phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

CBM

Car Backdoor Maker The Car Backdoor Maker is a software for making attack templates and load them into The Bicho. Before starting, please read how to Get The Bicho hardware. Screnshot Install and Usage This project has its wiki where you will find the following useful documentation: Installation...

permission-manager

Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...

PSPKIAudit

PSPKIAudit PowerShell toolkit for auditing Active Directory Certificate Services AD CS. It is built on top of PKISolution's PSPKI toolkit Microsoft Public License. This repo contains a newer version of PSPKI than what's available in the PSGallery see the PSPKI directory. Vadims Podans the creator...

CVE-2026-100268

In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates...

CVE-2026-100262

In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates...

kwetza

Introduction By Chris Le Roy @brompwnie [email protected] Kwetza is a tool that allows you to infect an existing Android application with a Meterpreter payload. What does it do? Kwetza infects an existing Android application with either custom or default payload templates to avoid detection ...

checkov

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

pwnflow

Pwnflow 🎯 Visualiza tu viaje de pruebas y análisis de seguridad Pwnflow es una plataforma de mapas mentales diseñada específicamente para profesionales de la ciberseguridad. Te ayuda a visualizar, rastrear y compartir tus metodologías de pruebas de seguridad manteniendo el control total sobre tus...

CVE-2022-26923-Powershell-POC

CVE-2022-26923-Powershell-POC Un PoC de PowerShell para cargar y ejecutar automáticamente Certify y Rubeus desde memoria. ¿Cómo funciona? 1. Carga Certify.exe y Rubeus.exe en memoria. 2. Escanea la máquina objetivo en busca de plantillas de certificados mal configuradas. más información en...

nuclei-templates-labs

🎯 Nuclei-Templates-Labs A comprehensive collection of vulnerable environments paired with ready-to-use Nuclei templates for practical security testing and learning! 🚀 A comprehensive collection of vulnerable environments paired with ready-to-use Nuclei templates for practical security testing and...

faraday_templates

Plantillas de Faraday...

CVE-2026-100268

In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates...

CVE-2026-100268

In JetBrains YouTrack versions prior to 2026.2.19197 , project administrators could perform unauthorized data access by reading comments from other projects. This vulnerability is triggered via notification templates . The CVSS v3.1 score is 7.7 (High) , indicating a network-based attack with low...

EUVD-2026-90012

In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates...

EUVD-2026-90006

In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates...

CVE-2026-100262

In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates...

CVE-2026-100262

A missing authorization flaw in JetBrains YouTrack before version 2026.2.18991 allows users with read-only project access to overwrite project notification templates . This vulnerability impacts the integrity of project communications. No specific exploit details or remediation steps are provided...

CVE-2024-25641-CACTI-RCE-1.2.26

CVE-2024-25641 - Cacti 1.2.26 - Escritura arbitraria de archivos a RCE 🌵 RCE autenticado Cacti versión v1.2.26 Resumen Una vulnerabilidad de escritura arbitraria de archivos, explotable a través de la función "Importación de Paquetes", permite a usuarios autenticados que tengan el permiso "Import...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...