httprobe

httprobe Take a list of domains and probe for working http and https servers. Install root@kitploit: ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: root@kitploit: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶...

BruteLoops

BruteLoops Una biblioteca extremadamente simple que proporciona la lógica fundamental para ataques eficientes de fuerza bruta de contraseñas contra interfaces de autenticación. Documentación La documentación se puede encontrar aquí. Si buscas los antiguos módulos de ejemplo... Mira BFG. Los...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

webscreenshot

webscreenshot Description A simple script to screenshot a list of websites, based on the url-to-image PhantomJS script. Features Integrating url-to-image 'lazy-rendering' for AJAX resources Fully functional on Windows and Linux systems Cookie and custom HTTP header definition support for the...

Zydra

Zydra Zydra es una herramienta de recuperación de contraseñas de archivos y un cracker de archivos shadow de Linux. Utiliza el método de búsqueda por diccionario o fuerza bruta para descifrar contraseñas. Archivos Soportados Archivos RAR Archivos ZIP heredados Archivos PDF Archivos shadow de Linu...

TIDoS-Framework

TIDoS El Framework Ofensivo de Pruebas de Penetración en Aplicaciones Web. IMPORTANTE : La nueva interfaz Qt5 está completa, pero tiene dependencias adicionales. Eche un vistazo a las instrucciones de instalación actualizadas. Destacados :- Aquí hay algo de luz sobre de qué trata el framework: Un...

Logsensor

Logsensor Una potente herramienta sensor para descubrir paneles de inicio de sesión y escaneo de SQLi en formularios POST Características Escaneo de paneles de inicio de sesión para múltiples hosts Compatibilidad con proxy http, https El escaneo de paneles de inicio de sesión se realiza en...

sqliv

SQLiv Escáner masivo de inyección SQL Características 1. escaneo de múltiples dominios con dork de inyección SQL mediante Bing, Google o Yahoo 2. escaneo específico proporcionando un dominio concreto con rastreo 3. escaneo inverso de dominio tanto el escaneo de SQLi como la verificación de...

MIPS: smp: report dying CPU to RCU in stop_this_cpu()

...

CVE-2026-10681 SMP race in `thread_idx_alloc()` lets concurrent `k_object_alloc(K_OBJ_THREAD)` callers share a kernel-object permission slot

In Zephyr's userspace dynamic-objects subsystem, threadidxalloc in kernel/userspace/userspace.c allocated a new thread permission index from the global threadidxmap bitmap without holding listslock. On SMP systems, two user-mode threads invoking the kobjectallocKOBJTHREAD syscall concurrently can...

CVE-2026-10681 SMP race in `thread_idx_alloc()` lets concurrent `k_object_alloc(K_OBJ_THREAD)` callers share a kernel-object permission slot

In Zephyr's userspace dynamic-objects subsystem, threadidxalloc in kernel/userspace/userspace.c allocated a new thread permission index from the global threadidxmap bitmap without holding listslock. On SMP systems, two user-mode threads invoking the kobjectallocKOBJTHREAD syscall concurrently can...

EUVD-2026-49045

In Zephyr's userspace dynamic-objects subsystem, threadidxalloc in kernel/userspace/userspace.c allocated a new thread permission index from the global threadidxmap bitmap without holding listslock. On SMP systems, two user-mode threads invoking the kobjectallocKOBJTHREAD syscall concurrently can...

PT-2026-64764

Name of the Vulnerable Software and Affected Versions Zephyr versions prior to 4.4.1 Description In the userspace dynamic-objects subsystem, the thread idx alloc function in kernel/userspace/userspace.c allocates a new thread permission index from the global thread idx map bitmap without holding...

CVE-2026-64248

CVE-2026-64248 affects the Linux kernel on MIPS: the function smp_send_stop() offline CPUs without informing RCU, causing possible stalls due to RCU grace periods never completing. The issue can trigger reboot hangs when irq_work_sync() runs after the affected path. The vulnerability has been fix...

CVE-2026-10667 SMP use-after-free in Zephyr `CONFIG_USERSPACE` dynamic kernel-object tracking, reachable from unprivileged user threads

Zephyr's dynamic kernel-object tracking kernel/userspace/userspace.c, formerly kernel/userspace.c maintains a doubly-linked list objlist of dynamically allocated kernel objects. Iteration over this list in kobjectwordlistforeach was performed under listslock using the SAFE iterator which caches t...

PYSEC-2026-1372 Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist

Fickling's assessment ctypes, importlib, runpy, code and multiprocessing were added the list of unsafe imports https://github.com/trailofbits/fickling/commit/9a2b3f89bd0598b528d62c10a64c1986fcb09f66, https://github.com/trailofbits/fickling/commit/eb299b453342f1931c787bcb3bc33f3a03a173f9,...

PYSEC-2026-356 imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

CVE-2026-46063

In the Linux kernel, the following vulnerability has been resolved: x86/shstk: Prevent deadlock during shstk sigreturn During sigreturn the shadow stack signal frame is popped. The kernel does this by reading the shadow stack using normal read accesses. When it can't assume the memory is shadow...

CVE-2026-32848

NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodevop within the opencrypto subsystem that allows local attackers to trigger a double-free condition by concurrently issuing CIOCCRYPT operations on the same session identifier on SMP systems. Attackers can exploit...

EUVD-2026-30791

NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodevop within the opencrypto subsystem that allows local attackers to trigger a double-free condition by concurrently issuing CIOCCRYPT operations on the same session identifier on SMP systems. Attackers can exploit...