webanalyze

webanalyze This is a port of Wappalyzer in Go. This tool is designed to be performant and allows to test huge lists of hosts. !NOTE Because Wappalyzer removed the public access to their app definitions, webanalyze currently loads definitions from enthec. Installation and usage Precompiled release...

cve-2024-11477-writeup

CVE-2024-11477 Writeup This is a writeup of my research on CVE-2024-11477. Keep in mind this may have errors and will not be perfect, as this was a pretty quick analysis. Please let me know if you disagree with anything! See the other Markdown file for the information on the different files...

burpgpt

!IMPORTANT Announcing the launch of BurpGPT Pro, the edition specifically tailored to meet the needs of professionals and cyber boutiques. Discover a host of powerful features and a user-friendly interface that enhances your capabilities and ensures an optimal user experience. To access these...

CVE-2024-4358

Telerik Report Server Authentication Bypass - CVE-2024-4358 Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicabl...

lazyrecon

/ \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Usage ./lazyrecon.sh target.com About This script is intended to automate your reconnaissance process in an organized fashion by performing the...

awesome-pentest

Awesome Penetration Testing A collection of awesome penetration testing and offensive cybersecurity resources. Penetration testing is the practice of launching authorized, simulated attacks against computer systems and their physical infrastructure to expose potential security weaknesses and...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...

CVE-2025-46731

CVE-2025-46731 See report.md...

cervantes

Cervantes es una plataforma colaborativa de código abierto diseñada específicamente para pentesters y equipos rojos. Sirve como una herramienta de gestión integral, agilizando la organización de proyectos, clientes, vulnerabilidades e informes en una única ubicación centralizada. Al facilitar una...

CVE-2026-107574

Progressive Robot hMailServer is vulnerable to a Denial of Service (DoS) attack due to inefficient algorithmic complexity (O(N^2)) in its JSON reader. The component fails to efficiently handle duplicated member names, causing significant processing delays: a 4 MB object can take 300 seconds to pr...

EUVD-2026-94854

Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer allows a remote unauthenticated attacker to make the mail services unavailable. Reading a JSON object kept the first of each duplicated member name by searching the members already read, so an object of N...

vulnrepo

VULNRΞPO - Generador y Repositorio de Informes de Vulnerabilidades Un gestor de informes de vulnerabilidades del lado del cliente, centrado en la privacidad para profesionales de la seguridad. Todos los datos se cifran y almacenan localmente en su navegador; por defecto, no se envía nada a ningún...

intelspy

Perform automated network reconnaissance scans to gather network intelligence. IntelSpy is a multi-threaded network intelligence tool which performs automated network services enumeration. It performs live hosts detection scans, port scans, services enumeration scans, web content scans,...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 16.6.1 Refer to lunar.sh and CHANGELOG.md for more up to date version information License CC BY-NC-SA: https://creativecommons.org/licenses/by-nc-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code i...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

catnip

Cat-Nip Automated Basic Pentest Tool this tool will make your basic pentesting task like Information Gathering, Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone Cat-Nip git clone https://github.com/baguswiratmaadi/catnip Go Inside Cat-Nip Dir c...

SteppingStones

Stepping Stones Purpose A hub for Red Team activity to aid in record keeping, situational awareness and reporting. Stepping Stones provides a web based UI for the team to log activity and generate report snippets. The UI is intended to be rapid enough to be used throughout the engagement, not jus...

OSCP-Exam-Report-Template-Markdown

Plantilla de Informe de Examen de Seguridad Ofensiva en Markdown Creé una Plantilla de Informe de Examen de Seguridad Ofensiva en Markdown para que ya no necesites LaTeX, Microsoft Office Word o LibreOffice Writer durante tu examen de Offensive Security OSCP, OSWE, OSEE, OSWP, OSEP, OSED, OSWA,...

gowitness

gowitness Una utilidad de captura de pantalla web en Golang, que utiliza Chrome Headless. introducción gowitness es una utilidad de captura de pantalla de sitios web escrita en Golang, que utiliza Chrome Headless para generar capturas de pantalla de interfaces web mediante la línea de comandos, c...