nullsec-hak5-toolkit #wireless
Universal Hak5 device management toolkit - CLI suite for WiFi Pineapple, Bash Bunny, Rubber Ducky, Packet Squirrel, Key Croc, and Shark Jack

https://github.com/bad-antics/nullsec-hak5-toolkit

elliot #bugbounty #recon #scanner #web
Elliot is a bug bounty toolkit for recon and vulnerability discovery. It automates subdomain enumeration, endpoint collection, and scanning with Nuclei, Dalfox, and other tools to detect XSS and se...

https://github.com/alley341/elliot

dojops #pentest
AI DevOps Automation Engine

https://github.com/dojops/dojops

AI-Security-Exercises #pentest
AI Security Exercises #1 - Prompt Injection

https://github.com/CyberSecurityUP/AI-Security-Exercises

SSRF-Hunter #bugbounty
SSRF Hunter is a comprehensive Server-Side Request Forgery (SSRF) detection tool designed specifically for bug bounty hunters and security researchers.

https://github.com/rohit-1006/SSRF-Hunter

IC_CS_01 #scanner #web
Cyber security task 1 Web Application Security Scanner

https://github.com/harbhayormhi/ICCS01

SageAI #osint #scanner
AI-powered security scanner with OSINT enrichment

https://github.com/sagarpritam/SageAI

Cloud-Scanner #cloud #exploit #scanner
This project is a lightweight cloud posture scanner that discovers AWS resources, evaluates CIS security controls, stores results in S3, and exposes them through REST APIs and a React dashboard.

https://github.com/dhruv572/Cloud-Scanner

claudit #pentest
MCP server for searching Solodit smart contract security findings

https://github.com/marchev/claudit

🤖 TheExploitLab Intel Bot started!

📡 Monitoring sources:
• NVD (NIST CVE Database)
• Exploit-DB
• PacketStorm Security
• The Hacker News
• SecurityWeek
• GitHub Security Advisories

I will post the latest CVEs, Exploits, and Security News here as they drop.

#ExploitLab #CyberSecurity #BugBounty

🛡️ 🟠 CVE-2025-52365
CVSS 7.8 ████░ HIGH
A command injection vulnerability in the szc script of the ccurtsinger/stabilizer repository allows remote attackers to execute arbitrary system commands via unsanitized user input passed to os.system(). The vulnerability arises from improper input handling where command-line arguments are directly…
#CVE #Vulnerability #CVSS7
🔗 Read More

🛡️ 🟠 CVE-2026-3342
CVSS 7.2 ████░ HIGH
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and inc…
#CVE #Vulnerability #CVSS7
🔗 Read More

🛡️ ⚠️ CVE-2026-3351
Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.
#CVE #Vulnerability #CVSS0
🔗 Read More

🛡️ ⚠️ CVE-2025-57622
An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(request.get_data()) component
#CVE #Vulnerability #CVSS0
🔗 Read More

🛡️ ⚠️ CVE-2025-70821
renren-secuity before v5.5.0 is vulnerable to SQL Injection in the BaseServiceImpl.java component
#CVE #Vulnerability #CVSS0
🔗 Read More

📰 ⚠️ Dust Specter Targets Iraqi Officials with New SPLITDROP and GHOSTFORM Malware
A suspected Iran-nexus threat actor has been attributed to a campaign targeting government officials in Iraq by impersonating the country's Ministry of Foreign Affairs to deliver a set of never-before-seen malware. Zscaler ThreatLabz, which observed the activity in January 2026, is tracking the clu…
#TheHackerNews #CyberNews #Malware
🔗 Read More

📰 ⚠️ Where Multi-Factor Authentication Stops and Credential Abuse Starts
Organizations typically roll out multi-factor authentication (MFA) and assume stolen passwords are no longer enough to access systems. In Windows environments, that assumption is often wrong. Attackers still compromise networks every day using valid credentials. The issue is not MFA itself, but cov…
#TheHackerNews #CyberNews
🔗 Read More

📰 ⚠️ APT28-Linked Campaign Deploys BadPaw Loader and MeowMeow Backdoor in Ukraine
Cybersecurity researchers have disclosed details of a new Russian cyber campaign that has targeted Ukrainian entities with two previously undocumented malware families named BadPaw and MeowMeow. "The attack chain initiates with a phishing email containing a link to a ZIP archive. Once extracted, an…
#TheHackerNews #CyberNews #Malware #Phishing #APT
🔗 Read More

📰 ⚠️ Europol-Led Operation Takes Down Tycoon 2FA Phishing-as-a-Service Linked to 64,000 Attacks
Tycoon 2FA, one of the prominent phishing-as-a-service (PhaaS) toolkits that allowed cybercriminals to stage adversary-in-the-middle (AitM) credential harvesting attacks at scale, was dismantled by a coalition of law enforcement agencies and security companies. The subscription-based phishing kit, …
#TheHackerNews #CyberNews #Phishing
🔗 Read More

📰 ⚠️ FBI and Europol Seize LeakBase Forum Used to Trade Stolen Credentials
A joint law enforcement operation has dismantled LeakBase, one of the world's largest online forums for cybercriminals to buy and sell stolen data and cybercrime tools. The LeakBase forum, per the U.S. Department of Justice (DoJ), had over 142,000 members and more than 215,000 messages between memb…
#TheHackerNews #CyberNews
🔗 Read More

📡 ⚠️ Russian Ransomware Operator Pleads Guilty in US
Evgenii Ptitsyn was extradited to the United States from South Korea in November 2024. The post Russian Ransomware Operator Pleads Guilty in US appeared first on SecurityWeek.
#SecurityWeek #Ransomware
🔗 Read More