check_struts

checkstruts This project has been created following 2017 Equifax exploit The checkstruts.sh script aims at retrieving any Apache struts libraries version and location found and/or loaded on the system. It can be run directly on a server, or with the provided Ansible playbook, to handle several...

ZeusCloud

Secure your cloud. ZeusCloud is an open source cloud security platform. Discover, prioritize, and remediate your risks in the cloud. Build an asset inventory of your AWS accounts. Discover attack paths based on public exposure, IAM, vulnerabilities, and more. Prioritize findings with graphical...

aggressor_snippets

aggressorsnippets A collection of random small Aggressor snippets that don't warrant their own repo locate This Aggressor alias will call the underlying Linux OS command 'locate'. The envisioned use for this is when a custom defined alias is being used in CobaltStrike which requires the full path...

barrido

barrido Console utility to find web application paths. Still in alpha version. Examples Multiple URLs bruteforcing: $ cat urls.txt https://target.a.com https://target.b.com https://target.c.com $ barrido urls.txt wordlists/quickhits.txt -se | tee curiouspaths.txt https://target.c.com/manager/ 401...

SourceLeakHacker

Description SourceLeakHacker is a muilt-threads web directories scanner. Installation pip install -r requirements.txt Usage usage: SourceLeakHacker.py options optional arguments: -h, --help show this help message and exit --url URL url to scan, eg: 'http://127.0.0.1/' --urls URLS file contains ur...

phpunit-brute

phpunit-brute Tool to try multiple paths for PHPunit RCE CVE-2017-9841 and it will log found paths to found.txt in the dir. It uses the following list of paths https://raw.githubusercontent.com/random-robbie/bruteforce-lists/master/phpunit.txt if you have a path that is not on there please submit...

Get-RBCD-Threaded

Get-RBCD-Threaded Tool to discover Resource-Based Constrained Delegation attack paths in Active Directory Environments Based almost entirely on wonderful blog posts "Wagging the Dog: Abusing Resource-Based Constrained Delegation to Attack Active Directory" by Elad Shamir and "A Case Study in...

enumerate-iam

Enumerate IAM permissions Found a set of AWS credentials and have no idea which permissions it might have? $ ./enumerate-iam.py --access-key AKIA... --secret-key StF0q... 2019-05-10 15:57:58,447 - 21345 - INFO Starting permission enumeration for access-key-id "AKIA..." 2019-05-10 15:58:01,532 -...

insect

insect - Web path discovery Current Release: v1.4 20222.09.03 An advanced command-line tool designed to brute force directories and files in webservers, AKA web path scanner Idea by @maurosoria and @shelld3v Developement-2022 is being actively developed by @nu11secur1ty Table of Contents...

dirsearch

dirsearch - Descubrimiento de rutas web Un avanzado brute-forcer de rutas web dirsearch está siendo desarrollado activamente por @maurosoria y @shelld3v. Únete al servidor de Discord para comunicarte con el equipo. Inicio rápido dirsearch requiere Python 3.11 o superior. git clone...

pathprober

pathprober Descubre y sondea rutas HTTP usando metodología de fuerza bruta y filtrado por una palabra específica o dos palabras a la vez. Propósito Forzar directorios web o rutas HTTP y validar usando el código de respuesta HTTP ya no es relevante. Esta herramienta te ayudará a realizar una prueb...

CVE-2026-59739

A flaw was found in Apache ZooKeeper. This vulnerability allows a remote attacker to discover paths that should be restricted by Access Control Lists ACLs. By registering watches on non-existent paths and then reconnecting after these paths are created with restricted ACLs, the attacker can bypas...

AgentXploit: Autonomous Repository-To-Runtime Red-Teaming for AI Agents

AI agents combine language models with external data and tools that can modify files, call APIs, or execute code. Security failures can arise when adversarial content changes an agent's tool use or when the surrounding software contains vulnerabilities such as path traversal or command injection...

PT-2026-97496

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The to internal value function in StringListPathField calls os.path.exists using unbounded paths supplied by the user. This allows a tenant superuser to determi...

dirsearch v0.5.0

dirsearch - Web Path Discovery An advanced web path brute-forcer dirsearch is being actively developed by @maurosoria and @shelld3v. Join the Discord server to communicate with the team. Quick Start dirsearch requires Python 3.11 or higher. root@kitploit: git clone...

BIT-NODE-MIN-2026-21715

A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync.native without the required read permission checks, while all comparable filesystem functions correctly enforce them. As a result, code running under --permission with restricted --allow-fs-read can still use...

CVE-2026-21715

A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync.native without the required read permission checks, while all comparable filesystem functions correctly enforce them. As a result, code running under --permission with restricted --allow-fs-read can still use...

CVE-2025-68811

In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rcpageoff for memcpy byte offset svcrdmacopyinlinerange added rccurpage page index to the page base instead of the byte offset rcpageoff. Use rcpageoff so copies land within the current page. Found by ZeroPath...

CVE-2018-12632

Redatam7 formerly Redatam WebServer allows remote attackers to discover the installation path via an invalid LFN parameter to the /redbin/rpwebutilities.exe/text URI...

CVE-2025-34171 CasaOS <= 0.4.15 Unauthenticated File and Debug Data Exposure

CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retrieve sensitive configuration files and system debug information. The /v1/users/image endpoint can be abused with a user-controlled path parameter to access files under...