cgi-printenv

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install cgi-printenv Run bellow command to check cgi-printenv -h Configurations 2. We integrated with the Telegram API to receive insta...

CVE-2018-14665

CVE-2018-14665 Here you can find my analisys and PoC for most used Linux distribution. For now i started from Redhat, this is the link for the official RHSA RHSA-2018:3410...

ROOT-APP-PYPI-CVE-2025-66471 CVE-2025-66471 in urllib3 - Patched by Root

Root has patched CVE-2025-66471 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

pentesting_scripts

Introduction This repository contains a random variety of penetration testing tools that consultants may find useful on their engagements. Feel free to make any changes, suggest features, or provide comments. Contact information Facebook: https://www.facebook.com/vonahisec Twitter:...

CVE-2026-103418

Firefox for iOS is vulnerable to a Universal XSS flaw because the browser directly interpolates the page’s HTML language attribute into translation JavaScript. This allows an attacker to execute code within the browser's privileged content world and bypass the page’s Content Security Policy . Thi...

CVE-2026-103418 Universal XSS via the HTML language attribute in Translation Services

Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability was fixed in Firefox for iOS 157.1...

coalmine

Cloud Canary Token Management — Deploy, monitor, and rotate deceptive credentials across AWS and GCP to detect unauthorized access. !WARNING Alpha Version — Coalmine is in early development. Basic functionality is the current priority, and the application should not be considered fully security...

cybersecurity-interview-questions

Cybersecurity Interview Questions A Free, Open‑Source Collection for Red Team, Blue Team, Web Security, Incident Response & More Overview This repository is a curated collection of 200+ cybersecurity interview questions and answers – designed for anyone preparing for roles in: Red Teaming /...

PolarDNS

PolarDNS is a specialized authoritative DNS server written in Python 3.x, originally developed as a tool for security testing of DNS recursive resolvers from the server-side. It allows the operator to produce custom DNS responses, making it suitable for in-depth DNS protocol testing purposes...

BIT-ELASTICSEARCH-2026-103009 Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure

Authorization Bypass Through User-Controlled Key CWE-639 in Elasticsearch can lead to Information Disclosure via a specially crafted cross-cluster search request that references an unauthorized shard identifier. Elasticsearch contains an authorization bypass weakness in its handling of...

svja

svja The RDPS Super Vulnerable Java Application is just that -- a super vulnerable java application created for the benefit of all to see a variety of common, often "complex", vulnerabilities. This software was created as part of the Roniel and DaRon Podcast Show...

password_generator

PassForge - All-in-One Password Generator CLI A production-ready, cryptographically secure password generator CLI with 17 generation modes, entropy transparency, and comprehensive customization options. Features 17 Generation Modes Generator| Command| Description ---|---|--- Random| random, r|...

ics-phishing-toolkit

ics-phishing-toolkit This toolkit for remediating malicious calendar invites is designed to help teams using email security solutions that don't natively remediate these attacks. If you're using Sublime, you don't need this toolkit because remediation is natively supported. Supported stacks...

imagick_secure_puppet

just include the class and if imagick exists ... it'll blow out the policy.xml with a slightly modified ubuntu 14.04 base version w/ extra policies in place Executing via puppet apply: $ git clone https://github.com/jackdpeterson/imagicksecurepuppet.git $ mv imagicksecurepuppet imagicksecure $ su...

CiclopeClic

CiclopeClic Controlled AI-driven security awareness tool Welcome to CiclopeClic! 🔐 Imagine having the power to generate secure, personalized links for ethical phishing campaigns at your fingertips. That's CiclopeClic! Our tool is revolutionizing how security teams conduct controlled phishing test...

kerneleye

KernelEye Kernel-level traffic intelligence and threat remediation for Linux servers. KernelEye is a self-hosted security monitoring platform for Linux servers. It uses eBPF, TC, and XDP in a Go agent to observe network metadata, score suspicious activity, and apply remediation through kernel-lev...

GuardScan

🛡️ GuardScan 100% Free & Open Source • Privacy-First Security Scanning and AI Code Review CLI / | | | | / \ | | \ / | / | / \ | \ | | / | | | | | | | | | |/ \ | | | | | | \ | | / \ | | | | | | | | | | || | || / | | || | | | / | |\ | || | || | | | |// \| \/ |/ // \| | ||| Privacy-First...

SCADAShutdownTool

SCADA Shutdown Tool SCADA Security Testing tool SCADAShutdownTool is an industrial control system automation and testing tool allows security researchers and experts to test SCADA security systems, enumerate slave controllers, read controller's registers values and rewrite registers data...

CVE-2026-65013-BOLA-IDOR

CVE-2026-65013-BOLA-IDOR Reproducible PoC ofBOLA / IDOR in the tRPC API of Onlook CVE-2026-65013. Any authenticated user can read, modify, and delete projects, members, and AI history of other users just by passing their UUIDs to the tRPC procedures versions = 0.2.32. | ---|--- CVE| CVE-2026-6501...

appsec-agent

AppSec Agent AI-powered security agents for code review, PR scanning, threat modeling, fix generation, and more. You can use AppSec Agent in three ways: Path| Best for| Get started ---|---|--- CLI agent-run| Trying agents from your terminal| Getting started npm library| Building your own app or...