ScubaGoggles
cisagov/scubagogglesSCuBA Secure Configuration Baselines and assessment tool for Google Workspace
cloud-infrastructure-securitycloud-securityconfiguration-auditing+5
384
cisagov/scubagogglesSCuBA Secure Configuration Baselines and assessment tool for Google Workspace
hevnsnt/cvengineAI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
eddyflores100-lang/taikotalent-phishing-iocsIoCs, attack chain & detection for the taikotalent.xyz fake-Taiko-recruiter campaign delivering a self-deleting Bash trojan via the paste-in-terminal…
szzxli/soc-home-labHands-on SOC lab: AWS mini-SOC with CloudTrail/GuardDuty, a Python CloudTrail IOC analyzer, phishing header forensics, ELF binary triage, and agent…
joda32/yowieFinds the SaaS services an organisation subscribes to, using only externally observable data. Built for shadow IT discovery.
abraxas/cakephp-smtp-crlfCakePHP 5.4.2 - High - Remote - Header injection - SmtpTransport lone LF leftover of GHSA-2qh5
grayddq/eburst这个脚本主要提供对Exchange邮件服务器的账户爆破功能，集成了现有主流接口的爆破方式。
portswigger/splitting-the-email-atomResearch materials and tooling for exploiting email address parser discrepancies to bypass access controls, including fuzzers, Hackvertor tags, CSS…
cyb3rmik3/prompt-injection-email-samplesOpen .eml test set for evaluating how email security controls and AI mailbox assistants handle indirect prompt injection across disclosure,…
techupdate24/fortimail-zero-day-cve-2026-104286A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.
0xblackash/cve-2026-73570Advisory and detection guidance for CVE-2026-73570, an unauthenticated OS command injection in Zimbra SNMP notification processing leading to remote…
synacktiv/aadoutsider-pyPython3 rewrite of AsOutsider features of AADInternals
bailongwang1/cve-2020-0688PHP CLI script that scans single hosts or IP ranges to detect Exchange servers vulnerable to CVE-2020-0688 by checking installed cumulative updates.
fevar54/cve-2026-76461-detection-kit-Defensive detection kit for CVE-2026-76461, a critical SQL injection in Cisco Secure Email Gateway, with Sigma and YARA rules, IOCs, and remediation…
0xblackash/cve-2026-76461Research repository for CVE-2026-76461, a critical SQL injection in Cisco Secure Email Gateway leading to root RCE, with detection rules, mitigation…
thoropass-public/area51The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a…
hainhc/cve-2026-73570Proof-of-concept exploit for CVE-2026-73570, an unauthenticated OS command injection in Zimbra Collaboration Suite via zimbra-snmp log injection,…
lxf746/outlook-auto-registerAutomated Outlook account registration tool using pure HTTP protocol with PerimeterX captcha solving, proxy pool management, and email token…