New tool25 minutes ago
hashcat-utils
hashcat/hashcat-utilsSmall utilities that are useful in advanced password cracking
General Purpose UtilitiesPassword CrackingPassword Attacks+3
Featured
Latest Updates
View all updateshashcat/hashcat-utils
New tool1h 25m ago
Awesome-Asset-Discovery
redhuntlabs/awesome-asset-discoveryCurated list of asset discovery and attack surface reconnaissance resources covering subdomain enumeration, IP discovery, port scanning, email…
OSINT (Open Source Intelligence)ReconnaissanceNetwork Mapping+7
New tool2h 26m ago
TryHackMe-Roadmap
hunterdii/tryhackme-roadmapHello, aspiring hackers! 🕵️♂️ Here’s a list of 500+ Free TryHackMe rooms to kickstart your cybersecurity journey. These rooms are absolutely free,…
Privilege EscalationReverse EngineeringForensics+8
New tool3h 26m ago
UA3F
sunbk201/ua3fTransparent HTTP(S) rewriting proxy supporting HTTP, SOCKS5, TPROXY, REDIRECT and NFQUEUE modes with HTTPS MitM, rule-based header/body rewriting and…
Packet Sniffing & AnalysisNetwork MappingWeb Proxies & Interception+5
New tool5h 27m ago
esp32-sniffer
ets-polito/esp32-snifferESP32 firmware that sniffs PROBE REQUEST packets sent by smartphones searching for Wi-Fi connection to extract different types of information
Embedded Systems SecurityPacket Sniffing & AnalysisReconnaissance+5
New tool6h 27m ago
passer
activecm/passerPassive service locator, a python sniffer that identifies servers, clients, names and much more
Defensive ToolsPacket Sniffing & AnalysisReconnaissance+6
New tool7h 28m ago
harlogger
doronz88/harloggerSimple utility for sniffing decrypted HTTP/HTTPS traffic on a macOS/iOS device (either jailbroken or not)
Packet Sniffing & AnalysisiOS SecurityWeb Proxies & Interception+5
New tool8h 28m ago
Charles-Proxy-Mobile-Guide
thyrlian/charles-proxy-mobile-guideStep-by-step guide to intercepting Android and iOS HTTP/HTTPS traffic with Charles Proxy, covering SSL proxying, CA certificate installation, and…
Android SecurityPacket Sniffing & AnalysisiOS Security+6
New tool9h 29m ago
svg-hush
cloudflare/svg-hushMake it safe to serve untrusted SVG files
Defensive ToolsStatic AnalysisWeb Security+1
New tool10h 29m ago
inventory
trickest/inventoryAutomated attack surface inventory for 800+ public bug bounty programs, running scheduled subdomain enumeration, permutation, DNS and web server…
OSINT (Open Source Intelligence)ReconnaissanceNetwork Mapping+6
New tool11h 29m ago
svg-sanitizer
darylldoyle/svg-sanitizerPHP library that sanitizes untrusted SVG/XML by filtering tags, attributes, and remote references to prevent XSS and script injection in uploaded or…
Defensive ToolsStatic AnalysisVulnerability Analysis+2
New tool12h 30m ago
blackbird
antoniaci/blackbirdAn OSINT tool to search for accounts by username and email in social networks.
OSINT (Open Source Intelligence)ReconnaissanceOSINT for Social Engineering+4
Latest Exploits
View all exploitsKimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover
Evidence Aug 6, 2026
1 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 9.1High
- EPSS
- 1.3%Low
- Exploits
- 2
Gogs: Unauthenticated Organization Teams Information Disclosure via API
Evidence —
1 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 5.5Moderate
- EPSS
- 1.5%Low
- Exploits
- 1
Gogs: RCE via git rebase --exec argument injection in pull request merge
Evidence Aug 8, 2026
2 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 9.9High
- EPSS
- 7.9%Low
- Exploits
- 2
