Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review

Microsoft kicks off September with its monthly Patch Tuesday release, delivering fixes for security vulnerabilities affecting its products. The security updates are packed with security fixes, providing organizations with important updates to help protect their environments from emerging threats...

bandjacks

Bandjacks Cyber Threat Defense World Modeling System Overview Bandjacks is a comprehensive cyber threat intelligence CTI system that: Extracts MITRE ATT&CK techniques from threat reports in 12-40 seconds Builds a knowledge graph of threat actors, techniques, and defenses Generates STIX 2.1...

ForensiX-Studio

ForensiX Studio Forensic Intelligence Platform | Malware Analysis | Threat Correlation Engine 🧠 Multi-Signal Analysis • ⚡ Behavioral Intelligence • 🎯 MITRE Mapping ⚠️ LEGAL DISCLAIMER ForensiX Studio is intended strictly for authorized digital forensics, security research, and defensive analysis. ...

SysWhispers3

SysWhispers3 SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. Official Discord Channel Come hang out on Discord! Why on earth didn't I create a PR to SysWhispers2? The reason for SysWhispers3 to be a standalone version are many, but the...

SysWhispers

SysWhispers SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported from Windows XP to Windows 10 19042 20H2. Example generated files available in the example-output/ folder. Introduction Various security products...

IG-Detective

IG-Detective 🕵️‍♂️📸 Created by@shredzwho | 💖 Sponsor this project IG-Detective is a high-performance, Python-based Open Source Intelligence OSINT tool for Instagram. It offers a premium interactive shell to perform deep analysis on Instagram accounts, extract location history, mapping interactions,...

CVE-2019-8997

CVE-2019-8997 An XML External Entity Injection XXE vulnerability in the Management System console of BlackBerry AtHoc versions earlier than 7.6 HF-567 could allow an attacker to potentially read arbitrary local files from the application server or make requests on the network by entering...

firmware-mod-kit

Disclaimer Automatically exported from code.google.com/p/firmware-mod-kit Firmware Modification Kit This kit is a collection of scripts and utilities to extract and rebuild linux based firmware images. root@kitploit: Extract a firmware image into its component parts User makes desired modificatio...

whapa

Whatsapp Parser Toolset Updated: May 2022 WhatsApp Messenger Version 2.21.9.14 Whapa is a set of graphical forensic tools to analyze whatsapp from Android and soon iOS devices. All the tools have been written in Python 3.8 and have been tested on linux, windows and macOS systems. Note: Whapa...

CVE-2021-41773

https://target/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts root@kitploit: id: CVE-2021-41773 info: name: Apache 2.4.49 Exploit author: numanturle severity: high requests: - method: GET path: - "BaseURL/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts" matchers-condition: and matchers: - type: regex...

cve-2020-16898

Zeek Package for Bad Neighbor Detection .. image::...

CVE-2019-12189

CVE-2019-12189 - Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability Information Description:XSS was discovered in ManageEngine ServiceDesk Plus version Versions Affected: 9.3 Researcher: Dang The Tuyen Proof-of-concept The vulnerability stems from the confusion of both single quotes and...

proxify

特征 • 安装 • 用法 • 运行 Proxify • 安装 SSL 证书 • Proxify 的应用 • 加入 Discord 瑞士军刀式代理，用于快速部署。支持多种操作，如请求/响应转储、通过 DSL 语言进行过滤和操纵，以及上游 HTTP/Socks5 代理。 此外，重放工具允许将转储的流量（具有正确域名的请求/响应）导入 BurpSuite 或任何其他代理，只需将上游代理设置为 proxify 即可。 特征 拦截/操纵 HTTP/HTTPS 和 非 HTTP 流量 隐形和厚客户端 流量代理支持 使用客户端/服务器证书的 TLS MITM 支持 上游代理的 HTTP 和 SOCKS...

brutespray

Brutespray Created by: Shane Young/@x90sky && Jacob Robles/@shellfail Inspired by: Leon Johnson/@sho-luv Description Brutespray automatically attempts default credentials on discovered services. It takes scan output from Nmap GNMAP/XML, Nessus, Nexpose, JSON, and lists, then brute-forces...

brutespray

Brutespray 创建者：Shane Young/@x90sky && Jacob Robles/@shellfail 灵感来源：Leon Johnson/@sho-luv 描述 Brutespray 自动对发现的服务尝试默认凭据。它接收来自 Nmap（GNMAP/XML）、Nessus、Nexpose、JSON 和列表的扫描输出，然后并行对 40 多种协议进行凭据暴力破解。使用 Go 构建，具有交互式终端界面、内置字典和恢复功能。 快速安装 root@kitploit: go install github.com/x90skysn3k/brutespray/v2@latest...

clients

Bitwarden Client Applications This repository houses all Bitwarden client applications except the mobile applications iOS | android. Please refer to the Clients section of the Contributing Documentation for build instructions, recommended tooling, code style tips, and lots of other great...

CVE-2017-16082

CVE-2017-16082 Overview Affected versions of pg contain a remote code execution vulnerability that occurs when the remote database or query specifies a crafted column name. There are two specific scenarios in which it is likely for an application to be vulnerable: 1. The application executes...

gaia

Gaia - Attack Surface Discovery & AI-Assisted Triage Gaia is a CLI-first attack surface analysis tool that discovers endpoints and parameters, reduces noise, and highlights security-relevant risks using static heuristics and optional AI reasoning. It orchestrates Katana, gau, arjun, linkfinder, a...

HookCase

HookCase HookCase is a tool for debugging and reverse engineering applications on macOS aka OS X, and the operating system itself. It re-implements and extends Apple's DYLDINSERTLIBRARIES functionality. It can be used to hook any method in any module even non-exported ones, and even those that...

JoySafety

JoySafety — Large Model Security Framework 📋 Table of Contents Project Introduction ✨ Features 🚀 Quick Start 📖 User Guide 🏆 Best Practices 🏗️ Architecture Design 🛠️ Development 📄 License 📅 Roadmap Star History new release ✅ Prompt injection detection model fully upgraded : Training system...