Tools

matejsmycka/cve-2025-33073-checker

This rough PoC checker script tests targets for CVE-2025-33073 vulnerability by attempting to perform NTLM reflection attacks using NTLM auth…

ashiqrehan-21/mcp-inspector-cve-2025-49596

MCP-Inspector-vulncheck is a Python script that checks if an MCP Inspector server is vulnerable to CVE-2025-49596. It tests whether the /sse endpoint…

mozilla/cipherscan

A very simple way to find out which SSL ciphersuites are supported by a target.

zzzteph/probable_subdomains

Subdomains analysis and generation tool. Reveal the hidden!

sda-se/cluster-image-scanner

Discover vulnerabilities and container image misconfiguration in production environments.

graysignal/cve-2025-3248

Exploit scanner detecting unauthenticated code injection in Langflow's /api/v1/validate/code endpoint and executing arbitrary code for authorized…

ankhcorp/xmlrpc-brute

This tool tests WordPress installations for XML-RPC authentication vulnerabilities.

s1n6h/barcha

Barcha is your Swiss‑Army knife for SQL Injection reconnaissance 🔍. Written in Go, it automates: Shodan enumeration of SSL hosts 🕵️‍♂️ Liveness &…

samsung/utopia

UT based automated fuzz driver generation

0xbingo/cve-2025-1974

A minimal test tool to help detect annotation injection vulnerabilities in Kubernetes NGINX Ingress controllers. This script sends a crafted…

rodney-o-c-melby/dns-zone-transfer-test

Automates Domain Name System (DNS) zone transfer testing. Checks for CVE-1999-0532 by automatically finding a given domains nameservers, and tests…

safebreach-labs/cve-2024-49113

LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113

threatexpress/threatbox

Ansible-based attack platform for deploying and managing a standardized Linux penetration testing environment with automated tool installation,…

laluka/bypass-url-parser

Tests hundreds of URL bypass techniques against 40X protected pages using raw curl requests, with multi-mode scanning, header spoofing, and JSON/HTML…