seed-vault.io #pentest
Encrypt your crypto seed phrase into an offline QR code. AES-256-GCM. 100% client-side.

https://github.com/lesagejeanno-cmd/seed-vault.io

llm-security-scanner #scanner
大模型安全漏洞自动化扫描平台

https://github.com/jinzy666/llm-security-scanner

cloud-audit #cloud #scanner
Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

https://github.com/gebalamariusz/cloud-audit

TokenShield #pentest
Turbocharged Real-time Authentication and Authorization Engine for Enterprise Scalability and Multi-factor Security Suite

https://github.com/yuvisevia/TokenShield

ObscurityError404- #pentest
A collection of cybersecurity tools, scripts, and research focused on ethical hacking and network security.

https://github.com/obscurityerror404/ObscurityError404-

Finder #osint #recon
FINDER is an automated reconnaissance framework designed for efficient and scalable subdomain enumeration. It integrates multiple industry-standard OSINT tools to discover, validate, and filter sub...

https://github.com/Anandakrishnanms/Finder

wscan #cloud #scanner #web
wscan is a multi-threaded web vulnerability scanner built in Python. It performs automated security testing against web applications by crawling pages and detecting common security misconfiguration...

https://github.com/Alanps01/wscan

agentprey #scanner
Developer-first security scanner for AI agents. Run 20+ prompt-injection vectors, generate JSON/HTML reports, and gate CI with deterministic exit codes.

https://github.com/agentprey/agentprey

nullsec-hak5-toolkit #wireless
Universal Hak5 device management toolkit - CLI suite for WiFi Pineapple, Bash Bunny, Rubber Ducky, Packet Squirrel, Key Croc, and Shark Jack

https://github.com/bad-antics/nullsec-hak5-toolkit

elliot #bugbounty #recon #scanner #web
Elliot is a bug bounty toolkit for recon and vulnerability discovery. It automates subdomain enumeration, endpoint collection, and scanning with Nuclei, Dalfox, and other tools to detect XSS and se...

https://github.com/alley341/elliot

dojops #pentest
AI DevOps Automation Engine

https://github.com/dojops/dojops

AI-Security-Exercises #pentest
AI Security Exercises #1 - Prompt Injection

https://github.com/CyberSecurityUP/AI-Security-Exercises

SSRF-Hunter #bugbounty
SSRF Hunter is a comprehensive Server-Side Request Forgery (SSRF) detection tool designed specifically for bug bounty hunters and security researchers.

https://github.com/rohit-1006/SSRF-Hunter

IC_CS_01 #scanner #web
Cyber security task 1 Web Application Security Scanner

https://github.com/harbhayormhi/ICCS01

SageAI #osint #scanner
AI-powered security scanner with OSINT enrichment

https://github.com/sagarpritam/SageAI

Cloud-Scanner #cloud #exploit #scanner
This project is a lightweight cloud posture scanner that discovers AWS resources, evaluates CIS security controls, stores results in S3, and exposes them through REST APIs and a React dashboard.

https://github.com/dhruv572/Cloud-Scanner

claudit #pentest
MCP server for searching Solodit smart contract security findings

https://github.com/marchev/claudit

🤖 TheExploitLab Intel Bot started!

📡 Monitoring sources:
• NVD (NIST CVE Database)
• Exploit-DB
• PacketStorm Security
• The Hacker News
• SecurityWeek
• GitHub Security Advisories

I will post the latest CVEs, Exploits, and Security News here as they drop.

#ExploitLab #CyberSecurity #BugBounty

🛡️ 🟠 CVE-2025-52365
CVSS 7.8 ████░ HIGH
A command injection vulnerability in the szc script of the ccurtsinger/stabilizer repository allows remote attackers to execute arbitrary system commands via unsanitized user input passed to os.system(). The vulnerability arises from improper input handling where command-line arguments are directly…
#CVE #Vulnerability #CVSS7
🔗 Read More

🛡️ 🟠 CVE-2026-3342
CVSS 7.2 ████░ HIGH
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and inc…
#CVE #Vulnerability #CVSS7
🔗 Read More

🛡️ ⚠️ CVE-2026-3351
Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.
#CVE #Vulnerability #CVSS0
🔗 Read More