117782 matches found
anchore-engine
Anchore Engine IMPORTANT NOTE As of 2023, Anchore Engine is no longer maintained. There will be no future versions released. Users are advised to use Syft and Grype. For users interested in a supported commercial solution for container scanning and complaiance, schedule a demo to see Anchore...
Quasar
Quasar Free, Open-Source Remote Administration Tool for Windows Quasar is a fast and light-weight remote administration tool coded in C. The usage ranges from user support through day-to-day administrative work to employee monitoring. Providing high stability and an easy-to-use user interface,...
CVE-2026-85148
creationtimestamp| type| source ---|---|--- 2026-09-04 03:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3munyzel7mh2b 2026-09-04 03:35:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5vpljehfiajj3 2026-09-04 04:02:47+00:00| seen|...
CVE-2026-85149
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host...
CVE-2026-85146
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SSH service account credentials and passwords for the SmartIT Agent directly from the application source code...
socialhunter
socialhunter !IMPORTANT This tool is no longer working, and we won't be able to fix it as it has become difficult to bypass social media protections. Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct phishing attack...
php-malware-finder
PHP Malware Finder root@kitploit: | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detect potentially malicious PHP files. What does it detect? PHP-malware-finder does its very best to detect obfuscated/dodgy code as we...
reposaur
Reposaur Reposaur es la herramienta de cumplimiento de código abierto para plataformas de desarrollo. Audita, verifica y reporta tus datos y configuraciones fĆ”cilmente con polĆticas predefinidas y/o personalizadas. Soporta GitHub. Soporte para GitLab, BitBucket y Gitea próximamente. ā ļø antes de...
reposaur
Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ā ļø before 1.0.0 expect some bugs and API changes ā ļø...
abaddon
Abaddon Las operaciones de red team implican habilidades variadas, duran varios meses y son polĆticamente sensibles; requieren mucha monitorización, consolidación y precaución. El software de gestión de operaciones de red team de Wavestone, Abaddon, ha sido diseƱado para hacer las operaciones de...
abaddon
Abaddon Red team operations involve miscellaneous skills, last several months and are politically sensitive; they require a lot of monitoring, consolidating and caution. Wavestoneās red team operations management software, Abaddon, has been designed to make red team operations faster, more...
TBomb
TBomb v2.1b A free and open-source SMS/Call bombing application Announcement Important Notice: Due to a combination of low-quality contributions, spam pull requests/issues, and my shift towards exploring new projects, Iāve made the decision to archive this repository. This project has been one of...
Leaktopus
Deprecation Notice Dear Leaktopus Users, We want to inform you that the Leaktopus project will be officially deprecated. After careful evaluation, we have decided to discontinue active development and maintenance of this library. What Does This Mean for You? No New Features or Updates: We will no...
EAST
Extensible Azure Security Tool Extensible Azure Security Tool Later referred as E.A.S.T is tool for assessing Azure and to some extent Azure AD security controls. Primary use case of EAST is Security data collection for evaluation in Azure Assessments. This information JSON content can then be us...
warhorse
Warhorse Table of contents Overview Features Documentation Development Acknowledgments Overview Warhorse consists of a fully-featured Ansible playbook to deploy infrastructure in the cloud for conducting security assessments. The Playbook combines Terraform & Ansible to deploy and configure virtu...
DevAudit
Note : DevAudit uses the OSS Index database, which has some rate limiting. If you notice you are hitting the limit please raise an issue. Authenticated users get a higher limit, and we am implementing authentication into DevAudit soon. Most non-authenticated users probably won't notice the limit...
dnSpy
dnSpy - Latest release dnSpy is a debugger and .NET assembly editor. You can use it to edit and debug assemblies even if you don't have any source code available. Main features: Debug .NET and Unity assemblies Edit .NET and Unity assemblies Light and dark themes See below for more features Binari...
CVE-2026-85149
Lightstar SmartIT Desktop Manager is affected by a Use of Hard-coded Credentials vulnerability. The SFTP service credentials for the SmartIT Agent application are embedded in the source code, allowing unauthenticated remote attackers to extract them and gain access to browse the file system of th...
CVE-2026-85149 Lightstarļ½SmartIT Desktop Manager - Use of Hard-coded Credentials
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host...
EUVD-2026-70871
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host...