decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

ogi-transforms

OGI Transform Registry Community transforms for OGI, an open source OSINT and link analysis tool. How it works Each directory under transforms/ is an independently installable transform. The OGI CLI and Transform Hub UI read index.json auto-generated on each merge to discover what's available...

holehe

Holehe OSINT - Email to Registered Accounts 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! Holehe Online Version Summar...

haptyc

Haptyc Test Generation Framework What's Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

backdoorppt

backdoorppt - 'Office spoof extensions tool' Version release: v1.7-Stable Author: pedro ubuntu r00t-3xp10it Distros Supported: Linux Kali, Ubuntu, Mint Suspicious-Shell-Activity© SSA RedTeam develop @2017 Transform your payload.exe into one fake word doc .ppt Simple script that allow users to add...

CVE-2024-23346

🚀 CVE-2024-23346 Chemistry - HTB This repository contains a Crystallographic Information File CIF intended for use on the "Chemistry" machine on Hack The Box HTB. CIF File Example dataExample celllengtha 10.00000 celllengthb 10.00000 celllengthc 10.00000 cellanglealpha 90.00000 cellanglebeta...

sploitego

Sploitego - Maltego's Local Partner in Crime 1.0 - Introduction Sploitego is a local pen-test transform package that uses the Canari Framework for local transform execution in Maltego. The framework was first introduced at DEFCON 20 and has since picked up steam. 2.0 - Installing Sploitego 2.1 -...

CVE-2026-18953

CVE-2026-18953 — PoC Arbitrary file write in awslabs.aws-transform-mcp-server AWS Transform MCP server via the savePath parameter of the getresource tool. | ---|--- CVE| CVE-2026-18953 CWE| CWE-22 — Improper Limitation of a Pathname to a Restricted Directory Affected|...

serverless-application-model

AWS SAM transform The AWS Serverless Application Model AWS SAM transform is a AWS CloudFormation macro that transforms SAM templates into CloudFormation templates. To use the SAM transform, add AWS::Serverless-2016-10-31 to the Transform section of your CloudFormation template. Benefits of using...

MaltegoHeartbleed

MaltegoHeartbleed Maltego transform to detect the OpenSSL Heartbleed vulnerability CVE-2014-0160 For more information read the write-up on my blog: http://disk0nn3ct.svbtle.com/maltego-openssl-heartbleed-transform...

FFTStegPic

FFTStegPic A python script for digital image steganography using Fast Fourier Transform. May be useful for some steganography CTF challenges...

SDK

Intelligence X Public SDK The software development kit SDK allows anyone to use the Intelligence X search engine. It is free to use and Intelligence X welcomes any integrations into 3rd party tools and services. Intelligence X is a search engine and data archive. For additional details please vis...

CVE-2025-32432

CraftCMS CVE-2025-32432 Exploit By Chirag Artani Overview This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution RCE vulnerability affecting CraftCMS versions 4.x and 5.x. The vulnerability exists in the asset transform generation...

CVE-2025-32432-POC

Craft CMS CVE-2025-32432 Single-Target PoC Authorized testing only. This repository is intended for controlled lab environments, CTF platforms such as Hack The Box, internal validation, and defensive verification. Do not run this against systems you do not own or have explicit permission to test...

CLEANSTART-2026-VD82304 xsltAddTextString function in transform

Security vulnerability affects the libxslt package. The xsltAddTextString function in transform...

CLEANSTART-2026-OT48890 In xsltCopyText in transform

Security vulnerability affects the libxslt package. In xsltCopyText in transform...

CVE-2026-73322

Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is enabled, the single-stage query engine authorizes only the table named in the query's FROM clause. The lookup transform function identifies its dimension table with a string liter...

CLEANSTART-2024-IM54605 When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed

CVE-2022-36319 affects multiple packages. When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. See references for individual vulnerability details...

EUVD-2026-114272

Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is enabled, the single-stage query engine authorizes only the table named in the query's FROM clause. The lookup transform function identifies its dimension table with a string liter...