CVE-2024-10793

CVE-2024-10793 PoC Set this lines to your hosts file: 127.0.0.1 goodcms.lab 127.0.0.1 attacker.com Launch Wordpress using docker: $ sudo systemctl start docker $ sudo docker-compose up -d Open http://goodcms.lab:2121 and do installation wordpress steps. Install wp-security-audit-log.5.2.1 or olde...

Wynis

Wynis Just a powershell scripts for auditing security with BEST Practices Windows env You just need to run the script, it will create a directory named : AUDITCONF%MACHINENAME%DATE% Actualy, the script are : -WynisWIN2016DC-CISv1.0 : Auditing DC 2016 with CIS -Wynis-AD : Auditing Domain Security...

fuzzing-templates

Fuzzing Templates Community curated list of fuzzing templates for the nuclei engine to find unknown security vulnerabilities. Documentation • Contributions • Discussion • Community !Caution This repository is archived and merged into nuclei-templates project under /dast directory. Fuzzing templat...

BurpAPISecuritySuite

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. BurpAPISecuritySuite Professional-grade Burp Suite extension for comprehensive API...

CVE-2020-15916

EN GenLANConfigAttack - is a PoC for exploiting CVE-2020-15916 , a vulnerability that allows unauthorized changes to the LAN configuration of a device. Features Exploits LAN configuration vulnerability Sends malicious payload to alter network settings Bypasses security mechanisms for gaining...

spiderfoot

SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...

tulpar

Tulpar is a open source web vulnerability scanner for written to make web penetration testing automated. Tulpar has the following features. -Sql Injection GET Method -XSS GET Method -Crawl -E-mail Disclosure -Credit Card Disclosure -Whois -Command Injection GET Method -Directory Traversal GET...

Teach-AppSec

Teach-AppSec Teach AppSec is a OWASP Application Security project which currently has teaching modules for Risk Management, Software Developement and Operations Security. More modules will be added to this project as and when they are developed. This project is made available on GNU general Publi...

CVE-2026-25857

https://nvd.nist.gov/vuln/detail/CVE-2026-25857...

gosec

gosec - Go Security Checker Inspects source code for security problems by scanning the Go AST and SSA code representation. Quick links GitHub Action Local installation Quick start Common usage patterns Selecting rules Output formats Features Pattern-based rules for detecting common security issue...

meg

meg meg is a tool for fetching lots of URLs but still being 'nice' to servers. It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating. You get lots of results quickly, but non of the individual hosts get flooded with...

Portspoof

Portspoof Portspoof emulates open ports and service signatures across all 65535 TCP ports, turning the reconnaissance phase from a quick scan into a long, resource-intensive process. Scanners see thousands of convincing but fake services, making it impractical to identify the real attack surface...

sigma-rules

Sigma Rules Community Sigma Rules written by Joe Security for threat hunting in sandboxes, licensed under GPL. For a detailed description about our Sigma rules for Sandboxes please have a look at this Blog Post...

agentseal

Security toolkit for AI agents. Red-team prompts, detect MCP poisoning, scan skill files, trace toxic data flows. 225+ tests across 28 agents. Docs · MCP Registry · Dashboard · Blog Quick Start pip install agentseal or: npm install agentseal agentseal guard scan your machine - no API key needed...

w3af

w3af - Web Application Attack and Audit Framework w3af is an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site...

QuadraInspect

QuadraInspect / /\ \ / / / / / / / / / / / / / / / / // // / / / / / / / // / // / // / // / / / // // // / / // / / // / \\,/,/,// ,/// /// .//// // The security of mobile devices has become a critical concern due to the increasing amount of sensitive data being stored on them. With the...

yatas

YATAS Yet Another Testing & Auditing Solution The goal of YATAS is to help you create a secure AWS environment without too much hassle. It won't check for all best practices but only for the ones that are important for you based on my experience. Please feel free to tell me if you find something...

sec-af

SEC-AF AI-Native Security Auditor Built on AgentField Output • Benchmark • How It Works • Comparison • Quick Start • API Other tools flag patterns. SEC-AF proves exploitability : every finding ships with a verdict, a data flow trace, and evidence you can act on. Free, open source, one API call. A...

rogue

The Rogue Toolkit Getting Started Read The Docs for all the latest supported arguments and example use cases Installation toolkit's installation guide...

Ghostwriter

Ghostwriter Ghostwriter is an open-source platform designed to enhance offensive security operations by simplifying report writing, asset tracking, and assessment management. It offers tools for managing clients, creating a reusable findings library, and organizing the infrastructure and domains...