sentinel-mcp

SentinelMCP — AI-Powered Cyber Defense System Google Cloud Hackathon submission — Autonomous threat detection and remediation orchestrated by Google Cloud Agent Builder Vertex AI Agent , powered by Gemini 2.0 Flash, Model Context Protocol MCP, and Dynatrace observability. The Problem Security tea...

sunsetscan

SunsetScan Network security auditing for humans — powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...

cve-2015-1187-dir820l-firmware-reverse-engineering

cve-2015-1187-dir820l-firmware-reverse-engineering Static firmware reverse engineering of CVE-2015-1187 in the D-Link DIR-820L using Strings, Ghidra, and Binwalk. Done by extracting MIPS root filesystem, identifying the ncc2 backend handler, and tracing pingaddr through command construction to...

RansomLook

RansomLook RansomLook is a tool to monitor Ransomware groups and markets and extract their victims. Features Based on ransomwatch https://github.com/joshhighet/ransomwatch, Important changes have been done: All data are stored into Valkey Scraping is multithreaded Scraping is done with Playwright...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: Servicio HTTP sin autenticación de ES File Explorer Un harness de investigación y análisis técnico implementado de forma independiente, consciente de la seguridad, para CVE-2019-6447 , un servicio HTTP sin autenticación expuesto por versiones vulnerables de ES File Explorer para...

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report This repository contains a professional bug bounty report demonstrating the successful exploitation of a Blind SSRF vulnerability that reached an internal CGI endpoint vulnerable to Shellshock CVE-2014-6271. Remote...

CVE-2018-16763

CVE-2018-16763 Analyzer CVE-2018-16763 Analyzer is a small Python project for analyzing CVE-2018-16763 against FUEL CMS targets. It focuses on checking whether a target appears vulnerable and on displaying command output in a cleaner, more readable way when the application response is noisy. This...

AI-Infra-Guard v4.6.1

📖 Documentation | 🌐 🇨🇳 中文 · 🇯🇵 日本語 · 🇪🇸 Español · 🇩🇪 Deutsch · 🇫🇷 Français · 🇰🇷 한국어 · 🇧🇷 Português · 🇷🇺 Русский 🚀 AI Red Teaming Platform by Tencent Zhuque Lab A.I.G AI-Infra-Guard integrates capabilities such as ClawScanOpenClaw Security Scan, Agent Scan，AI infra vulnerability scan, MCP Server &...

subzy

Subzy Herramienta de subdomain takeover que funciona comparando las huellas de respuesta de can-i-take-over-xyz Instalación root@kitploit: go install -v github.com/PentestPad/subzy@latest Si $GOBIN y $GOPATH están configurados correctamente, ejecute el programa como: root@kitploit: $ subzy --help...

SSH-Stealer

RunAs-Stealer Smart keylogging capability to steal SSH Credentials including password & Private Key Usage The stolen credentials are written to C:\Users\Desktop\desktop.ini ADS log stream. To get the credentials type the cmd command: root@kitploit: more \Desktop\desktop.ini:log" To remove the...

TarantuBench

TarantuBench v1 A benchmark for evaluating AI agents on web security challenges, generated by the TarantuLabs engine. What is this? TarantuBench is a collection of 100 vulnerable web applications, each containing a hidden flag TARANTU.... An agent's job is to find and extract the flag by...

Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

Attackers have chained two flaws in JFrog Artifactory , the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud security company Wiz said in a report. Wiz saw the attacks between August 15 and September 8. JFrog had...

WebSafeCompiler

WebSafeCompiler WSC WebSafeCompiler WSC is an advanced utility websites compiler designed for the optimization, minification, and obfuscation if you need it of web applications and websites using Node.js. It enhances your web assets by reducing file sizes or providing durable protection against...

WAREED-DNS-C2

Wareed DNS C2 WAREED is a Command and Control C2 that utilizes the DNS protocol for secure communications between the server and the target. Designed to minimize communication and limit data exchange, it is intended to be a first-stage C2 to persist in machines that don't have access to the...

CVE-2026-22226

CVE-2026-22226 Prueba de concepto para CVE-2026-22226 Inyección de comandos del sistema operativo autenticada en el lado LAN en el cliente VPN de los routers Wi-Fi TP-Link Archer Resumen de la vulnerabilidad El controlador del cliente VPN almacena la descripción de la entrada controlada por el...

radar

Radar Radar is a small but efficient network scanner written in Rust heavily inspired by masscan. These are the main features: Userspace TCP, UDP, DHCP and ARP implementations, thanks to pnet Being asynchronous Randomized IP/ports scanning with no pre-allocation/shuffling Rate limiting Monitor mo...

CVE-2026-0073

0-Click RCE on Android Critical vulnerability CVE-2026-0073 in Android ADB, an authentication bypass flaw in the TLS certificate verification of the adbd daemon, specifically in the adbdtlsverifycert function. The TLS certificate verification makes Wireless Debugging accept an attacker as if they...

WHS4_CVE-2021-4034

CVE-2021-4034 PwnKit - Local Privilege Escalation PoC 🔗 Original Project : berdav/CVE-2021-4034 This project is an educational analysis and modification based on the original. MIT License Compliant | White Hat School Training Task 📋 Overview CVE-2021-4034 is a local privilege escalation...

CVE-Wazuh

Wazuh Manager — Inyección NDJSON en inventorysync mediante DataValue.index controlado por el agente - Borrador Un agente registrado puede introducir operaciones bulk arbitrarias de OpenSearch mediante DataValue.index. GHSA-ff9g-85jq-r3g3 ⚡ Uso Rápido Usa este proyecto solo en entornos seguros y...

CVE-2017-12149

CVE-2017-12149 CVE-2017-12149 JBOSS as 6.X Deserialization Reverse Shell Version Rewritten GUI interface based on the author's command-line mode detail:http://www.cnblogs.com/sevck/p/7874438.html...