fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

PF_RING

PFRING™ Introduction PFRING™ is a Linux kernel module and user-space framework that allows you to process packets at high-rates while providing you a consistent API for packet processing applications. Who needs PFRING™? Basically everyone who has to handle many packets per second. The term ‘many’...

pepeScraper

pepeScraper - 4chan scraper A complete scraper for 4chan Now that's fast. pepeScraper is a scraper that uses context for your searches and returns exactly what you want. I'm learning how to make an item look cooler than it actually is Enter keywords, anything you can think of just be careful what...

Pymap-Scanner

Pymap-Scanner Features 1-Basic Gui 2-Speed Scan 3-Custom Services 4-User Control 5-Error Control 6-Useful parameters And More. Installation Modules $ Pyqt4 $ Nmap RequirementsThird +xsltproc +SCREENSHOT...

rdpscan

rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 900,000 machines on the public Internet vulnerable to this vulnerability, so many are to expect a worm soon like WannaCry and...

catalyst

Catalyst Speed up your reactions Website - The Catalyst Handbook Documentation - Demo Catalyst is an incident response platform. It can help to automate your alert handling and incident response procedures. Features Ticket Alert & Incident Management Tickets are the core of Catalyst. They...

ImpossibleTravelLogAnalysis

Impossible Travel Log Analysis by NCC Group About Basic log analysis tool to detect impossible travel via IP address geographic information Expected Data Format A CSV file with the following headers When,User,Event,IP With the following format 2019-04-09...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

turbo-intruder

Turbo Intruder Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. It's intended to complement Burp Intruder by handling attacks that require exceptional speed, duration, or complexity. The following features set it apart: Fast - Turbo...

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

ator

Authentication Token Obtain and Replace Extender Introduction In the world of web security testing, automation is key, and Burp Suite is the go to choice. However, to truly harness the power of Burp for automated scanning, you need the right plugins. That's where ATOR comes in. This open-source...

etherify

Etherify - bringing the ether back to ethernet c 2020 Jacek Lipkowski SQ5BPF [email protected] 2020 RC3 Conference talk: https://www.youtube.com/watch?v=7ek994-fwNE Etherify 1 and 2: https://lipkowski.com/etherify with RPI 4 Etherify 3: https://lipkowski.com/etherify3/ with no ethernet cable...

CVE-2026-111737

The Speed Optimizer WordPress plugin before 7.8.5 does not sanitise or escape some of its settings before outputting them in the head of front-end pages, which could allow high-privilege users such as admins to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

CVE-2026-111738

The Speed Optimizer WordPress plugin before 7.8.5 does not verify network-level privilege before applying an option change to the whole multisite network, nor restrict which option may be changed, allowing a site administrator who is not a Super Admin to create or overwrite network-wide options...

CVE-2026-111737 Speed Optimizer < 7.8.5 - Admin+ Stored XSS via DNS Prefetch and Font Preload URL Lists

The Speed Optimizer WordPress plugin before 7.8.5 does not sanitise or escape some of its settings before outputting them in the head of front-end pages, which could allow high-privilege users such as admins to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

CVE-2026-111738 Speed Optimizer < 7.8.5 - Admin+ Network Option Update via enable-option/disable-option

The Speed Optimizer WordPress plugin before 7.8.5 does not verify network-level privilege before applying an option change to the whole multisite network, nor restrict which option may be changed, allowing a site administrator who is not a Super Admin to create or overwrite network-wide options...

CVE-2026-111737

The Speed Optimizer WordPress plugin in versions before 7.8.5 is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise or escape specific settings before they are outputted in the head section of front-end pages. This flaw allows high-privile...

CVE-2026-111738

The Speed Optimizer WordPress plugin versions before 7.8.5 is vulnerable to a privilege escalation flaw where it fails to verify network-level permissions. A site administrator who is not a Super Admin can bypass restrictions to create or overwrite network-wide options across a multisite network....

WordPress Speed Optimizer plugin < 7.8.5 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Speed Optimizer versions 7.8.5...