CVE-2021-22005

CVE-2021-22005 VMware vCenter RCE CVE-2021-22005 verificador masivo de una línea cat vmwarecenters.txt | while read S do; do curl --connect-timeout 15 --max-time 30 --silent --insecure --user-agent "vAPI/2.100.0 Java/1.8.0261 Linux; 4.19.160-6.ph3; amd64" -X POST...

blackout-public

ZoomInfo GTM Studio: Pre-Consent Tracking Documentation "You can block the researcher. You can't block the evidence." What Happened On November 25, 2025, ZoomInfo CEO Henry Schuck posted a product demo of GTM Studio on LinkedIn — their AI-powered platform that "identifies person-level website...

omigood

omigood OM I GOOD? This repository contains a free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research team, specifically CVE-2021-38647. Original blog post from Wiz: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure...

Samuraizer

Samuraizer — Cyber‑Security Knowledge Base Engine NotebookLM on steroids — purpose-built for security researchers. 💡 Why Samuraizer? Every security researcher knows the feeling — you find an interesting GitHub repo, a fresh CVE writeup, a blog post about a new exploitation technique. You forward ...

cve-2019-1458_POC

CVE-2019-1458: Going from 'in the wild report' to POC Intro In December Kaspersky published a blogpost about 0day exploit used in the wild. It piqued my interest because although they described how the exploit was working, they didn't provide any POC in their analysis. This is why I decided to tr...

ToolShell-Honeypot

ToolShell-Honeypot SharePoint Zero-Day Un honeypot basado en Docker enfocado en detectar y registrar intentos de explotación contra vulnerabilidades de día cero de Microsoft SharePoint. Este honeypot está diseñado para detección temprana e inteligencia de amenazas, no para simular un entorno...

Maestro

Maestro Maestro is a post-exploitation tool designed to interact with Intune/EntraID from a C2 agent on a user's workstation without requiring knowledge of the user's password or Azure authentication flows, token manipulation, and web-based administration console. Maestro makes interacting with...

CredSpy

CredSpy Enumera los métodos de autenticación de Microsoft Entra ID para direcciones de correo electrónico usando la API pública GetCredentialType. Este es el mismo endpoint que utiliza la página de inicio de sesión de Microsoft cuando se ingresa un nombre de usuario. A diferencia de la mayoría de...

cerbrutus

Cerbrutus Herramienta de fuerza bruta modular escrita en Python, para rociado de contraseñas muy rápido en SSH y FTP, y en un futuro cercano otros servicios de red. PRÓXIMAMENTE: SMB, HTTPs POST, HTTPs GET, HTTP BASIC AUTH Gracias a @0dayctf, Rondons, Enigma y 001 por las pruebas y contribuciones...

DeepBlueCLI

DeepBlueCLI DeepBlueCLI - a PowerShell Module for Threat Hunting via Windows Event Logs Eric Conrad, Backshore Communications, LLC deepblue at backshore dot net Twitter: @ericconrad http://ericconrad.com Sample EVTX files are in the .\evtx directory Note If your antivirus freaks out after...

CVE-2026-57119

PraisonAI is a multi-agent teams system. Prior to 4.6.59, the unauthenticated Jobs API accepts an absolute or traversing agentfile path in POST /api/v1/runs and passes it to the job executor without a workspace allowlist or boundary check. A remote caller can cause the server to open files...

CVE-2026-57124

PraisonAI is a multi-agent teams system. Prior to 4.6.59, the default UI host applications expose POST /api/mcp/connect without mandatory authentication and accept caller-controlled command and args values that PraisonAIUI passes to StdioMCPClient to start a local process. Because the UI commands...

CVE-2026-55236

langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, the langgraph-api run-creation path authorizes the assistant attached to a run by dispatching assistants.search with an incomplete value instead of the assistants.read event used by direct reads and cro...

CVE-2026-55795

Craft Commerce is an ecommerce platform for Craft CMS. From 4.0.0 until 4.11.2 and 5.6.5, CartController in src/controllers/CartController.php activates its RateLimiter only when the number POST or GET parameter is supplied. An unauthenticated attacker can submit couponCode values to...

OffensiveLua

Offensive Lua Offensive Lua is a comprehensive collection of offensive security and red team scripts written in Lua with FFI Foreign Function Interface. These scripts leverage the power and flexibility of LuaJIT on Microsoft Windows to perform advanced penetration testing and red teaming...

Outpacket

📦 Outpacket Tired of impacket? This cheatsheet maps common impacket workflows to their modern alternatives Index Auth Quick Reference 1. Remote Execution WMI Exec · wmiexec.py DCOM Exec · dcomexec.py Service-Based Exec · smbexec.py · psexec.py Scheduled Task Exec · atexec.py Bulk Execution ·...

fastnetmon

Community Edition FastNetMon - A high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AFPACKET port mirror. What do we do? We detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second...

CVE-2026-41089-LongLogon

LongLogon · CVE-2026-41089 LongLogon is an unauthenticated, non-destructive precondition checker for CVE-2026-41089 , a pre-auth stack buffer overflow in the Windows Netlogon service. With no credentials, and without sending the overflow, it reports whether a domain controller's DNS domain name i...

Nebula

Nebula Nebula es un marco de trabajo de Pruebas de Penetración en la Nube y con suerte DevOps. Está construido con módulos para cada proveedor y cada funcionalidad. A partir de abril de 2021, solo cubre AWS, pero es un proyecto en curso y con suerte seguirá creciendo para probar GCP, Azure,...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...