pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

JSShell

JSShell 2.0 An interactive multi-user web based javascript shell. It was initially created in order to debug remote esoteric browsers during experiments and research. This tool can be easily attached to XSS Cross Site Scripting payload to achieve browser remote code execution similar to the BeeF...

Covenant

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers. Covenant is an ASP.NET Core, cross-platform application that includes a...

crackerjack

!CAUTION Этот репозиторий больше не поддерживается, посетите https://github.com/sadreck/crackerjack для последней версии. CrackerJack Веб-интерфейс для Hashcat от Context Information Security Содержание Введение Архитектура Возможности Ограничения Установка Устранение неполадок Скриншоты Лицензия...

faraday

오픈소스 취약점 관리자 보안에는 두 가지 어려운 작업이 있습니다: 새로운 정보를 얻는 스마트한 방법을 설계하고, 개선 작업을 위해 발견된 내용을 추적하는 것입니다. Faraday를 사용하면 나머지는 저희가 처리하는 동안 취약점 발견에 집중할 수 있습니다. 터미널에서 사용하기만 하면 작업이 즉시 체계적으로 정리됩니다. Faraday는 커뮤니티에서 사용 가능한 도구를 진정한 다중 사용자 방식으로 활용할 수 있도록 만들어졌습니다. Faraday는 로드한 데이터를 집계하고 정규화하여 관리자와 분석가 모두에게 유용한 다양한 시각화로 탐...

autopsy

Autopsy 4 http://www.sleuthkit.org/ 2016년 3월 15일 개요 Autopsy는 The Sleuth Kit 및 기타 오픈 소스 디지털 포렌식 도구를 위한 그래픽 인터페이스입니다. Autopsy 3는 Java 기반으로 만들기 위해 Autopsy 2에서 완전히 다시 작성되었습니다. Autopsy 4는 여러 사용자가 단일 사례를 공동 작업할 수 있도록 지원하여 Autopsy 3를 개선했습니다. Autopsy는 크로스 플랫폼Windows, Linux, MacOSX으로 설계되었지만, 현재 버전은...

pwndoc

PwnDoc PwnDoc — это приложение для составления отчетов по пентесту, которое делает написание выводов простым и удобным, а также позволяет генерировать настраиваемый отчет в формате Docx. Основная цель — иметь больше времени на Pwn и меньше на Doc , объединяя такие данные, как уязвимости, между...

neko

n.eko Добро пожаловать в Neko — самодостаточный виртуальный браузер, работающий в Docker и использующий технологию WebRTC. Neko — это мощный инструмент, позволяющий запустить полнофункциональный браузер в виртуальной среде , что даёт вам возможность безопасно и конфиденциально выходить в интернет...

multi-juicer

Проведение CTF и тренингов по безопасности с OWASP Juice Shop обычно довольно сложно — Juice Shop не предназначен для одновременного использования несколькими пользователями. Инструктаж всех участников по запуску Juice Shop на их собственных машинах работает нормально, но отнимает слишком много...

wavecrack

Wavecrack Описание Удобный веб-интерфейс для организации общего доступа к серверу для взлома hashcat среди нескольких пользователей с некоторыми предопределёнными опциями. Скриншоты Главная страница Добавление хэша для взлома Просмотр результатов и статистики Обзор Это веб-приложение можно...

PhoenixC2

PhoenixC2 An Open-Source C2-Framework written in pure Python3. Disclaimer This project is still in development and not ready for professional use. The author and its affiliates do not endorse or condone any illegal or malicious activity conducted with this framework. Users of this framework are...

CVE-2026-28602

In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28602

In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73955

In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28602

CVE-2026-28602 is a logic error in ClipboardService.java (method setClipboardAccessNotificationsEnabledForUser) within the Android Framework component that can break multi-user isolation , leading to local escalation of privilege . No additional execution privileges or user interaction are requir...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

ASB-A-466379087

In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-47852

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CVE-2026-47852

CVE-2026-47852 affects Spring AI (versions 1.0.0–1.0.9 , 1.1.0–1.1.8 , and 2.0.0 ). A local attacker on a multi-user host can exploit a predictable (deterministic) cache directory path by pre-creating it and planting a malicious ONNX model file , leading to integrity impact as rated by the vendor...