New tool19 minutes ago
moria
nmatt0/moriaIoT firmware identification and extraction
Embedded Systems SecurityIoT SecurityReverse Engineering+7
Featured
Latest Updates
View all updatesnmatt0/moria
New tool1h 19m ago
spidump
wrongbaud/spidumpTool for reconstructing SPI flash images via logic analyzer captures
Embedded Systems SecurityIoT SecurityReverse Engineering+7
New tool2h 20m ago
LazyOwn
grisuno/lazyownLazyOwn RedTeam/APT Framework is the first RedTeam Framework with an AI-powered C&C, featuring rootkits to conceal campaigns, undetectable malleable…
Penetration Testing FrameworksVulnerability ScannersExploit Frameworks+8
New tool4h 21m ago
8cryptdo
aeromodes/8cryptdoReverse-engineered docs and tools for 8BitDo firmware encryption
Embedded Systems SecurityEncryption/Decryption ToolsIoT Security+6
New tool5h 21m ago
DeadMatter
qsecure-labs/deadmatterOffset Independent Credential Extraction Tool
Password CrackingMemory ForensicsHash Analysis+7
New tool6h 21m ago
PAGASUS-PRO
thakur2309/pagasus-proPython ADB-based Android device management and security audit toolkit with an interactive menu for root detection, permission dumps, debuggable app…
Android SecurityVulnerability ScannersMobile App Pentesting+8
New tool7h 21m ago
bifrost
bifrost-proxy/bifrostHigh-performance HTTP/HTTPS/SOCKS5 MITM proxy in Rust with TLS interception, rule-based request rewriting, traffic capture, breakpoints, script…
Packet Sniffing & AnalysisWeb Proxies & InterceptionReverse Engineering+6
New tool9h 22m ago
FlowName
123wwwa/flownameNext-generation JavaScript identifier recovery with LLMs.
Static AnalysisCode AnalysisReverse Engineering+3
New tool10h 22m ago
CyberCodex
prox0959/cybercodexAutonomous 22-Source Zero-Cost OSINT, Data Breach/Leak, Infostealer & Threat Intelligence CLI Engine + Unbiased Cyber Warfare Encyclopedia (11…
Indicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Threat Feeds & Aggregators+9
New tool11h 23m ago
gEnclave
renich/genclaveCentralized, TPM 2.0 hardware-backed cryptographic identity enclave and multi-protocol bridge for Linux (FIDO2/CTAP2 WebAuthn Passkeys, OpenSSH…
Password CrackingEncryption/Decryption ToolsIdentity Management+7
New tool12h 23m ago
DFIR-Companion
hasamba/dfir-companionDFIR forensics companion server + capture extension
Defensive ToolsIndicator of Compromise (IOC) ManagementMemory Forensics+9
New tool13h 23m ago
Red-Team-GOAD-Lab-Proxmox
pho5nix/red-team-goad-lab-proxmoxBuild guide for Red Teaming home lab. GOAD lab setup in Proxmox and pfSense, Operator/C2 and Redirectors.
Defensive ToolsPost-ExploitationSecurity Virtualization+7
Latest Exploits
View all exploitsLiteLLM: Authenticated command execution via MCP stdio test endpoints
Evidence Jun 8, 2026
2 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 8.7High
- EPSS
- 83.6%High
- Exploits
- 2
Automad Broken Access Control: unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint
Evidence Aug 8, 2026
1 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 7.5High
- EPSS
- 1.3%Low
- Exploits
- 1
net: skbuff: preserve shared-frag marker during coalescing
Evidence May 29, 2026
1 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 7.8High
- EPSS
- 9.3%Low
- Exploits
- 13
