JarHunter

JarHunter – Advanced JAR Analysis & Extraction Tool JarHunter is a tool designed to explore, search and extract specific classes from large JAR files quickly and efficiently. Instead of manually browsing thousands of classes, JarHunter allows you to search keywords across the entire JAR file and...

skytrack

Acerca de skytrack es una herramienta de OSINT de reconocimiento de aeronaves y avistamiento de aviones basada en línea de comandos, hecha con Python. Puede recopilar información de aeronaves utilizando varias fuentes de datos, generar un informe PDF para una aeronave específica y convertir entre...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

loot-me

linux-loot Post Exploit Report Generation. Grabs files / commands and puts them in markdown ready for reporting and assists in finding sensitive information...

vulnreport

Proyecto Abandonado Este proyecto no recibe mantenimiento actualmente y ha sido abandonado. Vulnreport Plataforma de gestión y automatización de pentesting Vulnreport es una plataforma para gestionar pruebas de penetración y generar informes de hallazgos bien formateados y procesables sin la...

envizon

envizon - por evait security EOL https://github.com/evait-security/envizon/issues/130 Nosotros evait security nos mudamos a https://gitlab.com/invuls/pentest-projects/pcf para la documentación interna del proyecto. visualización de redes e informes de pruebas de penetración Versión 5.0 Esta...

Smersh

SMERSH Smersh es una herramienta colaborativa orientada a pentesting utilizada para rastrear el progreso de las misiones de tu empresa y generar informes. Vista previa del frontend Angular: Documentación Toda la información está disponible en la siguiente dirección:...

CVE-Exploit-Research-Development

🔐 Herramienta de Explotación SSH Solo para Uso Educativo 📌 Descripción Esta herramienta demuestra la explotación de: CVE-2008-0166 CVE-2008-1657 Se conecta a servicios SSH vulnerables y proporciona: Shell interactivo persistente Registro de ejecución de comandos Generación automática de informes...

redcell

AI agents that run a penetration test end to end and write the report. !WARNING REDCELL is provided for education, research, and legal, authorized security testing only. Use it only to test systems you own or have explicit written permission to test, and only within an agreed scope. Unauthorized...

nl-kat-coordination

================ What is OpenKAT? OpenKAT aims to monitor, record and analyze the status of information systems. The basic premise is that many of the major security incidents are caused by small errors and known vulnerabilities, and if you find them and resolve them in time your systems and...

PT-2026-107846

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer's wallet transaction history, allowing any authenticated user,...

POC-CVE-2026-19626

CVE-2026-19626 — RCE in report generation authenticated, non-admin Status: CONFIRMED — pure-REMOTE, non-admin, REST-only 6.7.2-14.el9 lab, 2026-08-21. The weaponized chain this is what poc.py does: 1. login as any regular org user 2. POST /rest/group with name: "=system''" — braces/quotes accepte...

decode-spam-headers

decode-spam-headers.py 일상적인 관리 업무를 위해 특정 이메일이 스팸/정크함에 들어간 이유를 이해하려고 하든, 레드팀 피싱 시뮬레이션 목적으로 이해하려고 하든, 이 스크립트가 도움을 드릴 수 있습니다! 아이디어는 MS Office365 E5 환경MS Defender for Office365 탑재을 대상으로 상업용 피싱 시뮬레이션을 진행하던 중 떠올랐습니다. 짐작하시겠지만, 피싱 시뮬레이션 관점에서 보면 상당히 까다로운 보안 스택입니다. 이 모든 Office365 SMTP 헤더를 수동으로 파고들어 SCL 값을...

ROS-20260925-73-0025

The vulnerability of the devlinknotifyunregister function in the net/devlink/leftover.c module, which is part of the Linux kernel’s networking functions, is related to the improper generation of crash reports. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

CVE-2026-87739

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...

CVE-2026-87739 PaperCut MF/NG: User permissions are not evaluated on report generation

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...

CVE-2026-87739 PaperCut MF/NG: User permissions are not evaluated on report generation

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...

EUVD-2026-85812

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...

CVE-2026-87739

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. Because user permissions are not evaluated during this process, an attacker can submit report generation requests without valid credentials. This flaw allows for the...

CVE-2026-87739: Authorization Bypass Through User-Controlled Key

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information...