PowerHuntShares

PowerHuntShares v2 PowerHuntShares is PowerShell tool designed to help cybersecurity teams and penetration testers better identify, understand, attack, and remediate SMB shares in the Active Directory environments they protect. Every hacker has a story about abusing SMB shares, but it’s an attack...

ShiroKit

shirokit An Apache Shiro exploitation toolkit for authorize...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0006 2026-03-02 In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

syft

Syft A CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. Exceptional for vulnerability detection when used with a scanner likeGrype. Features Generates SBOMs for container images , filesystems , archives see the docs for a full list of...

TYPO3-EXT-SA-2026-030: Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-030...

trawl

TRAWL Self-hosted web scraping for applications and AI agents. Get page content through an API or MCP, with built-in handling for supported browser challenges and CAPTCHAs. TRAWL starts with HTTP, reuses verified clearance and opens Camoufox when a browser is needed. Repeat requests fetch fresh...

CVE-2026-41653

CVE-2026-41653: BentoPDF ≤ 2.8.2 - Stored XSS → File Exfiltration Discovered & reported by: Astaruf Full writeup: https://nstsec.com/en/posts/bentopdf-xss-cve-2026-41653/ Upstream advisory: alam00000/bentopdf GHSA advisory NVD entry: https://nvd.nist.gov/vuln/detail/CVE-2026-41653 Summary BentoPD...

Aliens_eye

ALIENS EYE AI-OSINT Username Scanner Advanced AI-Powered Social Media Username Finder Scan 840+ platforms with ML-blended detection 🐧 New from the author: lxask lxask is a Linux command assistant that runs entirely on your own machine: describe what you want in plain English and it suggests the...

ghostlock-app

GhostLock-App 中文 GhostLock uses CVE-2026-43499 to gain temporary root on supported Android kernels and load KernelSU. Use the app 1. Install a root manager APK from KernelSU, BakaSU/ReSukiSU, or KowSU. 2. Install the GhostLock APK and open it. 3. Check that your kernel is supported, then tap Run...

bearer

Scan your source code against top security and privacy risks. Bearer is a static application security testing SAST tool designed to scan your source code and analyze data flows to identify, filter, and prioritize security and privacy risks. Bearer offers a free, open solution, Bearer CLI, and a...

CVE-2020-15368

How to exploit a vulnerable windows driver Exploit and Proof of Concept PoC for CVE-2020-15368. Asrock repackaged rweverything driver for their RGB controller configuration tool and signed it. They "protect" it by encrypting their ioctls...lol. We found this CVE by accident last summer, and afaik...

BIT-POWERSHELL-2026-96303 Microsoft PowerShell Security Feature Bypass Vulnerability

Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network...

TIWAP

Totally Insecure Web Application Project TIWAP TIWAP is a web security testing lab made using Flask for budding security enthusiasts to learn about various web vulnerabilities. Inspired by DVWA, the contributors have tried their best to regenerate various web vulnerabilities The application is...

Sitadel

Sitadel - Web Application Security Scanner | || || | / | | | | | | | | | | || | | | \ | | |/ | | | | || | | | |/ | | | | | | /|| ||\ Sitadel is basically an update for WAScan making it compatible for python = 3.11 It allows more flexibility for you to write new modules and implement new features...

CVE-2022-1388

CVE-2022-1388 POC for CVE-2022-1388 affecting multiple F5 products. Follow the Horizon3.ai Attack Team on Twitter for the latest security research: Horizon3 Attack Team James Horseman Zach Hanley Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

Exploit for Improper Input Validation in Python

CVE-2023-24329 — Python URL Parsing PoC A command-line proof...

Important: Red Hat Security Advisory: rust-sequoia-sq security update

An update for rust-sequoia-sq is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records

A flaw was found in hickory-resolver. This vulnerability allows attackers to bypass Domain Name System Security Extensions DNSSEC authentication checks. By controlling the answering zone or being positioned on the network path, an attacker can have forged DNS records accepted as validated, leadin...

maltrail

Maltrail Maltrail is a network traffic detection system that identifies communication with known malicious infrastructure and reports selected traffic anomalies. It matches domains, URLs, IP addresses, IP:port pairs, and User-Agent values observed on the network against a set of indicators called...

CVE-2025-11203-PoC

CVE-2025-11203 — LiteLLM Health Endpoint APIKEY Information Disclosure LiteLLM versions 1.63.14 /health endpoint, when processing the apikey parameter, does not properly filter sensitive information , causing authenticated users to retrieve API Keys stored in other model configurations. The apike...