New release4h 48m ago
PEASS-ng v20261015-c468195d
peass-ng/peass-ngPEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
Penetration Testing FrameworksPrivilege EscalationExploit Frameworks+7
Featured
Latest Updates
View all updatespeass-ng/peass-ng
New tool6h 46m ago
PIIHunter
owasp/piihunterScans PostgreSQL databases and Jira issues for PII using regex, NER/ML, and optional self-hosted LLM detection, with redacted reports and audit…
Defensive ToolsVulnerability AnalysisData Exfiltration+6
New tool7h 47m ago
SecretSifter
owasp/secretsifterOWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic).
Defensive ToolsVulnerability ScannersWeb Application Exploitation+7
New release8h 48m ago
jumpserver v5.1.0
jumpserver/jumpserverJumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…
Authentication & AuthorizationContainer SecurityConfiguration Auditing+5
New tool9h 23m ago
apex-kev-change-desk
mceeomoba/apex-kev-change-deskOffline CISA KEV snapshot comparison for field-level change review. Free prototype, not a security assessment. AI-assisted development.
Defensive ToolsIndicator of Compromise (IOC) ManagementVulnerability Analysis+4
New tool10h 24m ago
retrokit
nemo22/retrokitHeadless-Ghidra toolkit for reverse engineering 32-bit DOS and Win32 games (1993-2010): own LE/LX loader, Watcom calling conventions, library…
Static AnalysisReverse EngineeringScripting & Automation+5
New release12h 49m ago
prowler v5.45.0
prowler-cloud/prowlerProwler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…
Cloud Infrastructure SecurityDefensive ToolsVulnerability Scanners+10
New tool13 hours ago
mudos
cumakurt/mudosCommand-line multi-vector DDoS test tool with 129 volumetric, protocol, application, and amplification attack vectors for authorized resilience…
Vulnerability AnalysisWeb SecurityNetwork Security+3
New tool14h 1m ago
archlive
p3ng0s/archlivePhysical access red team live ISO built on Arch Linux
Password CrackingPost-ExploitationPenetration Testing+2
New tool15h 1m ago
bba
openbba0/bbaAndroid app-cloning sandbox with a Frida-style CLI that spawns or attaches to cloned apps and injects QuickJS scripts using Gum Interceptor and…
Android SecurityDynamic Analysis (Sandboxing)Dynamic Code Analysis (DAST)+7
New release16h 50m ago
AI-Infra-Guard v4.6.6
tencent/ai-infra-guardA full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
Vulnerability ScannersContainer SecurityWeb Security+7
New release20h 50m ago
unleashed-firmware unlshd-094
darkflippers/unleashed-firmwareCustom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing.
Embedded Systems SecurityRFID/NFC ToolsFuzzing+7
Latest Exploits
View all exploitsA Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote...
Evidence Sep 2, 2026
2 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 10.0High
- EPSS
- 8.0%Low
- Exploits
- 4
Joomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.4
Evidence Jul 6, 2026
1 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 9.5High
- EPSS
- 4.9%Low
- Exploits
- 5
Samba: samba: remote code execution in printing subsystem via unescaped job description
Evidence Aug 8, 2026
1 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 9.8High
- EPSS
- 13.9%Moderate
- Exploits
- 8
