phoneinfoga

Information gathering framework for phone numbers Documentation • API documentation • Related blog post About PhoneInfoga is one of the most advanced tools to scan international phone numbers. It allows you to first gather basic information such as country, area, carrier and line type, then use...

RedTeaming-Tactics-and-Techniques

description: - These are notes about all things focusing on, but not limited to, red teaming and offensive security. What is ired.team notes? This is publicly accessible personal red teaming notes at https://ired.team and https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques about my...

Samuraizer

Samuraizer — Motor de Base de Conocimientos de Ciberseguridad NotebookLM con esteroides — diseñado específicamente para investigadores de seguridad. 💡 ¿Por qué Samuraizer? Todo investigador de seguridad conoce esa sensación — encuentras un repositorio interesante en GitHub, un artículo fresco sob...

PentestingEverything

PentestingEverything A complete, searchable penetration-testing knowledge base across 23 security domains. Live website: pentesting.m14r41.in Live Website · PentestingChecklist · Contribute · Report an Issue Read it online at pentesting.m14r41.in : fully searchable, with 108 documentation pages,...

Red-Teaming-TTPs

!CAUTION This repository contains cheatsheets, notes, and scripts related to my learning in cybersecurity, particularly Red Teaming. You'll find a variety of resources that I've compiled over the years, including: Cheatsheets : Quick reference guides for common tools and techniques. Guides :...

awesome-threat-intelligence

awesome-threat-intelligence A curated list of awesome Threat Intelligence resources A concise definition of Threat Intelligence: evidence-based knowledge, including context, mechanisms, indicators, implications and actionable advice, about an existing or emerging menace or hazard to assets that c...

chipwhisperer

ChipWhisperer | | Important Links Documentation | Tutorials | Forum | Store | NewAE ChipWhisperer 6.0: Repo Changes and Cleanup ChipWhisperer 6.0 is bringing many changes to the ChipWhisperer repository. The biggest one is a cleanup of the git history on both this repo and chipwhisperer-jupyter, ...

Misconfiguration-Manager

Misconfiguration Manager Remediation Quick Start 1. Review the list of known and documented Attack Techniques and corresponding to identify issues that may be present in your environment and how to remediate them...

misp-galaxy

misp-galaxy MISP galaxy is a simple method to express a large object called cluster that can be attached to MISP events or attributes. A cluster can be composed of one or more elements. Elements are expressed as key-values. There are default knowledge base such as Threat Actors, Tools, Ransomware...

appsec-forge

appsec-forge Created for Developers, DevOps, AppSec, DevSecOps, and Security Engineers. A repository-first security knowledge base covering secure development, application security, infrastructure, software supply chain, AI, and DevSecOps. Study security problems the same way experienced...

altair

ALTAIR - Un Escáner Modular de Vulnerabilidades Web Copyleft por Simone Margaritelli [email protected] http://www.evilsocket.net - http://www.backbox.org Uso: altair opciones -u EJEMPLOS: altair --filter=lfi,rfi --url=http://www.somesite.com altair --filter=sqli --load-modules=sqlmap...

CVE-2025-7431

개념 증명 – CVE-2025-7431 Knowledge Base = 2.3.1 - 인증된 관리자+ 저장형 크로스 사이트 스크립팅 플러그인 슬러그 경유 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N ------- 4.4 취약점 개요 인증된 공격자관리자는 WordPress용 Knowledge Base 플러그인의 설정에 악성 숏코드 콘텐츠를 주입하여 저장형 크로스 사이트 스크립팅XSS 취약점을 악용할 수 있습니다. 재현 단계 1. 테스터가 다음 경로로 이동합니다: root@kitploit:...

enterpriseattack

enterpriseattack - MITRE's Enterprise ATT&CK® A lightweight Python module to interact with the MITRE ATT&CK Enterprise dataset. Built to be used in production applications due to it's speed and minimal depedancies. Read the docs for more info. MITRE ATT&CK® MITRE ATT&CK® is a globally-accessible...

EUVD-2026-75177

Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends...

Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends

Summary The built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...

Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

Summary External knowledge connections are created and owned by administrators, and are shared by every external knowledge base bound to them. Deleting an external knowledge base also removed that connection from the instance configuration, with no check on the caller's role and no check for othe...

EUVD-2026-75183

Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion...

CVE-2026-87998

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/id/delete in backend/openwebui/routers/knowledge.py authorized deletion against the knowledge base but then removed its administrator-owned external connection...

CVE-2026-87998 Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/id/delete in backend/openwebui/routers/knowledge.py authorized deletion against the knowledge base but then removed its administrator-owned external connection...

CVE-2026-87998 Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/id/delete in backend/openwebui/routers/knowledge.py authorized deletion against the knowledge base but then removed its administrator-owned external connection...