Microweber < 1.2.17 - Cross-Site Scripting

Cross-site Scripting XSS vulnerability in the /demo/editortools/module endpoint via the 'type' parameter. id: CVE-2022-2130 info: name: Microweber 1.2.17 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross-site Scripting XSS vulnerability in the...

metta

Metta Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test mostly your host based instrumentation but may also allow you to test any network based detection and controls...

security-interview-questions

Fonti QUIZ: https://quizlet.com/231268221/general-information-security-questions-flash-cards/ SANS Cheat Sheets: https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets/ Offensive Security OSCP: https://411hall.github.io/OSCP-Preparation/...

pentaho-exploits

Exploit relativi a https://research.aurainfosec.io/pentest/pentah0wnage Nota: alcune cose potrebbero non funzionare Ringrazio il mio datore di lavoro Aura Information Security per avermi concesso il tempo per lavorare a questo progetto...

driftwood

Driftwood ⚠️ The Driftwood CLI tool is no longer supported. Please use TruffleHog instead! ⚠️ Driftwood is a tool that can enable you to lookup whether a private key is used for things like TLS or as a GitHub SSH key for a user. Driftwood performs lookups with the computed public key, so the...

routopsy

routopsy Routopsy is a toolkit built to attack often overlooked networking protocols. Routopsy currently supports attacks against Dynamic Routing Protocols DRP and First-Hop Redundancy Protocols FHRP. Most of the attacks currently implemented make use of a weaponised 'virtual router' as opposed t...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

pypykatz

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord pypykatz Mimikatz implementation in pure Python. At least a part of it : Runs on all OS...

cookie_crimes

Chrome Cookie Extraction Without Root This will print out a user's Chrome cookies. You don't need to have their password or be root to use it. nice nice nice nice nice. If you are not the kind of person who regularly gets the ability to execute code on other people's computers, you probably don't...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

ct-exposer

Discover sub-domains by searching through Certificate Transparency logs What is CT? Certificate Transparency CT is an experimental IETF standard. The goal of it was to allow the public to audit which certificates were created by Certificate Authorities CA. TLS has a weakness that comes from the...

whatfiles

whatfiles Whatfiles is a Linux utility that logs what files another program reads/writes/creates/deletes on your system. It traces any new processes and threads that are created by the targeted process as well. Rationale: I've long been frustrated at the lack of a simple utility to see which file...

process_overwriting

Process Overwriting Process Overwriting is a PE injection technique, closely related to Process Hollowing and Module Overloading. With its help, you can replace the main executable not a DLL of the target process. It works only for a newly created process - injection to existing processes is not...

burpcommander

burpcommander Ruby command-line interface to Burp Suite's REST API Usage root@kitploit: burpcommander VERSION: 1.0.1 - UPDATED: 08/29/2018 -t, --target IP Address Defaults to 127.0.0.1 -p, --port Port Number Defaults to 1337 -k, --key API Key If you require an API key specify it here -i,...

CVE-2026-66908

creationtimestamp| type| source ---|---|--- 2026-08-24 18:22:28+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/b4ptz5cw32ay2 2026-08-24 21:00:03+00:00| seen| Telegram/8ioC0-GS3hqaK0vZF92ZaP06wwac1xjhQxJkXlFfEhMVG4 2026-08-25 00:00:10+00:00| published-proof-of-concept|...

CVE-2026-66907

creationtimestamp| type| source ---|---|--- 2026-08-24 18:16:25+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/b3t23arm45stm 2026-08-24 18:29:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i3jusx6tr2icc 2026-08-24 21:00:04+00:00| seen|...

CVE-2026-71364

creationtimestamp| type| source ---|---|--- 2026-08-24 15:46:48+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117151262762627704...

exrex

EXREX Irregular methods for regular expressions. Exrex is a command line tool and python module that generates all - or random - matching strings to a given regular expression and more. It's pure python, without external dependencies. There are regular expressions with infinite matching strings...

PSBits

PSBits Soluzioni semplici relativamente che ti permettono di scavare un po' più a fondo del solito. Ogni cartella dovrebbe avere il proprio readme.md che spiega i dettagli. In caso contrario, il codice ha ampi commenti all'inizio e inline. Newsletter: https://gtworek.ck.page/ Se vuoi compilare i...

CVE-2016-2163

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:21+00:00| seen| https://t.me/informationsec/872 2026-08-23 00:00:40+00:00| seen| https://t.me/informationsec/872 2026-08-24 00:00:08+00:00| published-proof-of-concept| https://t.me/informationsec/872...