Project-Tauro
k0r0pt/project-tauroA Router WiFi key recovery/cracking tool with a twist.
information-gatheringnetwork-mappingpassword-attacks+5
k0r0pt/project-tauroA Router WiFi key recovery/cracking tool with a twist.
cro-thehacker/v1ew-s0urcePython-based penetration testing framework and reconnaissance toolkit offering port scanning, information gathering, and network scanning modules for…
occasionpuffbird12/airstrikeAudit Wi-Fi security on Linux with monitor mode, handshake capture, and offline WPA/WPA2 password testing in one guided GUI
yehia-mamdouh/xssya-v-2.0Python XSS scanner that confirms reflected and encoded-payload injection, executes payloads to capture cookies, detects WAFs, and tests XST with a…
joasasantos/php2shell-scannerNon-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing,…
curiotrace/paramtraceFast HTTP parameter discovery for authorized security testing
abraxas/openmeetings-calendar-save-idorApache OpenMeetings 9.1.0 - High - Remote - IDOR - LOGIN calendar save overwrites appointment and closes public room
abraxas/jellyfin-svg-gzipJellyfin Server 12.2 - High - Remote - SSRF - gzip data:image/png leftover of GHSA-cf3c still fetches http and file
abraxas/openmeetings-kms-unauthApache OpenMeetings 9.1.0 - High - Remote - Unauth KMS - docs docker publishes Kurento JSON-RPC on 8888
abraxas/openmeetings-wb-fileid-idorApache OpenMeetings 9.1.0 - High - Remote - IDOR - WHITEBOARD fileId plant then room file resource serves bytes
1n3/sn1per-mcpMCP server that lets AI assistants drive a self-hosted Sn1per install, running scoped, audited scans and returning findings, ports, subdomains and…
affolter-engineering/xssearchRust-based XSS scanner with context-aware payload selection, WAF detection and bypass, crawling, blind XSS callbacks, and static DOM sink analysis.
affolter-engineering/snmpenSNMP enumeration tool that queries SNMPv1/v2c hosts to extract system information, TCP connections, and write access for penetration testing and…
ambitsecurity/jshoundFind every API request a web app makes, from the JavaScript it ships: method, URL, body, headers and GraphQL operations. One command.
abraxas/spark-history-zip-symlinkApache Spark 4.2.0 - High - Remote - File read - History zip follows planted symlink
abraxas/spark-rpc-stream-unauthApache Spark 4.2.0 - High - Remote - File read - unauth RPC StreamRequest File join
abraxas/gitea-restore-file-openProof-of-concept for a Gitea restore-repo file:// local file inclusion (CWE-73) that copies symlink targets outside an untrusted dump into release…
affolter-engineering/ldapinCLI tool to perform basic LDAP task for security assessments