wordlists

Wordlists Real-world infosec wordlists, updated regularly Current Wordlists Technologies These wordlists are based on the source code of the CMSes/servers/frameworks listed here. The current wordlists include: Wordpress Joomla Drupal Magento Ghost Tomcat There are 2 versions of each wordlist: Bas...

deepsecrets

OWASP DeepSecrets — a better tool for secrets scanning What is it? Another token-wasting CLI proxy to an AI API? Absolutely not! In our LLM-hype era, DeepSecrets still runs entirely on your machine — giving you great results offline, securely, and for free. So why yet another tool? Most existing...

Campaign Monitor for WordPress - Information Disclosure

Campaign Monitor for WordPress plugin for WordPress versions up to 2.8.15 contains a full path disclosure caused by improper access restriction and enabled displayerrors in /forms/views/admin/create.php, letting unauthenticated attackers retrieve server paths, exploit requires displayerrors to be...

k8scout

k8scout Beta — A single-binary Kubernetes attack path engine for authorized security assessments. Drop it into a compromised pod, run it, and get a map of every realistic escalation path, from your current foothold to cluster-admin, node access, secret theft, and cloud IAM roles. The idea You hav...

GoodHound

GoodHound / / / / / / / / / / / / / / / // / / / / / / / / // / // / // / // / / // / // / / / / // / ///,// ///,// //,/ Attackers think in graphs, defenders think in actions, management think in charts. GoodHound operationalises Bloodhound by determining the busiest paths to high value...

meg

meg meg is a tool for fetching lots of URLs but still being 'nice' to servers. It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating. You get lots of results quickly, but non of the individual hosts get flooded with...

clair

Clair Note : The main branch may be in an unstable or even broken state during development. Please use releases instead of the main branch in order to get stable binaries. Clair is an open source project for the static analysis of vulnerabilities in application containers currently including OCI...

GHSA-FG9W-WFP5-J933 NLTK: BllipParser passes caller-supplied model paths to the bllipparser C extension with no pathsec check, enabling arbitrary read

Summary BllipParser in nltk/parse/bllip.py hands caller-supplied filesystem paths to the native bllipparser C extension without routing them through NLTK's pathsec validation. The constructor parameters parsermodel, rerankerfeatures, and rerankerweights, and the alternative fromunifiedmodeldir...

Wild-Wild-WiFi

Wild-Wild-WiFi Wild Wild WiFi You can find more information in: http://www.elladodelmal.com/2018/03/wild-wild-wifi-dancing-with-wolves-1.html You can read our paper in: https://es.slideshare.net/elevenpaths/wild-wild-wifi-dancing-with-wolves THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF A...

cloudfoxable

Start Hacking: CloudFoxable Read the blog for more details: Introducing CloudFoxable: A Gamified Cloud Hacking Sandbox Background CloudFox helps penetration testers and security professionals find exploitable attack paths in cloud infrastructure. However, what if you want to find and exploit...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

CVE-2025-6218_WinRAR

🧪 CVE-2025-6218: Path Traversal in WinRAR 📌 Description This lab demonstrates how to exploit the CVE-2025-6218 vulnerability in vulnerable versions of WinRAR for Windows. This vulnerability allows a malicious .rar file to overwrite files outside the extraction directory using relative paths ....,...

leaky-paths

About A collection of special paths linked to major web frameworks and infrastructure projects, known juicy APIs, misconfigurations.. etc. These could be used for web-content discovery as the fastest way to find quick wins. Goal With the goal of providing the community with high-quality wordlists...

go_parser

Yet Another Golang binary parser for IDAPro English |中文 NOTE : Now the latest master branch is the Python3 version. The old master branch has been changed to branch py2 , and temporarily not maintained. Instructions for Python3 branch This version is developed and tested on macOS/Windows, IDA7.4+...

LID

██╗ ██╗██████╗ ██║ ██║██╔══██╗ ██║ ██║██║ ██║ ██║ ██║██║ ██║ ███████╗██║██████╔╝ ╚══════╝╚═╝╚═════╝ Linux Integrity Drift — "Linux is Dying" — Systematic discovery of kernel code paths that bypass LSM security guarantees The gate was never breached. It was walked around. What is LID? The Linux...

CVE-2026-124680

Interpretation Conflict, resulting in Incorrect Authorization vulnerability in Apache APISIX. An unauthenticated client can reach upstream paths protected by a route-level auth plugin when a route without auth exists on the same upstream and the upstream does not collapse encoded dot segments. Th...

EUVD-2026-125678

Interpretation Conflict, resulting in Incorrect Authorization vulnerability in Apache APISIX. An unauthenticated client can reach upstream paths protected by a route-level auth plugin when a route without auth exists on the same upstream and the upstream does not collapse encoded dot segments. Th...

BloodBash

BloodBash A SquidSec Open Source Project SquidOffense.com · GitHub BloodBash is an open source offline SharpHound and AzureHound JSON analyzer, created and managed by SquidSec. It builds a graph, surfaces AD/Entra attack paths and misconfigs, and prints prioritized findings. No Neo4j or BloodHoun...

uddup

UDdup - URLs Deduplication Tool The tool gets a list of URLs, and removes "duplicate" pages in the sense of URL patterns that are probably repetitive and points to the same web template. For example: https://www.example.com/product/123 https://www.example.com/product/456...

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through many methods. Windows Support To build a binary for Windows, download the installer.ps1 script from this repository. Run it simply with no arguments to create a binary in the working directory...