposes Only. unve1ler is a potent...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

steganography

Image Steganography Tool Simple C++ Encryption and Steganography tool that uses Password-Protected-Encryption to secure a file's contents, and then proceeds to embed it inside an image's pixel-data using Least-Significant-Bit encoding. For Linux, MacOS, and Windows systems. Encoding $...

BugBountyScanner

BugBountyScanner A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use. Low on resources, high on information output. Helpful? BugBountyScanner helped you net a bounty? Description ⚠ Note: Using the script over a VPN is highly recommended. It's recommended to run...

StegaStamp

StegaStamp: Invisible Hyperlinks in Physical Photographs Project Page CVPR 2020 Matthew Tancik, Ben Mildenhall, Ren Ng University of California, Berkeley Introduction This repository is a code release for the ArXiv report found here. The project explores hiding data in images while maintaining...

dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...

terrier

Terrier Terrier is a Image and Container analysis tool that can be used to scan OCI images and Containers to identify and verify the presence of specific files according to their hashes. A detailed writeup of Terrier can be found on the Heroku blog,...

cypher

🌹 CYPHER TOOLS 🌹 Written by TMRSWRR Version 1.0.0 All in one tools for CRYPTOLOGY. Instagram: Capture the Root 🖼️ Screenshots 🖼️ 📹 How to use 📹 Click on the image... 🧰 Features 🧰 This tool include: 📍 HASH 📍 RSA 📍 XOR 📍 AES ECC 📍 AES CBC 📍 DES ECB 📍 FERNET 📍 RC2 📍 RC4 📍 CHACHA20POLY1305 📍...

GG-AESY

Blogpost: https://redteamer.tips/introducing-gg-aesy-a-stegocryptor/ WARNING: you might need to restore NuGet packages and restart visual studio before compiling. If anyone knows how I can get rid of this problem, DM me. Manual To start off, I highly recommend to always use GG-AESY using verbose...

K2-CLI

Khao2 ██╗ ██╗ ██████╗ ██║ ██╔╝ ╚════██╗ █████╔╝ █████╔╝ ██╔═██╗ ██╔═══╝ ██║ ██╗ ███████╗ ╚═╝ ╚═╝ ╚══════╝ Every single bit. Easy to use, informative and comprehensive steganalysis suite. This is a CLI tool for my SaaS sidehustle khao2.com for steganalysis. FAQs But what really is Khao2/K2? K2 is ...

WDExtract

WDExtract Extract Windows Defender database from vdm files and unpack it This program is distributed as-is, without any warranty; No official support, if you like this tool, feel free to contribute. Features Unpack VDM containers of Windows Defender/Microsoft Security Essentials; Decrypt VDM...

witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ docker build ...

CVE-2026-121561

Label Studio before 1.23.2 label-studio-sdk before 2.1.2 contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at internal services, export as YOLO or COC...