Shada #ad #exploit #password
Autonomous AI-powered Active Directory pentesting framework — 73 agents, 55+ CVEs, Mimikatz/Certipy/hashcat tool chain, BloodHound-style BFS graph, MITRE ATT&CK mapping (132 IDs), real-time dashboard.

https://github.com/incur8yws/Shada

specification.website #exploit #web
Website specification — HTML, accessibility, security, SEO, agent-readiness. Platform-agnostic, sourced, MIT.

https://github.com/jdevalk/specification.website

CVE-2026-46376 #exploit
CVE-2026-46376 - FreePBX Unauthenticated UCP Access via Hard-Coded Credentials

https://github.com/portbuster1337/CVE-2026-46376

nsauditor-ai #exploit #scanner
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltra...

https://github.com/nsasoft/nsauditor-ai

Fortify #exploit #scanner #web
Open-source web app security scanner

https://github.com/Givemeboga/Fortify

Comply.dev #cloud #exploit #scanner
Open-source cloud compliance scanner — automated checks for AWS security groups, encryption, backups & IAM policies. Built for GRC teams and auditors.

https://github.com/Jriley711/Comply.dev

content-discovery #exploit #password #recon #web
Web content discovery tool for authorized pentesting — brute-forces paths, enumerates subdomains, extracts JS endpoints, and crawls same-domain links. Modular CLI with multithreading and JSON repor...

https://github.com/SantiagoP0815/content-discovery

cloudgov #cloud #exploit #scanner
AWS security & cost CLI — IAM least-privilege, cost anomalies, posture, drift, compliance, and resource hygiene, plus a Kubernetes RBAC scanner.

https://github.com/nanohype/cloudgov

chronomaly-webos #exploit #web
CVE-2025-38352 kernel exploit for LG webOS Smart TVs (ARM64). Achieves persistent root on real consumer hardware with novel exploitation techniques. Responsibly disclosed to LG.

https://github.com/AnalyticETH/chronomaly-webos

orthrus #exploit #recon #scanner #web
Orthrus — automated vulnerability discovery & exploitation-confirmation framework for authorized security testing. 41 scanners (web, API, LLM/OWASP-LLM-Top-10, unauth-service), IaC audit, recon, ex...

https://github.com/ankitjha67/orthrus

Mephisto #exploit #scanner
Scan and exploit WordPress vulnerabilities to identify and patch security weaknesses during authorized penetration tests.

https://github.com/Eastside-georgia30/Mephisto

VaktScan #exploit #scanner
An high-performance security scanner designed for comprehensive vulnerability assessment of monitoring and logging infrastructure stacks with concurrent processing and extensive CVE coverage.

https://github.com/Bhanunamikaze/VaktScan

Network-Scanner #exploit #scanner
Open-source Python network scanner and vulnerability reporting tool built with Nmap for cybersecurity learning and Information Security projects.

https://github.com/Muhammad-Ayyan-Hussain/Network-Scanner

CVE-2025-5947 #exploit
CVE-2025-5947 WordPress Service Finder Bookings ≤ 6.0 Exploit

https://github.com/xxconi/CVE-2025-5947

CVE-2025-9074 #exploit
PHP poc, exploit for CVE-2025-9074

https://github.com/c0gnit00/CVE-2025-9074

OpenEASD #exploit #recon #scanner #web
Open External Attack Surface Detection - self-hosted domain scanner (subdomains, ports, TLS, CVEs, web vulns)

https://github.com/cybersecify/OpenEASD

Myesve #ad #exploit #scanner
CVE-2024-38475 exploitation & scanning tool with Mullvad VPN rotation

https://github.com/Nyakki-Labs-0x420/Myesve

HackTheBox-Silentium #exploit #password
Full walkthrough of HackTheBox "Silentium" (Medium/Linux). Chains three CVEs: CVE-2025-58434 leaks a Flowise password reset token unauthenticated, enabling account takeover; CVE-2025-59528 achieves...

https://github.com/SuriyaBoon/HackTheBox-Silentium

CVE-2025-10162-Exploit #exploit
CVE-2025-10162 Exploit

https://github.com/diamorphine666/CVE-2025-10162-Exploit

agentic-osint-agent #exploit #osint
A LangGraph ReAct agent for autonomous public-source OSINT investigation. Five free read-only tools, deterministic evidence ledger, real 20-target benchmark.

https://github.com/thunderstornX/agentic-osint-agent