Finder #osint #recon
FINDER is an automated reconnaissance framework designed for efficient and scalable subdomain enumeration. It integrates multiple industry-standard OSINT tools to discover, validate, and filter sub...

https://github.com/Anandakrishnanms/Finder

wscan #cloud #scanner #web
wscan is a multi-threaded web vulnerability scanner built in Python. It performs automated security testing against web applications by crawling pages and detecting common security misconfiguration...

https://github.com/Alanps01/wscan

agentprey #scanner
Developer-first security scanner for AI agents. Run 20+ prompt-injection vectors, generate JSON/HTML reports, and gate CI with deterministic exit codes.

https://github.com/agentprey/agentprey

nullsec-hak5-toolkit #wireless
Universal Hak5 device management toolkit - CLI suite for WiFi Pineapple, Bash Bunny, Rubber Ducky, Packet Squirrel, Key Croc, and Shark Jack

https://github.com/bad-antics/nullsec-hak5-toolkit

elliot #bugbounty #recon #scanner #web
Elliot is a bug bounty toolkit for recon and vulnerability discovery. It automates subdomain enumeration, endpoint collection, and scanning with Nuclei, Dalfox, and other tools to detect XSS and se...

https://github.com/alley341/elliot

dojops #pentest
AI DevOps Automation Engine

https://github.com/dojops/dojops

AI-Security-Exercises #pentest
AI Security Exercises #1 - Prompt Injection

https://github.com/CyberSecurityUP/AI-Security-Exercises

SSRF-Hunter #bugbounty
SSRF Hunter is a comprehensive Server-Side Request Forgery (SSRF) detection tool designed specifically for bug bounty hunters and security researchers.

https://github.com/rohit-1006/SSRF-Hunter

IC_CS_01 #scanner #web
Cyber security task 1 Web Application Security Scanner

https://github.com/harbhayormhi/ICCS01

SageAI #osint #scanner
AI-powered security scanner with OSINT enrichment

https://github.com/sagarpritam/SageAI

Cloud-Scanner #cloud #exploit #scanner
This project is a lightweight cloud posture scanner that discovers AWS resources, evaluates CIS security controls, stores results in S3, and exposes them through REST APIs and a React dashboard.

https://github.com/dhruv572/Cloud-Scanner

claudit #pentest
MCP server for searching Solodit smart contract security findings

https://github.com/marchev/claudit

🤖 TheExploitLab Intel Bot started!

📡 Monitoring sources:
• NVD (NIST CVE Database)
• Exploit-DB
• PacketStorm Security
• The Hacker News
• SecurityWeek
• GitHub Security Advisories

I will post the latest CVEs, Exploits, and Security News here as they drop.

#ExploitLab #CyberSecurity #BugBounty

🛡️ 🟠 CVE-2025-52365
CVSS 7.8 ████░ HIGH
A command injection vulnerability in the szc script of the ccurtsinger/stabilizer repository allows remote attackers to execute arbitrary system commands via unsanitized user input passed to os.system(). The vulnerability arises from improper input handling where command-line arguments are directly…
#CVE #Vulnerability #CVSS7
🔗 Read More

🛡️ 🟠 CVE-2026-3342
CVSS 7.2 ████░ HIGH
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and inc…
#CVE #Vulnerability #CVSS7
🔗 Read More

🛡️ ⚠️ CVE-2026-3351
Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.
#CVE #Vulnerability #CVSS0
🔗 Read More

🛡️ ⚠️ CVE-2025-57622
An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(request.get_data()) component
#CVE #Vulnerability #CVSS0
🔗 Read More

🛡️ ⚠️ CVE-2025-70821
renren-secuity before v5.5.0 is vulnerable to SQL Injection in the BaseServiceImpl.java component
#CVE #Vulnerability #CVSS0
🔗 Read More

📰 ⚠️ Dust Specter Targets Iraqi Officials with New SPLITDROP and GHOSTFORM Malware
A suspected Iran-nexus threat actor has been attributed to a campaign targeting government officials in Iraq by impersonating the country's Ministry of Foreign Affairs to deliver a set of never-before-seen malware. Zscaler ThreatLabz, which observed the activity in January 2026, is tracking the clu…
#TheHackerNews #CyberNews #Malware
🔗 Read More

📰 ⚠️ Where Multi-Factor Authentication Stops and Credential Abuse Starts
Organizations typically roll out multi-factor authentication (MFA) and assume stolen passwords are no longer enough to access systems. In Windows environments, that assumption is often wrong. Attackers still compromise networks every day using valid credentials. The issue is not MFA itself, but cov…
#TheHackerNews #CyberNews
🔗 Read More