Dumb0

Dumb0 A simple tool to dump users forums popular forums and CMS WordPress, SMF, vBulletin, IP Board, XEN forums, myBB, useBB, vanilla, bbPress.... Supported 27 forums/CMS help us to grow the number!: SMF -- Simple Machine Forums IPB -- Invision Power Board XEN -- Xen Foro VB -- vBulletin myBB --...

CVE-2026-117549

@fastify/secure-session is a session plugin for Fastify that stores an encrypted session in a cookie. In versions 7.5.0 through 8.4.1, when the plugin is configured with the signed cookie option, it calls the cookie unsign routine but, when the signature check reports the value as invalid, still...

CVE-2026-57196

A flaw was found in Asterisk. When phone provisioning resphoneprov is enabled, reflected cross-site scripting in HTTP error pages allows an unauthenticated remote attacker to steal an authorized user's Asterisk Manager Interface AMI session cookie and impersonate that user. Exploitation requires...

ja4

JA4+™ Network Fingerprinting JA4+ is a suite of network fingerprinting methods by FoxIO that are easy to use and easy to share. These methods are both human and machine readable to facilitate more effective threat-hunting and analysis. The use-cases for these fingerprints include scanning for...

Bastillion

Bastillion A modern, web-based SSH console and SSH key management tool. Bastillion gives you a clean, browser-based way to manage SSH access across all your systems — like a bastion host with a friendly dashboard. It does two things: 1. Web-based SSH terminal — once a host is registered, authoriz...

SessionHop

SessionHop SessionHop is a C tool that utilizes the IHxHelpPaneServer COM object, configured to run as an Interactive User, to hijack specified user sessions. By creating a session moniker and utilizing the COM object's Execute interface, operators can run arbitrary files within another user's...

cookiemonster

🍪 CookieMonster CookieMonster is a command-line tool and API for decoding and modifying vulnerable session cookies from several different frameworks. It is designed to run in automation pipelines which must be able to efficiently process a large amount of these cookies to quickly discover...

ssh-mitm

SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...

third-thoughts

Third Thoughts A Lightless Labs research project studying AI agent behavior at scale through multi-disciplinary corpus analysis basically, throwing stuff at the wall and seeing what sticks. Named after Tiffany Aching's concept from Discworld: first thoughts agents thinking, second thoughts agents...

DCOMIllusionist

🎩✨🪄 DCOMIllusionist Windows fileless lateral movement technique. Introduction • Build • Usage • Technical Details • Acknowledgements Introduction This tool enables remote code execution on a Windows machine, if you have administrative privileges. It leverages DCOM and the behavior of .NET DCOM...

CVE-2026-120340

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project. This issue affects some unknown processing of the component Global Session Handler. Executing a manipulation can lead to session expiration. The attack may be launched remotely. A high complexity level is associated with...

sessionprobe

SessionProbe 🚀⚡ SessionProbe is a multi-threaded pentesting tool designed to assist in evaluating user privileges in web applications. It takes a user's session token and checks for a list of URLs if access is possible, highlighting potential authorization issues. SessionProbe deduplicates URL...

TeleShadow3

TeleShadow3 Teleshadow3- Advanced Telegram Desktop Session Hijacker! Download Click HERE to download the latest version! Screenshot Stealing desktop telegrams has never been so easy ! Set the email and sender details of the sender and recipient or use Telegram API! and send it to the victim after...

CVE-2026-120337

A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly...

CVE-2026-120340 mathurvishal CloudClassroom-PHP-Project Global Session session expiration

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project. This issue affects some unknown processing of the component Global Session Handler. Executing a manipulation can lead to session expiration. The attack may be launched remotely. A high complexity level is associated with...

CVE-2026-120340

A weakness in the Global Session Handler component of mathurvishal CloudClassroom-PHP-Project allows for potential session expiration via remote manipulation. The vulnerability is associated with CWE-613 (Insufficient Session Expiration) . Due to a rolling release cycle, specific affected version...

EUVD-2026-115063

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project. This issue affects some unknown processing of the component Global Session Handler. Executing a manipulation can lead to session expiration. The attack may be launched remotely. A high complexity level is associated with...

Aker

Aker SSH Gateway What is Aker? Aker is a security tool that helps you configure your own Linux ssh jump/bastion host. Named after an Egyptian mythology deity who guarded the borders, Aker would act as choke point through which all your sysadmins and support staff access Linux production servers...

CVE-2026-120337

A use after free vulnerability exists in the P2P Session Teardown component of VStarcam O-KAM SuperIPCam 1.3.3.32 . Specifically, the function FUN_005a2d44 within the SuperIPCam.exe file is affected. This flaw can be triggered via a remote attack to manipulate memory. While the exploit has been p...

EUVD-2026-115061

A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly...