GoogleRecaptchaBypass

Google Recaptcha Solver We love bots ❤️, but Google doesn't. So, here is the solution to bypass Google reCAPTCHA. Solve Google reCAPTCHA less than 5 seconds! 🚀 This is a Python script to solve Google reCAPTCHA using the DrissionPage library. Selenium implementation will be added soon. Recent...

OSINT-Cheat-sheet

OSINT CHEAT SHEET - List OSINT Tools Contains a list of OSINT tools, OSINT tips, datasets, Maltego transform and others. There are free and paid tools you can use and owner is not responsible take your own risks, only for knowledge or educational purposes. Apologies if some of the resources are n...

CVE-2025-60787

CVE-2025-60787 CVE-2025-60787 Poc - RCE - MotionEye = 0.43.1b4 Original link: https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter MotionEye RCE via Client-Side Validation Bypass Summary During security testing of a MotionEye instance running in Docker, it was observed that...

badger-builder

badger-builder badger-builder is an AI-assisted tool for generating dynamic Brute Ratel C4 profiles. Simply provide badger-builder a flavor for your desired profile and it will prompt OpenAI for fitting configurations. Listener/payload profile configs that are AI generated: C2 URIs Request/respon...

BFuzz

BFuzz BFuzz is currently in beta. BFuzz is an input based fuzzer tool which take .html as an input, open's up your browser with a new instance and pass multiple testcases generated by domato which is present in recurve folder of BFuzz, more over BFuzz is an automation which performs same task...

WAF-A-MoLE

WAF-A-MoLE A guided mutation-based fuzzer for ML-based Web Application Firewalls, inspired by AFL and based on the FuzzingBook by Andreas Zeller et al. Given an input SQL injection query, it tries to produce a semantic invariant query that is able to bypass the target WAF. You can use this tool f...

Se7enSlip

🔒 Se7enSlip - 7-Zip Vulnerability Scanner A stunning, interactive web application that demonstrates and helps detect the critical CVE-2023-52169 symlink traversal vulnerability in 7-Zip archives. ⚡ Features 🎯 Core Functionality ZIP Upload & Analysis - Drag & drop or click to upload ZIP files for...

CVE-2026-10702

CVE-2026-10702 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as...

weaponised-XSS-payloads

Weaponised XSS Payloads XSS payloads designed to turn alert1 into P1. The Blog Post This repo was released alongside a blogpost titled "How to Upgrade Your XSS Bugs from Medium to Critical" https://medium.com/@hakluke/upgrade-xss-from-medium-to-critical-cb96597b6cc4 What is this? In this reposito...

BL00DYM4RY

🎭 BloodyMary Trojan Phishing Simulator 📋 Description BloodyMary is an educational tool trojan-virus or Ransomware for training cybersecurity specialists, simulating realistic phishing attacks with social engineering elements. This project was created to raise awareness about cyber threats and...

RP_DCP_Code_Exec

Real Player 'DCP://' URI Remote Arbitrary Code Execution Vulnerability video demo: https://youtu.be/AMODp3iTnqY The 'DCP://' URI scheme is an internal protocol used by Real Player to retrieve URLs to display in the Player browser tab. It stands for 'Data Cache Protocol'. It will retrieve files fr...

Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities

Summary IBM Guardium Data Security Center has addressed these vulnerabilties in an update. Vulnerability Details CVEID:CVE-2026-78662 DESCRIPTION: Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's...

rea

English · 简体中文 · 繁體中文 · 日本語 · 한국어 · Türkçe · Русский · Tiếng Việt · ไทย · Deutsch · Español · Français · Українська · Polski · Português Brasil · العربية · فارسی · Bahasa Indonesia · Italiano · Ελληνικά · മലയാളം REA: Reverse Engineer Anything One MCP for reverse engineering across binaries,...

huskyCI

This article can also be read inBrazilian Portuguese. Introduction huskyCI is an open source tool that orchestrates security tests and centralizes all results into a database for further analysis and metrics. It can perform static security analysis in Python BanditBandit and SafetySafety, Ruby...

CheeseTools

CheeseTools This repository has been made basing onto the already existing MiscTool1, so big shout-out to rasta-mouse for releasing them and for giving me the right motivation to work on them. CheeseExec Command Exec / Lateral movement via PsExec-like functionality. Must be running in the context...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Roninwebsite is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby librariesronin-rb for a variety of security tasks, such as encoding/decoding data...

HTB-NanoCorp-CVE-2024-0670

CVE-2024-0670 - CheckMK Agent MSI Repair Privilege Escalation NanoCorp HTB This repository contains a PowerShell script used to exploit CVE-2024-0670 on the NanoCorp machine from Hack The Box. The vulnerability allows a low-privileged user to abuse the CheckMK Windows Agent MSI repair functionali...

CVE-2025-60880

CVE-2025-60880: Stored Cross-Site Scripting XSS in Bagisto Admin Panel An authenticated stored XSS vulnerability exists in the Bagisto 2.3.6 admin panel's product creation path, allowing an attacker to upload a crafted SVG file containing malicious JavaScript code. This vulnerability can be...

WiFi-Pumpkin-deprecated

This repository is ⛔️ DEPRECATED, wifipumpkin3 is Released, checkout! WiFi-Pumpkin - Framework for Rogue Wi-Fi Access Point Attack Description The WiFi-Pumpkin is a rogue AP framework to easily create these fake networks, all while forwarding legitimate traffic to and from the unsuspecting target...

CVE-2026-25964

CVE-2026-25964 PoC - Tandoor Recipes Authenticated LFI Proof-of-Concept for Authenticated Local File Disclosure via Recipe Import Disclosure: Originally reported by me via GHSA-6485-jr28-52xx ⚠️ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID|...