hermes-osint

Hermes OSINT v3.0 🏛️🧠 El Analista OSINT Agentic Investigaciones impulsadas por IA conversacional. Lenguaje natural. Resultados expertos. 🤖✨ Novedades en v3.0 🎉️ Hermes 3.0 representa un cambio de paradigma completo: de la orquestación de herramientas basada en pipelines a una plataforma de...

DIRT

DIRT: Driver Initial Reconnaissance Tool I'm writing this tool to learn C++ and get an initial assessment of drivers installed on a Windows system e.g. master images developed by OEMs or enterprises. It's supposed to help with target selection, finding low-hanging fruit, and some assistance with...

The-Axer

L'axer sostituirà la procedura manuale di creazione dei tuoi payload con msfvenom, rendendola più semplice e molto più veloce Contatta il proprietario L'AXER TI PERMETTE DI SCEGLIERE LA PIATTAFORMA, IL FORMATO, IL CODER, BIND con un altro file e molte altre funzionalità...

prowler

Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...

catsploit

CATSploit🐈 CATSploit è uno strumento di penetration testing automatizzato che utilizza il metodo Cyber Attack Techniques Scoring CATS e può essere utilizzato senza un penetration tester. Attualmente, i penetration tester selezionano implicitamente le tecniche di attacco appropriate per i sistemi...

catsploit

CATSploit🐈 CATSploit is an automated penetration testing tool using Cyber Attack Techniques Scoring CATS method that can be used without pentester. Currently, pentesters implicitly made the selection of suitable attack techniques for target systems to be attacked. CATSploit uses system...

evilTrust

evilTrust Strumento ideale per il dispiegamento automatizzato di un Rogue AP con capacità di selezione del template + 2FA. Questo strumento dispone di diversi template da utilizzare, inclusa un'opzione di template personalizzato, dove l'attaccante è in grado di distribuire il proprio template...

msfpc

MSFvenom Payload Creator MSFPC A quick way to generate various "basic" Meterpreter payloads via msfvenom part of the Metasploit framework. About MSFvenom Payload Creator MSFPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only...

prism

Geladener Würfel: Lösung des Nichtauswahlproblems für skalierbare probabilistische RowHammer-Abwehr Erscheint im 53. International Symposium on Computer Architecture ISCA, 2026. Jeonghyun Woo1, Junsu Kim1, Aamer Jaleel2, Prashant J. Nair1 1 University of British Columbia 2 NVIDIA Gleicher Beitrag...

CVE-2026-33910_SqlInjectionVulnerabilityOpenEMR8.0.0.2

CVE-2026-33910 - SQL-Injection-Schwachstelle in OpenEMR Schwachstelle CWE-89 Unsachgemäße Neutralisierung spezieller Elemente, die in einem SQL-Befehl verwendet werden 'SQL Injection' Das Produkt erstellt einen SQL-Befehl vollständig oder teilweise unter Verwendung von extern beeinflussten Eingab...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

Nmap-Cheat-Sheet

Nmap-Cheat-Sheet Selezione del target Nmap root@kitploit: Scan a single IP nmap 192.168.1.1 Scan a host nmap www.testhostname.com Scan a range of IPs nmap 192.168.1.1-20 Scan a subnet nmap 192.168.1.0/24 Scan targets from a text file nmap -iL list-of-ips.txt Selezione delle porte Nmap...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

cve-2026-59891-control-lab

CVE-2026-59891 Regression & Control Lab Progetto di laboratorio isolato e di audit in sola lettura che confronta la versione realmente vulnerabile e quella corretta di @sigstore/oci con lo stesso input e verifica le condizioni di esposizione per ambiente. Il CVE Reporter di questo progetto è...

recipe-blog-encoding

recipe-blog-encoding !WARNING Questo progetto è interamente vibe-coded probabilmente parzialmente plagiato da questo repository e l'autore è un dumb-dumb che ha solo pensato che l'idea fosse divertente Usa i preamboli di ricette SEO-gaming come veicolo per codificare messaggi segreti il prompt pu...

YARA-Performance-Guidelines

YARA-Leistungsrichtlinien Das Schreiben effizienter YARA-Regeln ist entscheidend, um eine schnelle und genaue Scan-Leistung zu gewährleisten. Dieser Leitfaden enthält wichtige Prinzipien und Best Practices, die Ihnen helfen, Ihre Regeln zu optimieren, unnötige Berechnungen zu reduzieren und häufi...

GHSA-2CP2-2R3C-7P7R Hydra: hydra.utils.instantiate with untrusted config can lead to code execution

Summary hydra.utils.instantiate resolves and calls Python objects from config. If an application passes untrusted config to instantiate, an attacker who controls target and its arguments can cause arbitrary code execution in the consuming process. Hydra is not a network service. Exploitation...

EUVD-2026-63850

A vulnerability in misp-stix could allow a crafted STIX document to influence security-sensitive MISP attribute metadata during import. The STIX import logic automatically selected between the internal MISP parser and the external STIX parser based on metadata contained in the STIX document itsel...

EUVD-2026-63126

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that does not hold the fshmanage capability could perform Remote Code Execution through Federated Search bundle selection. This could allow for access to all relevant data and affect system integrity and...