linkedin2username

linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username and password to login, it will create several lists of possible username formats for all employees of a company you point it at...

bandwhich

bandwhich This is a CLI utility for displaying current network utilization by process, connection and remote IP/hostname Table of contents bandwhich Table of contents Project status How does it work? Installation Downstream packaging status Download a prebuilt binary Building from source...

CVE-2022-20186

Exploit for CVE-2022-20186 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in January 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

nGixshell

nGixShell is an nginx CVE scanner and RCE exploit framework. It ships a proof-of-concept for CVE-2026-42945 CVSS 3.1 8.1 HIGH per F5/NVD — a heap buffer overflow in ngxhttprewritemodule — and a scanner covering 64 nginx CVEs with automated HTTP probes, fingerprinting, WAF detection/bypass, web...

cheetah

English description | 中文说明 0x00 介绍 Cheetah是一款基于字典的webshell密码爆破工具，Cheetah的工作原理是能根据自动探测出的web服务设置相关参数一次性提交大量的探测密码进行爆破，爆破效率是其他普通webshell密码暴力破解工具上千倍。 本版本可能以后会很少进行更新，请使用Cheetah图形用户界面版本！ 0x01 特点 速度极快 支持批量爆破 自动伪造请求 自动探测web服务设置相关参数 支持读取和去重超大密码字典文件 支持python 2.x和3.x 目前支持php、jsp、asp、aspx webshell 0x02 参数说明 /...

feroxbuster

!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...

n8n-CVE-2025-68613-exploit

n8n - CVE-2025-68613: Improper Control of Dynamically-Managed Code Resources Vulnerability n8n contains a critical Arbitrary Code Execution vulnerability in its workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configurati...

agent-sweep

AgentSweep Encuentra y redacta secretos en el historial local de tu agente de codificación con IA. Totalmente sin conexión. Prevención: no pegues claves de API en agentes de IA respaldados por la nube — la clave pasa por los servidores del proveedor antes de llegar a tu disco. Si ya lo hiciste:...

phantun

Phantun 一个轻量且快速的UDP到TCP混淆器。 目录 Phantun 最新发布 概述 用法 1. 启用内核 IP 转发 2. 添加必要的防火墙规则 客户端 使用 nftables 使用 iptables 服务端 使用 nftables 使用 iptables 3. 以非 root 用户运行 Phantun 二进制文件（可选） 4. 启动 Phantun 守护进程 服务端 客户端 MTU 开销 WireGuard 的 MTU 计算 版本兼容性 文档 性能 未来计划 与 udp2raw 的比较 许可证 最新发布 v0.8.1 Phantun 的 MIPS 架构支持...

phantun

Phantun A lightweight and fast UDP to TCP obfuscator. Table of Contents Phantun Latest release Overview Usage 1. Enable Kernel IP forwarding 2. Add required firewall rules Client Using nftables Using iptables Server Using nftables Using iptables 3. Run Phantun binaries as non-root Optional 4...

ROOT-APP-MAVEN-GHSA-2R2C-CX56-8933 GHSA-2r2c-cx56-8933 in org.jline:jline-remote-telnet - Patched by Root

Root has patched GHSA-2r2c-cx56-8933 in the org.jline:jline-remote-telnet package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-56740 CVE-2026-56740 in org.jline:jline-remote-telnet - Patched by Root

Root has patched CVE-2026-56740 in the org.jline:jline-remote-telnet package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-GHSA-47QP-HQVX-6R3F GHSA-47qp-hqvx-6r3f in org.jline:jline-remote-telnet - Patched by Root

Root has patched GHSA-47qp-hqvx-6r3f in the org.jline:jline-remote-telnet package for Root:Maven. Multiple fixed versions available...

enject

enject Oculta los secretos de .env de los ojos de prAIng. Nota: este proyecto se llamaba anteriormente enveil y ha sido renombrado a enject Las herramientas de codificación con IA como Claude Code, Copilot, Cursor y otras pueden leer archivos en tu directorio de proyecto, lo que significa que un...

terminal-bench-2

Terminal-Bench 2.0 | | | | || || | |/ \ '| ' | | ' \ / | | || || | | / | | | | | | | | | | | | | | || || |||| || || |||| ||,|| |||| || | | | | \ / \ \\ | \ / \ ' \ / | ' \ || | | | \\ | | | / | | | | | | | / / | || | \ \ |/ || |||| || |/ \\ Terminal-Bench es un benchmark popular para...

apk-info

apk-info A full-featured apk parser. Features A malware-friendly zip extractor. Great article about BadPack technique; A malware-friendly axml and arsc extractor; A full AXML Android Binary XML implementation; A full ARSC Android Resource implementation; Support for extracting information contain...

Security Bulletin: IBM Maximo Application Suite uses log4j-api-2.25.4.jar which is vulnerable to CVE-2026-49844

Summary IBM Maximo Application Suite uses log4j-api-2.25.4.jar which is vulnerable to CVE-2026-49844. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values durin...

dsa

Un Resumen de la Vulnerabilidad crypto/dsa de Go CVE-2016-3959 Alex Mullins 9 de abril de 2016 Introducción Recientemente, se descubrió un error en la biblioteca criptográfica del Algoritmo de Firma Digital DSA para el lenguaje de programación Go. En este artículo revisaremos los detalles del err...

undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options

A flaw was found in undici's BalancedPool component. This vulnerability allows a remote attacker to bypass Transport Layer Security TLS certificate validation. The BalancedPool constructor incorrectly processes its options, silently discarding custom certificate validation functions. Consequently...

undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation

A flaw was found in undici. When the cache or deduplicate interceptor is directly composed onto a Client or Pool, the destination origin is omitted from cache and request-deduplication keys. This allows a remote attacker to perform cross-origin cache poisoning, leading to information disclosure a...