New tool1h 27m ago
h2spacex
nxenon/h2spacexHTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
Packet Sniffing & AnalysisExploitationWeb Application Exploitation+6
Featured
Latest Updates
View all updatesnxenon/h2spacex
New tool2h 28m ago
Snitch
aixisstudio/snitchReal-time network traffic visualizer — see every connection your computer makes. Privacy-first, 100% local. / Visualiseur de trafic réseau en temps…
Defensive ToolsPacket Sniffing & AnalysisNetwork Mapping+6
New tool3h 28m ago
KDU
hfiref0x/kduWindows kernel driver utility that abuses vulnerable signed drivers (BYOVD) to bypass DSE, load unsigned drivers, hijack protected processes, and…
Defensive ToolsPrivilege EscalationPersistence Mechanisms+8
New tool4h 28m ago
ipsw-diffs
blacktop/ipsw-diffsPublishes per-build diffs of iOS, iPadOS, and macOS IPSW firmware releases, enabling binary-level comparison of system components across versions and…
iOS SecurityVulnerability AnalysisReverse Engineering+6
New tool6h 29m ago
SafeGuard
pingpongplus/safeguardCLI Encryption tool written in Go only for learning purposes
General Purpose UtilitiesEncryption/Decryption ToolsCryptography+1
New tool7h 30m ago
ActiveScanPlusPlus
albinowax/activescanplusplusBurp Suite extension that extends active and passive scanning with checks for host header attacks, XXE, expression language injection, shellshock and…
Defensive ToolsVulnerability ScannersWeb Vulnerability Scanners+7
New tool9h 30m ago
BinDiffHelper
ubfx/bindiffhelperGhidra Extension to integrate BinDiff for function matching
Static AnalysisCode AnalysisReverse Engineering+4
New tool10h 31m ago
gryph
safedep/gryphSecurity layer for AI coding agents. Works with Claude Code, Cursor, Windsurf, Gemini CLI, OpenCode, Pi Agent and more.
Defensive ToolsScripting & AutomationConfiguration Auditing+6
Updated11h 31m ago
worldmonitor — Updated!
koala73/worldmonitorReal-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…
OSINT (Open Source Intelligence)ReconnaissanceNetwork Mapping+7
New tool12h 28m ago
caeruleus
praetorian-inc/caeruleusSingle Go binary for Bluetooth Low Energy security testing on Linux/BlueZ: scan, enumerate GATT, read/write/notify, fuzz characteristics, and run…
Bluetooth SecurityIoT SecurityVulnerability Analysis+8
New tool15h 28m ago
frida-gum
frida/frida-gumCross-platform instrumentation and introspection library written in C
Dynamic Analysis (Sandboxing)Memory ForensicsCode Analysis+6
New release15h 31m ago
promptfoo v0.124.0
promptfoo/promptfooTest your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and…
Vulnerability ScannersPenetration TestingDevSecOps+5
Latest Exploits
View all exploitsApache Tomcat Remote Code Execution Vulnerability
Evidence Oct 9, 2017
2 Repository evidence · Evidence observed: Sep 25, 2026
- CVSS
- 8.1High
- EPSS
- 100.0%High
- Exploits
- 15
Apache Tomcat on Windows Remote Code Execution Vulnerability
Evidence Sep 20, 2017
2 Repository evidence · Evidence observed: Sep 25, 2026
- CVSS
- 8.1High
- EPSS
- 99.6%High
- Exploits
- 20
- CVSS
- 9.1High
- EPSS
- 0.2%Low
- Exploits
- 1
