neko

n.eko Benvenuto in Neko, un browser virtuale self-hosted che gira in Docker e utilizza la tecnologia WebRTC. Neko è un potente strumento che ti permette di eseguire un browser completamente funzionante in un ambiente virtuale , dandoti la possibilità di accedere a Internet in modo sicuro e privat...

autopsy

Autopsy 4 http://www.sleuthkit.org/ 15 marzo 2016 PANORAMICA Autopsy è un'interfaccia grafica per The Sleuth Kit e altri strumenti open source di digital forensics. Autopsy 3 è stata una riscrittura completa di Autopsy 2 per renderla basata su Java. Autopsy 4 migliora Autopsy 3 supportando la...

Covenant

Covenant è un framework di comando e controllo .NET che mira a evidenziare la superficie d'attacco di .NET, rendere più facile l'uso delle tecniche offensive .NET e fungere da piattaforma collaborativa di comando e controllo per i red team. Covenant è un'applicazione ASP.NET Core multipiattaforma...

pwndoc

PwnDoc PwnDoc è un'applicazione di reporting per penetration test che rende semplice e facile scrivere i tuoi risultati e generare un report Docx personalizzabile. L'obiettivo principale è avere più tempo per Pwn e meno tempo per Doc condividendo dati come le vulnerabilità tra gli utenti...

crackerjack

!CAUTION Dieses Repository ist nicht mehr gewartet, besuchen Sie https://github.com/sadreck/crackerjack für die neueste Version. CrackerJack Web-Oberfläche für Hashcat von Context Information Security Inhaltsverzeichnis Einführung Architektur Funktionen Einschränkungen Installation Fehlerbehebung...

multi-juicer

Eseguire CTF e corsi di sicurezza con OWASP Juice Shop è di solito piuttosto complesso, Juice Shop non è progettato per essere usato da più utenti contemporaneamente. Istruire tutti su come avviare Juice Shop sul proprio computer funziona, ma richiede troppo tempo prezioso. MultiJuicer ti permett...

faraday

Open-Source-Schwachstellenmanager Sicherheit hat zwei anspruchsvolle Aufgaben: kluge Wege zu entwickeln, um neue Informationen zu gewinnen, und die Befunde im Blick zu behalten, um die Behebungsmaßnahmen zu verbessern. Mit Faraday kannst du dich auf das Entdecken von Schwachstellen konzentrieren,...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

wavecrack

Wavecrack Descrizione Un'interfaccia web user-friendly per condividere un box di cracking hashcat tra più utenti con alcune opzioni predefinite. Screenshot La homepage Aggiungere un hash da craccare Visualizzare i risultati e alcune statistiche Schema Questa applicazione web può essere utilizzata...

JSShell

JSShell 2.0 Una shell JavaScript interattiva multi-utente basata sul web. È stata creata inizialmente per eseguire il debug di browser esoterici remoti durante esperimenti e ricerche. Questo strumento può essere facilmente allegato a payload XSS Cross Site Scripting per ottenere l'esecuzione remo...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

PhoenixC2

PhoenixC2 Ein Open-Source-C2-Framework, geschrieben in reinem Python3. Haftungsausschluss Dieses Projekt befindet sich noch in der Entwicklung und ist nicht für den professionellen Einsatz bereit. Der Autor und seine Partner befürworten oder dulden keinerlei illegale oder böswillige Aktivitäten,...

BIT-GIT-2022-24765 Uncontrolled search for the Git directory in Git for Windows

Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...

CVE-2026-72764

n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions before 1.123.67, 2.31.5, and 2.32.1, a user able to run a Code node could poison a cached module and thereby alter other users' Code-node executions on the same runner, affecting...

EUVD-2026-56143

n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions before 1.123.67, 2.31.5, and 2.32.1, a user able to run a Code node could poison a cached module and thereby alter other users' Code-node executions on the same runner, affecting...

CVE-2026-72764

n8n CVE-2026-72764 affects multi-user n8n instances using the JS task runner with built-in or external modules. Before versions 1.123.67, 2.31.5, and 2.32.1, a user who can run a Code node could poison the shared module cache, altering other users’ Code-node executions on the same runner. This is...

PT-2026-70166

n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions before 1.123.67, 2.31.5, and 2.32.1, a user able to run a Code node could poison a cached module and thereby alter other users' Code-node executions on the same runner, affecting...

CVE-2026-72917

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. From 1.0.0 to 1.15.0, AnythingLLM's unauthenticated account-recovery flow in server/utils/PasswordRecovery/index.js uses recoverAccount to deduplicate the raw recoveryCodes...

CVE-2026-72917 AnythingLLM: Password recovery accepts one recovery code twice after whitespace normalization

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. From 1.0.0 to 1.15.0, AnythingLLM's unauthenticated account-recovery flow in server/utils/PasswordRecovery/index.js uses recoverAccount to deduplicate the raw recoveryCodes...