572 matches found
MIDA-Multitool
MIDA - Multitool Bash script purposed for system enumeration, vulnerability identification and privilege escalation. MIDA Multitool draws functionality from several of my previous scripts namely SysEnum and RootHelper and is in some regards RootHelpers successor, or sister script at the very leas...
should-i-trust
should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...
Invoke-HiveDreams
Invoke-HiveDreams A capability to identify and remediate CVE-2021-36934 HiveNightmare...
vajra
An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra Contributing License Future Plans/Under Development Credits Disclaimer FAQ Detailed insight about Vajra can b...
Joern 4.0.645
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
tarnish
tarnish tarnish は、Chrome 拡張機能のセキュリティレビューを支援する静的解析ツールです。通常の定期作業の多くを自動化し、潜在的なセキュリティ脆弱性を素早く特定するのに役立ちます。このツールは、こちら にある研究ブログ記事に付随しています。この設定を自分で行う手間をかけたくない場合は、https://thehackerblog.com/tarnish/ でツールを直接使用することもできます。 未完成版に関する注意とメモ これは未完成版のリリースであることに留意してください。これは https://thehackerblog.com/tarnish/...
Wordpress-Vulnerability-Identification-Scripts
Wordpress-Vulnerability-Identification-Scripts Identifies domains which run WordPress and tests against vulnerabilities CVE-2023-32243 / VU76395 / etc... wpidentifier.py === Input: File containing list of domains / sub-domains Output: List of domains hosting WordPress application CVE-2023-32243 =...
raptor
Raptor Raptor is a framework for auditing blockchain ecosystem contracts, protocols e.t.c. Overview Raptor provides structured approaches and tools for identifying security vulnerabilities in smart contracts and blockchain protocols. The framework helps auditors document findings consistently and...
firmwalker
firmwalker A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .cr...
CVE-2026-19371
A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfyuploadimage. Such manipulation of the argument imagepath leads to path traversal. An attack has to be approached locally. The project...
CVE-2026-15658 foreUP customer REST API allows unauthenticated endpoint access
A vulnerability in the foreUP customer REST API allows any authenticated, low-privilege customer to access an endpoint that returns the records of other users without checking that the caller owns the data associated with that record...
HTB-Writeups
Hack The Box Writeups This repository contains my Hack The Bo...
CVE-2026-10043
creationtimestamp| type| source ---|---|--- 2026-06-25 02:41:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp3fq6z37d22...
PT-2026-50819
CVE-2026-39927 - Rejected reason: This CVE ID has been rejected or CVE ID :CVE-2026-39927 Published : June 16, 2026, 5:16 p.m. | 43 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for more...
UBUNTU-CVE-2026-41437
hw/uefi: fix ucs2 string helper functions...
GCVE: A Decentralized Model for Vulnerability Identification, Publication, and Operational Enrichment
The Global CVE initiative GCVE proposes a decentralized, open, and extensible model for vulnerability identification, publication, and enrichment. It addresses a gap in today's vulnerability ecosystem: centralized systems provide rigorous control and widely recognized identifiers, while many...
Vulnerability Identification by Harnessing Inter-Connected Multi-Source Information
The utilization of third-party open-source libraries is widespread in modern software development. Due to the dependency relationships, vulnerabilities within open-source libraries pose significant security threats to downstream software. However, the library vulnerabilities are usually implicitl...
BinExploit-Bench
BinExploit-Bench: Binary Exploitation Capability Benchmark for...
A Systematic Review of Algorithmic Red Teaming Methodologies for Assurance and Security of AI Applications
Cybersecurity threats are becoming increasingly sophisticated, making traditional defense mechanisms and manual red teaming approaches insufficient for modern organizations. While red teaming has long been recognized as an effective method to identify vulnerabilities by simulating real-world...
