rengine

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner 🚀 reNgine 2.2.0 is released! reNgine 2.2.0 comes with bounty hub where you can sync and import your hackerone programs, in app notifications, chaos as subdomain enumeration tool, ability to upload multiple nuclei and gf patterns,...

Daily-dose-of-malware

Daily dose of malware DDOM or Daily Dose of Malware allows you to gather malware and c&c from open source intelligence. It can display info, export results to text file or download malicious software. I want to make it as fresh as possible, that's why all malwares are dated on few days back. Cymo...

evillimiter-windows

Evil Limiter for Windows A tool to limit the bandwidth upload/download of devices connected to your network without physical or administrative access. evillimiter employs ARP spoofing and traffic shaping to throttle the bandwidth of hosts on the network. This is explained in detail below. This to...

LuLu

LuLu 简体中文 | 正體中文 LuLu is the free open-source macOS firewall: Documentation: Full details and usage instructions can be found here. To Support: ❤ Love this product and want to support it? Please check out my patreon page...

threatspec

threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...

openedr

OpenEDR We at OpenEDR believe in creating a cybersecurity platform with its source code openly available to the public, where products and services can be provisioned and managed together. EDR is our starting point. OpenEDR is a full-blown EDR capability. It is one of the most sophisticated,...

WindowsSpyBlocker

About WindowsSpyBlocker 🛡️ is an application written in Go and delivered as a single executable to block spying and tracking on Windows systems. The approach of this project is to capture and interpret network traffic based on a set of tools. Depending on the interactions between services and...

OpenDoor

OpenDoor — OWASP Web Recon & Directory Discovery Platform OpenDoor is an open-source CLI Recon Platform for authorized web reconnaissance, directory discovery, subdomain enumeration, fingerprints, WAF detection, bypass probing, response filtering, reporting, open-redirect checks, bounded crawl an...

Nuages

Nuages Nuages is a modular C2 framework. Refer to the Wiki for documentation and tutorials, do not hesitate to open issues for help, bug reports or feature requests Introduction Nuages aims at being a C2 framework in which back end elements are open source, whilst implants and handlers must be...

AI and the Automobile

Open Arsenal AI and the Autombile Specifications The AI and the Automobile collection brings together multiple specifications that define how AI integrates into modern vehicle systems. Across the set, it treats the automobile as a software-defined platform where intelligence is distributed across...

KITT

KITT 2.0 Penetration Testing Framework The KITT Penetration Testing Framework was developed as an open source solution for pentesters and programmers alike to compile the tools they use with what they know into an open source project. With KITT, users are able to easily access a list of commonly...

hacktricks

HackTricks Hacktricks logos & motion design by @ppieranacho . Run HackTricks Locally Download latest version of hacktricks git clone https://github.com/HackTricks-wiki/hacktricks Select the language you want to use export HTLANG="master" Leave master for English "af" for Afrikaans "de" for German...

crowdsec

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

CVE-2026-35107 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface UserMenu component. The redirect to the login page on logout used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing...

CVE-2026-35107

The HCL AION platform is impacted by an open redirect vulnerability within the UserMenu component of the GenAI web interface. The root cause is that the application performs a redirect to a login page upon logout using a URL from the build configuration (NEXT_PUBLIC_LOGIN_URL ) without validating...

CVE-2026-35106 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 89. A second redirect to the login page in this component used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect...

CVE-2026-35106

HCL AION is affected by an open redirect vulnerability within the session-handling logic of the GenAI web interface . The flaw exists in the UserContext component (line 89), where a secondary redirect to the login page uses a URL from the NEXT_PUBLIC_LOGIN_URL build configuration without validati...

CVE-2026-35105

The HCL AION GenAI web interface is vulnerable to an open redirect due to a flaw in the session-handling logic within the UserContext component (line 78). The application redirects users to a login page using a URL from the NEXT_PUBLIC_LOGIN_URL build configuration without validating the destinat...

CVE-2026-35105 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 78. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used...

CVE-2026-35104

The HCL AION platform is affected by an open redirect vulnerability within the Signup component on the user registration page. The application fails to validate the value of the 'redirect' query parameter used for post-registration redirection. An attacker could craft a malicious registration lin...