outis

outis outis is a custom Remote Administration Tool RAT or something like that. Think Meterpreter or Empire-Agent. However, the focus of this tool is neither an exploit toolkit there are no exploits nor persistent management of targets. The focus is to communicate between server and target system...

black-widow

description: - black-widow is one of the most useful, powerful and complete offensive penetration testing tool black-widow Offensive penetration testing tool Open Source black-widow provides easy ways to execute many kinds of information gatherings and attacks. Fully Open Source Written in Python...

rsc-security-auditor

🛡️ RSC Security Auditor Detect critical security vulnerabilities CVE-2025-66478, CVE-2025-55184 in your Next.js & React Server Components stack. 🚨 Urgent: Recent disclosures Dec 2025 have revealed critical DoS and RCE vulnerabilities in React Server Components. This tool helps you audit your...

cyph

Cyph Cyph is a cryptographically secure messaging and social networking service, providing an extreme level of privacy combined with best-in-class ease of use. Cyph’s patented technology — built by former SpaceX engineers, audited by Cure53, and the basis of research presentations at Black Hat an...

CVE-2023-26035

CVE-2023-26035 ZoneMinder Snapshots - Unauthenticated Install Grab Repo $ git clone https://github.com/Yuma-Tsushima07/CVE-2023-26035.git Setup Note: Install the latest version of node $ npm init $ npm i axios cheerio yargs Usage ┌─✗─v37r1x@7h3B14ckKn1gh75─/Documents/Code/CVE-2023-26035 └──╼ $nod...

Cisco-CVE-2025-20281-illdeed

CVE-2025-20281 — Cisco ISE ERS API Unauthenticated RCE Exploit This repository contains a Python 3 proof-of-concept exploit for CVE-2025-20281 , a critical vulnerability in Cisco Identity Services Engine ISE that allows unauthenticated remote code execution RCE as root via the ERS API. 🩻...

svn-extractor

Svn-Extractor Many a times web application pen-testers are encountered with the presence of .svn folders. For those not aware .svn folder is used by SVN version control system to perform its operations. For a blackbox pentest this folder contains huge amount of information. Some of the key areas...

libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly

A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used th...

CVE-2026-112075

A flaw was found in unsloth. The sentence transformer module improperly validates user-controlled input when resolving class references. A remote attacker could exploit this vulnerability by enticing a user to process specially crafted input, potentially leading to arbitrary code execution and...

foxguard

foxguard Fast local security scanning for code, secrets, dependencies, and crypto risk. Integrated into 0sec, the open cybersecurity harness. PyPI npx foxguard . Why 200+ built-in rules across 12 source languages, plus config and manifest checks Taint tracking for 14...

bromure

Bromure Secure, ephemeral computing in disposable Linux VMs on macOS. → Full details, screenshots, and downloads at bromure.io This repo ships two sibling apps, both built on Apple's Virtualization.framework: Bromure — every browser session runs in a throwaway Linux VM. Close the window, the VM i...

Kaonashi

Kaonashi Project: RootedCON 2019 This repository contains several directories: Sorted Masks for hashcat Advanced Rules for hashcat Links to download the Kaonishi's Wordlists Slides used in our talk I know your p4$$w0rd and if I don't, I will guess it... at RootedCON 2019 A clone may not be...

CVE-2020-1967

CVE-2020-1967 Proof of concept exploit about OpenSSL signaturealgorithmscert DoS flaw CVE-2020-1967. Credit for the original finding to Bernd Edlinger, additional analysis by Matt Caswell and Benjamin Kaduk, this demo by Imre Rad. Prerequisite Server or client applications that call the...

usbsas

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Overview Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of the...

check-spelling

@check-spelling/check-spelling GitHub Action Overview Everyone makes typos. This includes people writing documentation and comments, but it also includes programmers naming variables, functions, APIs, classes, and filenames. Often, programmers will use InitialCapitalization, camelCase, ALLCAPS, o...

spraykatz

Spraykatz Spray love around the world Index Title| Description ---|--- About| Brief Description about the tool Installation| Installation and Requirements Usage| How to use Spraykatz Changelog| Spraykatz changelog Acknowlegments| Acknowlegments About Spraykatz is a tool without any pretention abl...

FortiWeb-cve-2025-64446-RCE-exploit

FortiWeb CVE-2025-64446 RCE Exploit Professional security research & vulnerability assessment framework Installation · Quick Start · Usage · Architecture · CLI Reference · Disclaimer Overview FortiWeb Research Tool is a Python assessment framework for authorized detection and analysis of...

CVE-2021-3019

CVE-2021-3019 LanProxy Directory Traversal Lanproxy is an intranet penetration tool that proxies LAN personal computers and servers to the public network. It supports tcp traffic forwarding and supports any tcp upper layer protocol access to intranet websites, local payment interface debugging, s...

CVE-2019-19781-Checker

CVE-2019-19781-Checker Check your website for CVE-2019-19781 Vulnerable VISIT https://citrix-checker.com TO CHECK IF YOU ARE VULNERABLE FOR CVE-2019-19781 PLEASE USE OUR CHECKER TWO TIMES TO BE SURE This website gives you the results if your service is vulnerable for CVE-2019-19781. There is a...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...