New tool55 minutes ago
adit
joda32/aditActive Directory recon and read-only security audit over ADWS (net.tcp/9389), in Go
Defensive ToolsPrivilege EscalationReconnaissance+8
Featured
Latest Updates
View all updatesjoda32/adit
New tool1h 56m ago
bloodhound-shell
kr0no/bloodhound-shellAn interactive command-line shell for BloodHound API.
Privilege EscalationReconnaissanceVulnerability Analysis+7
New tool2h 56m ago
Active-Directory-Health-Check
roccoammon/active-directory-health-checkPowerShell GUI tool that runs 54 best-practice health and security checks against Active Directory, flagging Kerberoasting, DCSync, delegation and…
Defensive ToolsPrivilege EscalationIdentity Management+6
New tool3h 57m ago
Hayabusa-Bulk-Runner
rorywag/hayabusa-bulk-runnerBulk-run Hayabusa across a folder of KAPE collections, one run per host, with per-host reports and a cross-host triage dashboard
Defensive ToolsIndicator of Compromise (IOC) ManagementScripting & Automation+5
New tool4h 57m ago
HomeLab
ko0ler/homelabGNS3 home lab documenting a segmented network with Cisco ASAv firewall, L3 core, DMZ, and an Active Directory domain for practicing networking,…
Network MappingVulnerability AnalysisSecurity Virtualization+5
New tool5h 58m ago
jshound
ambitsecurity/jshoundFind every API request a web app makes, from the JavaScript it ships: method, URL, body, headers and GraphQL operations. One command.
ReconnaissanceStatic AnalysisVulnerability Analysis+5
New tool6h 59m ago
OTinstaller
osintversehq/otinstallerInstalls, runs, updates, and removes open-source OSINT command line tools by name, with typed inputs, JSON output, and saved results for automated…
General Purpose UtilitiesOSINT (Open Source Intelligence)Reconnaissance+4
New tool8 hours ago
CouchPotato
ripits-sec/couchpotatoWindows privilege escalation tool that patches ETW and AMSI and uses indirect syscalls to abuse SeImpersonatePrivilege, escalating service accounts…
Defensive ToolsPrivilege EscalationExploitation+3
New tool9h 1m ago
yowie
joda32/yowieFinds the SaaS services an organisation subscribes to, using only externally observable data. Built for shadow IT discovery.
Defensive ToolsOSINT (Open Source Intelligence)Reconnaissance+9
New tool10h 1m ago
pvbrf-id
nawaralseelawi/pvbrf-idSimulation code and results for a private, verifiable, Byzantine-robust federated intrusion detection protocol using secret sharing, Merkle audits…
Defensive ToolsNetwork SecurityCryptography+5
New tool11h 2m ago
AutoControl-Arena
cosmosyi/autocontrol-arenaAutomated framework for frontier AI safety evaluation that synthesizes executable, pressure-rich test environments to uncover latent risks in…
Utilities & FrameworksMachine LearningPapers & Research+4
New tool12h 3m ago
defense-as-skill
yxf203/defense-as-skillRuntime guard skill that detects and blocks malicious skill-induced attacks in skill-augmented agents, with an MCTS loop that evolves the guard…
Defensive ToolsVulnerability AnalysisMachine Learning+4
Latest Exploits
View all exploitsSidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.
Evidence —
1 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 6.1Moderate
- EPSS
- 4.2%Low
- Exploits
- 1
php-mod/curl (a wrapper of the PHP cURL extension) before 2.3.2 allows XSS via the post_file_path_upload.php key parameter and the POST data to...
Evidence —
1 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 6.1Moderate
- EPSS
- 1.3%Low
- Exploits
- 1
Unsafe deserialization in Apache OFBiz
Evidence Aug 5, 2026
1 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 9.8High
- EPSS
- 81.2%High
- Exploits
- 2
