Linux-for-a-Pentester

🐧 ペネトレーションテスターのためのLinux 💀 「理論は素晴らしいが、魔法が起こるのはシェルの中だ。」 このリポジトリは、実際のラボ、CTF、実践から構築されたLinuxコマンドノートの厳選コレクションです。無駄を省き、ペネトレーターに必要な生のコマンドと実用的なメモだけを提供します。 📂 リポジトリ構成 Module| Description ---|--- 00-General-Commands| 日常使用に必要なサバイバルコマンド 01-Recon| ローカルおよびネットワーク偵察フェーズ 02-Enumeration| サービスとユーザーデータの詳細調査...

dnsobserver

DNSObserver A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends notifications with the received request's details via Slack. DNSObserver can help you find bugs such as blin...

shannon

!NOTE Shannon 3.0 がリリースされました: より深いセキュリティコード分析、より徹底的に検証された検出結果、再構築された CLI、ネイティブな CI/CD、プロフェッショナルな PDF レポート、そして SARIF。 Shannon は、Web アプリケーションと API のための自律型 AI ペネトレーションテスターです。 ソースコードを分析し、攻撃経路を特定し、実際のエクスプロイトを実行して、脆弱性が本番環境に到達する前に証明します。エクスプロイトなしでは、レポートもなし。 このリポジトリは Shannon Open Source です:...

BurpSuite-Plugin

BurpSuite-Plugin BurpSuite用プラグイン（ペンテスター向け）...

Zhilly

MCP ベースのチャットボット （日本語 | 中文 | English） はじめに 👉 人間：AIにカメラを装着 vs AI：その場で飼い主が3日間髪を洗っていないことを発見【bilibili】 👉 手作りでAIガールフレンドを作る、初心者入門チュートリアル【bilibili】 シャオジーAIチャットボットは音声インタラクションの入口として、Qwen / DeepSeekなどの大規模モデルのAI能力を活用し、MCPプロトコルを通じてマルチエンド制御を実現します。 バージョンノート...

shannon v3.3.0

!NOTE Shannon 3.0 is live: deeper security code analysis, more thoroughly vetted findings, a rebuilt CLI, native CI/CD, professional PDF reports, and SARIF. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths, and executes re...

xalgorix v4.6.78

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

shannon v3.1.0

!NOTE Shannon 3.0 is live: deeper security code analysis, more thoroughly vetted findings, a rebuilt CLI, native CI/CD, professional PDF reports, and SARIF. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths, and executes re...

secator v0.43.3

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

CVE-2026-18593

A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotel...

CVE-2026-18593

A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotel...

CVE-2026-18593 vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandbox

A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotel...

EUVD-2026-52222

A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotel...

CVE-2026-18593 vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandbox

A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotel...

CVE-2026-18593

Vulnerability CVE-2026-18593 affects vxcontrol PentAGI up to version 2.1.0. It targets an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl within the Tool Management Protocol Handler. The issue can be exploited remotely to cause sandbox-related problems; exploitation is descr...

secure-software-development

Secure Software Development — Notes & Exercise Writeups Perso...

enumy

Enumy Enumy is an ultra fast portable executable that you drop on target Linux machine during a pentest or CTF in the post exploitation phase. Running enumy will enumerate the box for common security vulnerabilities. Installation You can download the final binary from the release x86 or x64 tab...

Living Long Doing Pentests

Whitepaper called Living Long Doing Pentests. It discusses basic LLDP protocol fuzzing and usage from a pentester's point of view...

Cervantes 安全漏洞

Cervantes is an open source collaboration platform designed for Pentester and Red Teams by Cervantes Open Source. A security vulnerability exists in Cervantes 0.5-alpha and earlier versions that stems from accepting insecure file uploads...

GYM MS 1.0 Cross Site Scripting

Exploit Title: GYM MS - GYM Management System - Cross Site Scripting Stored Date: 29/09/2023 Vendor Homepage: https://phpgurukul.com/gym-management-system-using-php-and-mysql/ Software Link: https://phpgurukul.com/projects/GYM-Management-System-using-PHP.zip Version: 1.0 Last Update: 31 August 20...