KubiScan

!GitHub releaserelease-imgrelease !Licenselicense-imglicense A tool for scanning Kubernetes cluster for risky permissions in Kubernetes's Role-based access control RBAC authorization model. The tool was published as part of the "Securing Kubernetes Clusters by Eliminating Risky Permissions"...

bash-fix-exploit

bash-fix-exploit A tiny role that checks to see if the CVE-2014-6271 exploit is still valid Use at your own risk... Read about the exploit here: https://community.rapid7.com/community/infosec/blog/2014/09/25/bash-ing-into-your-network-investigating-cve-2014-6271 Requirements Assumes that you're...

CVE-2024-39248

Exploit Title: SimpCMS v0.1 - Cross Site Scripting XSS CVE: CVE-2024-39248 Exploit Author: Jason Jacobs 0xjasonjacobs - Twitter Vendor Homepage: https://sourceforge.net/projects/simpcms/ Vulnerable endpoint: /SimpCMS/admin.php A cross-site scripting XSS vulnerability in SimpCMS v0.1 allows...

cyanide

What is Cyanide? As the name suggests, it's poison. Cyanide is essentially a tracker for correlating various poisoning techniques currently only Responder is used in conjuction with relaying the captured hashes via Impackets ntlmrelayx.py. On startup it will start Responder without SMB, HTTP, or...

defcon32

Defcon 32 - BugBounty Village Workshop Slides Presentation Slides Unveiling Vulnerabilities: A Comprehensive Guide to Bug Bounty Recon Documentation ProjectDiscovery Docs Installing ProjectDiscovery Tools Install PDTM Fuzzing / DAST Workshop...

SIGRed

CVE-2020-1350 AKA SIGRed v0.30 Summary: A Zeek package for detection of attempts to exploit Microsoft Windows DNS server via CVE-2020-1350 AKA SIGRed - CVE Score of 10.0 References:...

Microsoft-CVE-2022-26809-The-Little-Boy

Microsoft-CVE-2022-26809-aka The Little Boy - POC The poc for CVE-2022-26809 RCE via RPC will be updated here. We are in the process of identifying the vulnerable code and share the simplest one-click RCE here...

CVE-2025-8875-CVE-2025-8876

CVE-2025-8875 & CVE-2025-8876 How does this detection method work? Version detection template - anything running 2025.3.1.9 or older is considered vulnerable to CVE-2025-8875 & CVE-2025-8876 How do I run this script? 1. Download Nuclei from here 2. Copy the template to your local system 3. Run th...

spoonmap

SpooNMAP Table of Contents Dependencies Installation Usage Scanning a target without a file Where Files Live Target File ranges.txt config.json Parameters scannerprofile: reducing scanner fingerprinting interface / sourceip / routerip: fixing ambiguous routing maxrate guidance Host discovery...

PANO

PANO - Platform for Analysis and Network Operations PANO is a powerful OSINT investigation platform that combines graph visualization, timeline analysis, and AI-powered tools to help you uncover hidden connections and patterns in your data. Getting Started • Features • Documentation • Contributin...

cve-2026-31431

CVE-2026-31431 "Copy Fail" — IR Playbook & Detection Package Production-ready IR playbook, detection rules, and SOC triage guidance for CVE-2026-31431 — a Linux kernel local privilege escalation in the algifaead crypto interface. Includes an interactive HTML playbook , Sigma rules, auditd configs...

CVE-2026-66066

🚨 CVE-2026-66066 — KindaRails2Shell Pre-Authentication Remote Code Execution RCE in Ruby on Rails Active Storage Educational security research repository for CVE-2026-66066 "KindaRails2Shell". This repository is intended for security research, vulnerability analysis, detection, and defensive...

CVE-2021-21234

CVE-2021-21234 Directory traversal vulnerability in the spring-boot-actuator-logview library https://blogg.pwc.no/styringogkontroll/unauthenticated-directory-traversal-vulnerability-in-a-java-spring-boot-actuator-library-cve-2021-21234...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use --threads=THREADS...

CVE_Prioritizer

CVE Prioritizer CVE Prioritizer is a powerful tool that helps you prioritize vulnerability patching by combining CVSS, EPSS, CISA's Known Exploited Vulnerabilities and VulnCheck's community resources NVD++, KEV. It provides valuable insights into the likelihood of exploitation and the potential...

PwnAdventure3

PwnAdventure3 Welcome to Pwnie Island! Pwn Adventure 3: Pwnie Island is a limited-release, first-person, true open-world MMORPG set on a beautiful island where anything could happen. That's because this game is intentionally vulnerable to all kinds of silly hacks! Flying, endless cash, and more a...

python-ecdsa

Pure-Python ECDSA and ECDH This is an easy-to-use implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital Signature Algorithm, EdDSA Edwards-curve Digital Signature Algorithm and ECDH Elliptic Curve Diffie-Hellman, implemented purely in Python, released und...

tenzir

Data Pipelines for Security Teams Collect, transform, enrich, and route your telemetry—all in one place. What is Tenzir? Tenzir is the data pipeline engine for security teams. If you need to collect, parse, shape, normalize, aggregate, store, query, and route security telemetry data at scale,...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

W3TotalChache

W3TotalChache Testing for CVE-2019-6715 Arbitrary File Read/ CVE-2024-12365 SSRF/Info Disclosure usage: python3 w3tcscanner.py -u https://example.com -f /etc/passwd -d 3 import requests import argparse from urllib.parse import urlparse def checkw3tcversionurl: try: response = requests.geturl,...