PowerShellForPentesters

PowerShellForPentesters Playlist-Link - https://youtube.com/playlist?list=PLJQHPJLjSQatUsJy3O4k-VQlllquDmDr PowerShell for Pentesters ist eine grundlegende Einführung in die Verwendung von PowerShell bei internen Penetrationstests. Dieser Kurs ist im Wesentlichen das PowerShell-Modul aus meinem...

Interview_Tips

Consigli per i Colloqui Sicurezza Informatica Questa pagina è un riepilogo dei colloqui che ho affrontato, coprendo una discreta varietà di ruoli, ricevendo diversi rifiuti, ma imparando da ogni colloquio, raccogliendo feedback costruttivi e andando avanti. Spero che queste domande/consigli possa...

qyvora-toha3ee

toha3ee Un framework di valutazione della sicurezza locale e di rete scritto in Go. È uno strumento di ricerca e di penetration testing autorizzato che copre l'intera pipeline di valutazione della rete: scoperta di host e servizi, enumerazione, audit delle credenziali, identificazione delle...

Noregressh

Originalmente, eu queria construir um scanner e explorador de regreSHHion. Depois adicionei CVEs adicionais a ele. Se alguém puder me ajudar a expandir partes do projeto, por favor, entre em contato. BEM-VINDO AO NOREGRESSH Norregressh é um framework de teste de penetração focado em regressões do...

awesome-exploit-development

awesome-exploit-development Eine kuratierte Liste von Ressourcen Bücher, Tutorials, Kurse, Tools und verwundbare Anwendungen zum Lernen über Exploit Development Ein Projekt von Fabio Baroni. Lies den vollständigen Artikel hier!...

OAUTHScan

OAUTHScan Beschreibung OAUTHScan ist eine in Java geschriebene Burp-Suite-Erweiterung, die einige automatische Sicherheitsprüfungen bereitstellen soll, die bei Penetrationstests von Anwendungen, die die Standards OAUTHv2 und OpenID implementieren, nützlich sein können. Das Plugin sucht nach...

BurpSuite-For-Pentester

🕷️ BurpSuite para Pentester Um guia prático de consulta rápida cheat sheet e aprendizado sobre o Burp Suite, projetado para caçadores de bug bounty e testadores de penetração descobrirem com eficiência vulnerabilidades em aplicações web, de baixa severidade P4 a crítica P1, usando o Burp Suite...

Argus

...

burp-vps-proxy

Burp VPS Proxy: Einfache Cloud-Proxys für Burp Suite Erste Schritte » Funktionen · Anbieter · Haftungsausschluss 📖 Über Burp VPS Proxy ist eine Burp-Suite-Erweiterung, die das automatische Erstellen und Löschen von vorgelagerten SOCKS5-Proxys bei bekannten Cloud-Anbietern direkt aus Burp Suite...

OffensiveCpp

OffensiveCpp Offensive C++ ist eine Sammlung von Snippets für offensive Sicherheit, geschrieben in C++. Es enthält verschiedene Werkzeuge für Penetrationstests und Exploit-Entwicklung. Inhaltsverzeichnis OffensiveCpp Einführung Warum C/C++? Kompilieren Referenzbibliotheken Mitwirken Lizenz...

CVE-2026-77767

Reconmap's API applies a fallback authorization policy in apps/api/app/Program.cs that requires an authenticated user holding the administrator role, so controllers without their own attribute reject anonymous callers. The report preview action in apps/api/app/Controllers/ReportsController.cs...

credential-attacks-toolkit

CredAttack — Toolkit per Attacchi alle Credenziali ⚠️ AVVISO LEGALE — Solo test di sicurezza autorizzati. L'uso di questo strumento contro sistemi che non possiedi o per i quali non hai esplicita autorizzazione scritta è illegale ai sensi del Computer Fraud and Abuse Act USA, del Computer Misuse...

CVE-2026-21584

This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.6, allows an authenticated attacker to gain unintended access and can lead...

internal-privesc-poc

Internal Privilege Escalation POC Library This library provid...

MAL-2026-13666 Malicious code in cubesat-upstream-driver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5f2cf32e29ec0daedda5112ca2c560e69b4c4cd77850d6dc52d7a448e343a2 The package is advertised as an 'Upstream driver interface for cubesat orbital command bus' but ships no driver, protocol, or telemetry code. Its sol...

HermesPentBox

HermesPentBox — AI Pentest Workbench Language: English...

metasploitable2-pentest-series

Metasploitable2 Penetration Testing Series A series of vulner...

Exploit for CVE-2026-64638

cve-id Donate Support the maintenance of this project wit...

offensive-security-labs

Offensive Security Labs A collection of hands-on offensive cy...

Modeling Local Exploit Hazard - a Bayesian Framework for Quantifying Exploit Risk and Operational Efficiency

This paper presents a local exploit hazard model : a Bayesian framework that converts the global probabilities produced by an exploit likelihood model ELM, such as the Exploit Prediction Scoring System EPSS, into a daily exploit hazard rate for an organization's own assets. The model measures the...