44 matches found
MINI-QMHW-4F3W-X8WX
Bulletin has no description...
TLS-Scanner v7.0.0-rtc
TLS-Scanner TLS-Scanner is a tool to assist pentesters and security researchers in the evaluation of TLS server and client configurations. Please note: TLS-Scanner is a research tool intended for TLS developers, pentesters, administrators and researchers. There is no GUI. It is in the first versi...
TLS-Attacker v7.0.0-rtc
TLS-Attacker TLS-Attacker is a Java-based framework for analyzing TLS libraries. It is able to send arbitrary protocol messages in an arbitrary order to the TLS peer, and define their modifications using a provided interface. This gives the developer an opportunity to easily define a custom TLS...
TLS-Attacker v7.8.0
TLS-Attacker TLS-Attacker is a Java-based framework for analyzing TLS libraries. It is able to send arbitrary protocol messages in an arbitrary order to the TLS peer, and define their modifications using a provided interface. This gives the developer an opportunity to easily define a custom TLS...
Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager
Executive Summary The CVE-2026-20127 Defensive Companion is a...
Log4j2Scan-1.4.0
Log4j2Scan This tool is only for learning, research and sel...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 A security research tool for detecting and anal...
DNG File Generator for Security Testing Masked RGB Tables
This Python script is a research-oriented DNG Digital Negative file generator designed to build a specially crafted image file with controlled metadata structures for security testing of DNG processing engines...
CVE-2026-5632 assafelovic gpt-researcher HTTP REST API Endpoint missing authentication
A vulnerability was found in assafelovic gpt-researcher up to 3.4.3. This impacts an unknown function of the component HTTP REST API Endpoint. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit has been made public and could be...
Windows File Explorer NTLM Forced Authentication Hash Disclosure 1.0
Windows File Explorer contains persistent forced authentication behavior that automatically transmits NTLM challenge-response hashes to remote SMB/WebDAV endpoints during routine file operations, enabling credential theft and potential domain compromise through NTLM relay attacks. This is not an...
📄 Backdoor.Win32.ControlTotal.t Hardcoded-Password Backdoor
This tool was design to leverage a hardcoded password backdoor in Backdoor.Win32.ControlTotal.t to simulate communications with the malware. ============================================================================================================================================= | Title :...
Taguette 输入验证错误漏洞
Taguette is a qualitative research tool by the individual developer Remi Rampin. An input validation error vulnerability exists in Taguette 1.5.1 and prior versions, which stems from insufficient validation of the next parameter and could lead to phishing attacks...
ABAC Lab: an Interactive Platform for Attribute-Based Access Control Policy Analysis, Tools, and Datasets
Attribute-Based Access Control ABAC provides expressiveness and flexibility, making it a compelling model for enforcing fine-grained access control policies. To facilitate the transition to ABAC, extensive research has been conducted to develop methodologies, frameworks, and tools that assist...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
CVE-2025-24813-Exploit Apache Tomcat Remote Code Execution RC...
Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft
This is a PoC exploit for CVE-2024-38063, a 0-day vulnerability...
Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft
It is an offensive tool for fuzzing. This repository contains a...
Malicious code in brave-research-participation-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aabb0d4d11817436c523cc8b6a7cec461ac62c46889ef22bddae8fb9a66a6e4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
watersafety.org.nz XSS vulnerability
Vulnerable URL: http://www.watersafety.org.nz/research-tool/print.php?id=13'"88 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6046237 VIP website status:| No Coordinated Disclosure Timeline: Description| Value...
Social Media Mining: MassMine
MassMine is a social media mining and archiving application that simplifies the process of collecting and managing large amounts of data across multiple sources. It is designed with the researcher in mind, providing a flexible framework for tackling individualized research needs. MassMine is...
Metasploit Framework v3.5.2 latest version download !
Our favourite exploitation framework – The Metasploit Framework has been updated! We now have Metasploit Framework version 3.5.2! "The Metasploit Framework is a penetration testing toolkit, exploit development platform, and research tool. The framework includes hundreds of working remote exploits...