altair

ALTAIR - A Modular Web Vulnerability Scanner Copyleft by Simone Margaritelli [email protected] http://www.evilsocket.net - http://www.backbox.org Usage: altair options -u EXAMPLES: altair --filter=lfi,rfi --url=http://www.somesite.com altair --filter=sqli --load-modules=sqlmap...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

Nullify

Nullify Secure. Transparent. Nullified. Nullify is an open source, modular data retention, deletion, and lifecycle governance platform. It provides a centralized framework for discovering data, evaluating retention policies, executing controlled lifecycle actions, and maintaining verifiable audit...

FUCKER

FUCKER Windows-native penetration testing framework written in Go. Modular architecture with AI-driven decision engine OpenAI-compatible API. Build root@kitploit: go build -ldflags="-X main.version=$git describe --tags" -o FUCKER.exe ./cmd/fucker/ Cross-compile: root@kitploit: GOOS=linux...

pFuzz

Что такое pFuzz / pFuzz Nedir ❓ pFuzz — это продвинутый инструмент фаззинга для Red Teaming, разработанный для наших исследований. Он помогает обходить веб-файрволы, используя одновременно различные методы. pFuzz — это продвинутый инструмент фаззинга, разработанный для исследований веб-приложений...

brutus

The Brutus Exploitation Framework An educational exploitation framework shipped on a modular and highly extensible multi-tasking and multi-processing architecture. Table of Contents Introduction Demos Installation Usage Features Documentation MAC Address Management ARP Network Scanner ARP Spoofin...

prismsec

PrismSec 🔷 Sicherer, modularer MCP-Server für Pentesting-Tools. Kapselt 7 branchenübliche Sicherheitstools nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap in 13 registrierte MCP-Tools — einsatzbereit mit Claude, Cursor, Copilot und jedem MCP-kompatiblen KI-Agenten. Features...

securitybot

Securitybot Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster...

hatiyar

Hatiyar Kit de segurança moderno para testes de penetração, avaliação de vulnerabilidades e pesquisa em segurança. ⚠️ IMPORTANTE: Hatiyar é destinado apenas para uso educacional, de pesquisa e segurança defensiva. Não utilize este software em sistemas que não sejam seus ou para os quais não tenha...

cirro

Cirro è una piattaforma estensibile di ricerca sulla sicurezza che consente a ricercatori e penetration tester di raccogliere, analizzare e visualizzare ambienti cloud e relazioni identitarie attraverso database a grafo. Costruita con un'architettura modulare, Cirro può essere estesa per supporta...

Nuages

Nuages Nuages è un framework C2 modulare. Fai riferimento alla Wiki per documentazione e tutorial, non esitare ad aprire issue per aiuto, segnalazioni di bug o richieste di funzionalità Introduzione Nuages mira ad essere un framework C2 in cui gli elementi back-end sono open source, mentre gli...

cam-hunter

📡 CAM HUNTER — Advanced DVR / NVR / XVR Security Testing Frame...

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

In this article 1. A wiper inside a backdoor 2. Backdoor capabilities 3. How GigaWiper was assembled 4. Conclusion: Multiple destructive capabilities consolidated into a single implant 5. Defending against destructive threats 6. Microsoft Defender detections 7. Indicators of compromise In October...

Kazuar: Anatomy of a nation-state botnet

In this article 1. Delivery 2. Module types 3. Botnet operations 4. Who is Secret Blizzard? 5. Mitigation and protection guidance 6. Microsoft Defender detections Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for...

Threat-Oriented Digital Twinning for Security Evaluation of Autonomous Platforms

Open, unclassified research on secure autonomy is constrained by limited access to operational platforms, contested communications infrastructure, and representative adversarial test conditions. This paper presents a threat-oriented digital twinning methodology for cybersecurity evaluation of...

PT-2026-31316

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.4.0, This vulnerability is fixed in 0.31.4.0...

PT-2026-31320

Name of the Vulnerable Software and Affected Versions CI4MS versions prior to 0.31.4.0 Description The install route guard in CI4MS relies on a cache check and the existence of a .env file to prevent access to the setup wizard after installation. If the database is temporarily unreachable when th...

PT-2026-29636

Name of the Vulnerable Software and Affected Versions CI4MS versions prior to 0.31.0.0 Description The application does not immediately revoke active user sessions when an account is deactivated. This is due to a logic flaw where account state changes are only enforced during login, not for...

[SECURITY] Fedora 42 Update: opensips-3.5.9-2.fc42

OpenSIPS or Open SIP Server is a very fast and flexible SIP RFC3261 proxy server. Written entirely in C, opensips can handle thousands calls per second even on low-budget hardware. A C Shell like scripting language provides full control over the server's behaviour. It's modular architecture allow...

CVE-2026-25510

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, an authenticated user with file editor permissions can achieve Remote Code Execution RCE by leveraging the file creation and sav...