DCVC2

Discord Voice Channel C2 aka DCVC2 This multi operating system compatible tool was created to leverage Discord's voice channels for command and control operations. This tool operates entirely over the Real-Time Protocol RTP primarily leveraging DiscordGo and leaves no pesky traces behind in text...

cs-suite

Cloud Security Suite cs-suite - Version 3.0 Usage usage: cs.py -h -env aws,gcp,azure,digitalocean -aip AUDITIP -u USERNAME -pem PEMFILE -p -pId PROJECTID -azu AZUREUSER -azp AZUREPASS -o OUTPUT -w -n NUMBER this is to get IP address for lynis audit only optional arguments: -h, --help show this he...

go-dork

go-dork 用 Go 编写的最快的 dork 扫描器。 go-dork 还支持多种搜索引擎，包括 Google、Shodan、Bing、Duck、Yahoo 和 Ask。 安装 使用方法 基本用法 标志 查询 定义引擎 分页 添加自定义请求头 使用代理 与其他工具链式使用 支持材料 帮助与问题 待办事项 许可证 版本 安装 下载 已编译的二进制文件，从 releases 页面获取，解压后即可运行；或者 如果您已安装并配置好 Go 1.15+ 编译器： GO111MODULE=on go install github.com/dwisiswant0/go-dork@latest 使用方...

mass3

Quickly enumerate through a pre-compiled list of AWS S3 buckets using DNS instead of HTTP with a list of DNS resolvers and multi-threading. Warning: Be aware that this is really shitty golang code. I wrote it without any prior knowledge of Go Lang but it seems to do the job. Feel free to contribu...

POC_CVE-2026-46716

CVE-2026-46716 — RCE entre inquilinos en Nezha Monitoring mediante bypass de autorización en la API Cron Un entorno de laboratorio para reproducir y detectar CVE-2026-46716 , una vulnerabilidad crítica en Nezha Monitoring donde el endpoint POST /api/v1/cron carece de comprobaciones de privilegios...

BirDuster

BirDuster About BirDuster is a Python based knockoff of the original DirBuster. BirDuster is a multi threaded Python application designed to brute force directories and files names on web/application servers. Often is the case now of what looks like a web server in a state of default installation...

HikVision-CVE-2017-7921

HikVision-CVE-2017-7921 Identify potential vulnerabilities with CVE-2017-7921 exploit checks or by testing the /onvif-http/snapshot?auth=YWRtaW46MTEK URI on target IP addresses using a multi-threaded approach for faster results. Requirements python3 Python Pacakges = requests, Fakeuseragent,...

Mass-RAT

Mass-RAT Herramienta básica de administración remota multiplataforma teléfonos Android + PC con Windows. Este es mi primer intento de aprender xamarin.android. El proyecto es experimental y puede contener errores. El proyecto es solo con fines educativos...

CVE-2026-105864

Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user limited to one tenant can create a record in another tenant when at least one tenant-enabled collection...

CVE-2026-105860

Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, the default tenant array field access allows an authenticated user to assign the user's own account to other tenants...

ncrack

ncrack Ncrack 是一款高速网络认证破解工具。它旨在帮助企业通过主动测试所有主机和网络设备的弱密码来保障网络安全。安全专业人员在审计客户时也同样依赖 Ncrack。Ncrack 采用模块化方法设计，命令行语法类似于 Nmap，并拥有一个可根据网络反馈调整自身行为的动态引擎。它能够快速且可靠地对多个主机进行大规模审计。 Ncrack 的功能包括一个非常灵活的界面，让用户能够完全控制网络操作，从而实现极其复杂的暴力破解攻击；内置易于使用的定时模板；类似 Nmap...

NXcrypt

NXcrypt NXcrypt is a polymorphic 'python backdoors' crypter written in python by Hadi Mene h4d3s . The output is fully undetectable . NXcrypt can inject malicious python file into a normal file with multi-threading system . Run it with superuser's permissions . NXcrypt output is Fully undetectabl...

RvbbitSafe

RvbbitSafe: The Hacker's Nightmare – A Six-Fortress Anti-Ransomware Architecture for Windows 🛡️ Overview RvbbitSafe is a research prototype demonstrating a paradigm shift in ransomware defense. It's an active, multi-layered fortress that combines hardware virtualization, AI-driven deception,...

CVE-2026-105864 Payload: Cross-tenant create in @payloadcms/plugin-multi-tenant

Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user limited to one tenant can create a record in another tenant when at least one tenant-enabled collection...

EUVD-2026-93510

Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user limited to one tenant can create a record in another tenant when at least one tenant-enabled collection...

CVE-2026-105864

The Payload headless content management system is vulnerable in @payloadcms/plugin-multi-tenant versions prior to 3.90.0 and canary versions before 4.0.0-canary.34 . An authenticated user restricted to a single tenant can exploit an incorrect authorization flaw (CWE-863) to create a record in a d...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

EUVD-2026-93506

Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, the default tenant array field access allows an authenticated user to assign the user's own account to other tenants...

CVE-2026-105860 Payload: Tenant authorization bypass in Multi-Tenant Plugin

Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, the default tenant array field access allows an authenticated user to assign the user's own account to other tenants...

CVE-2026-105860

The Payload headless content management system is vulnerable to a tenant authorization bypass in the @payloadcms/plugin-multi-tenant plugin. In versions before 3.90.0 and canary versions before 4.0.0-canary.34 , the default tenant array field access allows an authenticated user to assign their ow...