nRFBOX 📱

Open source ESP32 powered tool to scan, jam, spoof, and master BLE, Wi-Fi, and 2.4GHz networks 🤔

GitHub 💻

💎 @RootAccessClub
💎 @BugCod3

VICE 🤔

VICE is a security auditing CLI tool that finds vulnerabilities in your web applications 🤔

GitHub 🐱

#Tools #CyberSecurity

🏳️ @RootAccessClub
🏳️ @BugCod3

Microsoft Activation Scripts (MAS) 💻

Open source Windows and Office activator featuring HWID, Ohook, TSforge, and Online KMS activation methods, along with advanced troubleshooting 🗝

How to Activate ❓

1️⃣Click the Start Menu, type PowerShell and open it

2️⃣Copy and paste the code below and press Enter

irm https://get.activated.win | iex 

If the above is blocked (by ISP/DNS), try this (needs updated Windows 10 or 11):

iex (curl.exe -s --doh-url https://1.1.1.1/dns-query https://get.activated.win | Out-String)

Github 📱

#windows #microsoft #Office

🏷 @RootAccessClub
🏷 @BugCod3

Kali Linux 2026.2 Release 💠

🔥 Desktop Environments - Bump to GNOME 50 and KDE Plasma 6.6

🔥 Helper Scripts Consistency - Consistency to our little launches at starting services

🔥 APT Format - Goodbye sources.list, hello sources.list.d/kali.source

🔥 VM Boot Optimisation - Smaller initrd + faster boot times = happy virtual machine users

🔥 Reboot Warning - Heads-up, polkit and xrdp upgrades require a system reboot

🔥 Kali Kernel Incoming - Staying with 6.19 for now, how to get 7.0 early

🔥 Build Scripts Incoming - Heads-up with some changing on the way

🔥 New Tools - As always, various new shiny packages have been added

Using Kali already❓ Great You can keep it up to date by doing:

┌──(kali㉿kali)-[~]
└─$ sudo tee /etc/apt/sources.list.d/kali.sources << 'EOF'
Types: deb
URIs: http://http.kali.org/kali/
Suites: kali-rolling
Components: main contrib non-free non-free-firmware
Signed-By: /usr/share/keyrings/kali-archive-keyring.gpg
EOF
[...]

┌──(kali㉿kali)-[~]
└─$ sudo apt update && sudo apt -y full-upgrade
[...]

┌──(kali㉿kali)-[~]
└─$ cp -vrbi /etc/skel/. ~/
[...]

┌──(kali㉿kali)-[~]
└─$ sudo reboot -f

#linux #kali #kali_linux

💎 @RootAccessClub
💎 @BugCod3

BladeRecon 🗡

BladeRecon is a lightweight reconnaissance framework for bug bounty, web pentesting, and reporting focused attack surface discovery 🤕

Github 💻

#Pentesting #Bugbounty

😎 @RootAccessClub
😎 @BugCod3

arsenal-ng 🔻

Modern pentest command launcher written in Go 👩‍💻

The classic launcher, evolved. Fast, Go-based command library equipped with 200+ cybersecurity cheat-sheets. Just install and start hacking 🟢

Github 🐱

#golang #go #pentesting #pentest

💎 @RootAccessClub
💎 @BugCod3

Full Bug Bounty Hunting & Red Teamers Methodology 2️⃣0️⃣2️⃣6️⃣

Created by Cybernote, aspiring Red Team Operator and Bug Bounty Hunter. This repository documents my methodology, notes and workflow for web application security testing⚡️

GitHub 🐱

#bug_bounty #bugbounty #RedTeam

🛫@RootAccessClub
🛫@BugCod3

Netryx Astra V2 ⚡️

Find Any Location from a Single Image with AI ⏳

Github ☁️

#Ai #Tools

🟣 @RootAccessClub
🟣 @BugCod3

SpideyX 🕷

SpideyX a multipurpose Web Penetration Testing tool with asynchronous concurrent performance with multiple mode and configurations 🤩

Github 🐱

#Tools #Pentest #pentesting

🕷️@RootAccessClub
🕷️@BugCod3

📶 WEF — WiFi Exploitation Framework

An open-source framework for WiFi security testing, combining manual and automated techniques for assessing WPA/WPA2, WPS and WEP networks across 2.4GHz and 5GHz bands 🛜

🐱 GitHub

💎 @RootAccessClub
💎 @BugCod3

Complete cybersecurity course 😎

Download ⬇️

#Free #CyberSecurity

🌟@RootAccessClub
🌟@BugCod3

LegacyHive – Windows user profile service arbitrary hive load elevation of privileges vulnerability ☑️

The PoC requires another standard user credentials and a third username (which can be an administrator account), if the PoC is successful, it will end up mounting the target user hive in current user classes root 🔹

Github 📱

✈️ @RootAccessClub
✈️ @IRSentinels

CVE-2026-63030: wp2shell ⚠️

a critical remote code execution vulnerability in WordPress core 🌐

💎@RootAccessClub

wp2shell poc ⛔️
➖➖➖➖➖➖
Independent proof-of-concept for the unauthenticated WordPress REST batch route-confusion SQL injection associated with Searchlight Cyber's wp2shell advisory ⏺
➖➖➖➖➖➖➖➖➖
GitHub 🐱
➖➖➖➖➖➖➖➖➖
For educational purposes only. Use at your own risk ⚠️
➖➖➖➖➖➖➖➖➖
✈️ @RootAccessClub

PoC and vulnerable Docker environment to test wp2shell 🧪

GitHub 💻

🏳️ @RootAccessClub

Wp2Shell 🤔

✈️@RootAccessClub

⚔️ Awesome Cyber & AI Arsenal

A curated, battle‑tested collection of offensive, defensive and AI‑powered security tools 😄

GitHub 📱

✈️ @RootAccessClub

c2Telegram 🌟

LLM-Driven C2 PoC via Telegram 🤔

Github 😀

💎@RootAccessClub

SubCat – Fast subdomain enumeration tool ⚔️

Lightning fast subdomain discovery tool for security professionals and bug bounty hunters 🔗

GitHub 📎

✈️ @RootAccessClub

WifiForge 🌐

WifiForge is a tool developed by Black Hills InfoSec to help train Pentesters on different WiFi attack vectors and Wireless capabilities

Github 🐱

✈️@RootAccessClub

ADWSDomainDump 🦮

Active Directory information dumper via ADWS (Active Directory Web Services)

Github 🐱

💎 @RootAccessClub