88 matches found
Binary Exploits
Exploit binari dell'Exploit Database Gli exploit binari si trovano nella directory /bin-sploits/. Questo è un repository ufficiale di The Exploit Database, un progetto sponsorizzato da Offensive Security. I nostri repository sono: Exploits & Shellcodes: https://gitlab.com/exploit-database/exploit...
ShonyDanza
ShonyDanza Uno strumento personalizzabile e facile da navigare per ricerche, penetration testing e difesa con la potenza di Shodan. Con ShonyDanza, puoi: Ottenere IP basati su criteri di ricerca Escludere automaticamente gli honeypot dai risultati in base alle soglie preconfigurate Preconfigurare...
getaltname
GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...
faction
OWASP - FACTION Framework di generazione report e collaborazione per PenTesting Faction è ora un progetto OWASP! Puoi trovare maggiori informazioniqui Sponsor Sponsor Premium...
OSCP-Exam-Report-Template-Markdown
Vorlage für Offensive Security Prüfungsberichte in Markdown Ich habe eine Offensive Security Exam Report Template in Markdown erstellt, sodass LaTeX, Microsoft Office Word, LibreOffice Writer während Ihrer Offensive Security Prüfungen OSCP, OSWE, OSEE, OSWP, OSEP, OSED, OSWA, OSDA, OSMR, OSTH, OS...
uberscan
uberscan Security program for pen-testing servers, routers and IoT devices btw my bitcoin address is 3A7yuqBcPAcVEM59bNAVQdTCmkxRb5JRgE Here's an alternative, also for BTC, as I've been getting reports of some bitcoin wallets not supporting certain addresses: 1PEDKUiUTxGNJ3XTPfXCTAjpzVzX1VZAme...
john
John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...
metasploitable3
Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...
weevely3
Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...
github-dorks
Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...
redsnarf
root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...
celerystalk
celerystalk celerystalk ti aiuta ad automatizzare il processo di scansione/enumerazione della rete con job asincroni detti task mantenendo il pieno controllo su quali strumenti vuoi eseguire. Demo interattiva: Modalità Bug Bounty HackerOne Demo interattiva: Modalità Vulnerability Assessment /...
Dark-Moon
The Open-Source AI-...
Autonomous-AI-PenTest-Agent
Auto...
CVE-2026-40606
mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmproxy 12.2.1 and below, the builtin LDAP proxy authentication does not correctly sanitize the username when querying the LDAP...
CVE-2026-40606
mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmproxy 12.2.1 and below, the builtin LDAP proxy authentication does not correctly sanitize the username when querying the LDAP...
CVE-2026-6179
CVE-2026-6179 concerns a stored cross-site scripting (XSS) vulnerability in NightWolf Penetration Testing Platform. The affected entry states that an attacker can trigger and run malicious script in a user’s browser due to a stored XSS flaw, enabling impact on user-side confidentiality and integr...
Comparing AI Agents to Cybersecurity Professionals in Real-World Penetration Testing
We present the first comprehensive evaluation of AI agents against human cybersecurity professionals in a live enterprise environment. We evaluate ten cybersecurity professionals alongside six existing AI agents and ARTEMIS, our new agent scaffold, on a large university network consisting of 8,00...
