CVE-2026-39117

An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.php...

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

agent-scan

Snyk Agent Scan Discover and scan agent components on your machine for prompt injections and vulnerabilities including agents, MCP servers, skills. Note: We don't publish an npm package for Agent Scan. Install it via uvx or as a standalone binary. Note: CLI output is experimental and subject to...

mallory

mallory HTTP/HTTPS proxy over SSH. Installation Local machine: go install github.com/justmao945/mallory/cmd/mallory@latest Remote server: need our old friend sshd Configuration Config file Default path is $HOME/.config/mallory.json, can be set when start program mallory -config path/to/config.jso...

getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

CVE-2022-44877

CVE-2022-44877 Overview This bash script is used to test the vulnerability of web servers to CVE-2022-44877. The script performs a curl request to a target URL with a payload encoded in base64. If the target is vulnerable to the CVE-2022-44877 vulnerability, the elapsed time of the curl request...

agent-opfor

面向AI智能体、LLM应用和MCP服务器的开源对抗仿真工具。 像真实攻击者一样测试你的AI——从命令行、IDE或浏览器扩展（团队中任何人都可使用）即可完成。 网站 · 文档 · GitHub · 浏览器扩展 · Discord OPFOR 是 "Opposition Force"（对抗部队）的缩写——这是一个军事术语，指在训练中扮演敌军的单位，让其他部队在真正的攻击来临之前感受真实攻击的样子。我们根据这个理念命名了该工具：要更好地防御AI智能体，必须先攻击它们。 为什么我们构建了这个工具...

ssh-auditor

SSH Auditor Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known host whose ssh version or key fingerprint changes...

jarm

JARM Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security TLS server fingerprinting tool. JARM fingerprints can be used to: Quickly verify that all servers in a group have the same TLS configuration. Group disparate servers on the internet by...

cbrutekrag

cbrutekrag Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by loca...

Responder

Responder Responder es un envenenador de LLMNR, NBT-NS y MDNS con servidores de autenticación falsos incorporados para HTTP, SMB, MSSQL, FTP, LDAP, Kerberos, DNS y más. Soporta NTLMv1/NTLMv2/LMv2, NTLMSSP de seguridad extendida y varios métodos de autenticación en más de 15 protocolos. Tabla de...

mcp-xray

MCP X-Ray 概述 MCP X-Ray 是一个统一的、开源的模型上下文协议（MCP）服务器安全扫描与渗透测试解决方案。它生成可用于生产的 SARIF 报告，以便无缝集成到安全工具和 CI/CD 流水线中。扫描结果可以可选地上传到 Traceforce Atlas 进行集中安全管理和跟踪。Atlas 注册表中包含超过 600 个 MCP，为 MCP 生态系统提供了全面的安全评估数据库。 安装 前提条件 Go 1.25.4 或更高版本 从源码构建 克隆仓库 git clone https://github.com/traceforce/mcp-xray cd mcp-xray...

MSSqlPwner

MSSqlPwner MSSqlPwner 是一款先进且多功能的渗透测试工具，旨在无缝交互并攻陷 MSSQL 服务器。 该工具基于 impacket，允许攻击者使用明文密码、NTLM 哈希和 Kerberos 票据对数据库进行身份验证。 借助 MSSqlPwner，用户可以通过多种方法执行自定义命令，包括自定义程序集、xpcmdshell、spoacreate（OLE 自动化过程）等。 该工具从对链接服务器和可能的模拟进行递归枚举开始，以收集所有可能的命令执行链。 此外，MSSqlPwner 工具还可用于 NTLM 中继功能，利用诸如...

pagodo

pagodo - Passive Google Dork Introduction pagodo automates Google searching for potentially vulnerable web pages and applications on the Internet. It replaces manually performing Google dork searches with a web GUI browser. There are 2 parts. The first is ghdbscraper.py that retrieves the latest...

aimap

AIMap Plataforma de descubrimiento y pruebas de seguridad a escala de Internet para infraestructura expuesta de agentes de IA. AIMap encuentra, identifica y prueba la seguridad de endpoints de IA expuestos públicamente — servidores MCP, instancias Ollama, proxies vLLM/LiteLLM, cadenas LangServe,...

ddoor

ddoor cross platform backdoor using dns txt records What is ddor? ddor is a cross platform light weight backdoor that uses txt records to execute commands on infected machines. Features Allows a single txt record to have seperate commands for both linux and windows machines List of around 10 publ...

pkgxray

pkgxray — seguridad previa a la instalación para paquetes npm, servidores MCP y agentes de IA Inspecciona un paquete npm o un servidor MCP antes de instalarlo o conectarte a él, y obtén un veredicto determinista respaldado por evidencia: SAFE, REVIEW o BLOCK. Análisis estático local y sin...

vulnerable-mcp-servers-lab

Laboratorio de Servidores MCP Vulnerables Este repositorio contiene implementaciones intencionalmente vulnerables de servidores del Model Context Protocol MCP tanto locales como remotos. Cada servidor se encuentra en su propia carpeta e incluye un README.md dedicado con todos los detalles sobre q...

CVE-2026-49975-POC

CVE-2026-49975 — PoC de Bomba HTTP/2 Exploit de prueba de concepto para CVE-2026-49975, una vulnerabilidad remota de denegación de servicio en implementaciones de servidores HTTP/2. Descubierto por Quang Luong Calif Security Research, divulgado el 2 de junio de 2026. Solo para pruebas de segurida...

malcom

Malcom - Malware Communication Analyzer Malcom is a tool designed to analyze a system's network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate wit...