https://tools.cyberkendra.com Live exploited-vulnerability feeds, maintained security trackers, and browser-side tools. en-in Thu, 30 Jul 2026 17:25:25 GMT https://tools.cyberkendra.com/tracker/cisa-kev/ https://tools.cyberkendra.com/tracker/cisa-kev/ Every CVE the US government has confirmed is being exploited in the wild — not theoretically exploitable, actively used against real targets. Search by CVE, vendor or product. Tue, 28 Jul 2026 00:00:00 GMT https://tools.cyberkendra.com/benchmarks/port-scanner-speed/ https://tools.cyberkendra.com/benchmarks/port-scanner-speed/ Four scanners run against the same lab /16 on identical hardware, from the same uplink, with the same port set. The headline is not which is fastest — it is how much accuracy each one trades away to get there. Wed, 22 Jul 2026 00:00:00 GMT https://tools.cyberkendra.com/best/best-password-managers/ https://tools.cyberkendra.com/best/best-password-managers/ Scored on five axes that actually differ between products: security architecture, independent audit history, platform coverage, sharing and recovery, and price. Ranking is independent — we take no affiliate money for placement. Mon, 20 Jul 2026 00:00:00 GMT https://tools.cyberkendra.com/2026/07/wp2shell-checker-tool.html https://tools.cyberkendra.com/2026/07/wp2shell-checker-tool.html Check your WordPress site vulnerable to WP2Shell. Instant version checker, patch steps, WAF rules, detection scripts and IOCs for CVE-2026-63030 / CVE-2026-60137. Sun, 19 Jul 2026 16:52:36 GMT https://tools.cyberkendra.com/guide/block-a-stolen-phone-india/ https://tools.cyberkendra.com/guide/block-a-stolen-phone-india/ The Central Equipment Identity Register can bar a handset on every Indian network at once. The order of these steps matters — CEIR rejects any request that arrives without a police reference. Sun, 19 Jul 2026 00:00:00 GMT https://tools.cyberkendra.com/2026/07/t3mp3st-autonomous-red-teaming-platform.html https://tools.cyberkendra.com/2026/07/t3mp3st-autonomous-red-teaming-platform.html A multi-agent offensive-security framework, built to turn the AI coding agent you already run into a zero-day hunter. Mon, 06 Jul 2026 12:33:43 GMT https://tools.cyberkendra.com/2026/04/sighthouse-automated-function-identification-for-reverse-engineering.html https://tools.cyberkendra.com/2026/04/sighthouse-automated-function-identification-for-reverse-engineering.html SightHouse is an open-source tool developed by Quarkslab that helps reverse engineers automatically identify known functions inside binaries by matching them with previously analyzed code. SightHouse is a tool designed to assist reverse engineers by retrieving information and metadata from programs Fri, 03 Apr 2026 11:08:48 GMT https://tools.cyberkendra.com/2026/03/ciso-assistant-one-stop-grc-platform-for-risk-management-appsec.html https://tools.cyberkendra.com/2026/03/ciso-assistant-one-stop-grc-platform-for-risk-management-appsec.html CISO Assistant offers a fresh perspective on Cybersecurity Management and GRC (Governance, Risk, and Compliance) practices: Features Upcoming features are listed on the roadmap. CISO Assistant is developed and maintained by Intuitem, a company specializing in Cybersecurity, Cloud, and Data/AI. Core Sun, 29 Mar 2026 10:22:58 GMT https://tools.cyberkendra.com/2026/03/androhunter-android-security-research-toolkit.html https://tools.cyberkendra.com/2026/03/androhunter-android-security-research-toolkit.html AndroHunter is a native Android application that provides a full suite of mobile security testing tools — all running directly on the device without requiring a rooted phone for most features. It is designed for security researchers participating in bug bounty programs (HackerOne, Yes We Hack, Intig Fri, 20 Mar 2026 09:48:45 GMT https://tools.cyberkendra.com/2025/12/whatsapp-tracking-by-phone-number.html https://tools.cyberkendra.com/2025/12/whatsapp-tracking-by-phone-number.html This project implements the research from the paper “Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers” by Gabriel K. Gegenhuber, Maximilian Günther, Markus Maier, Aljosha Judmayer, Florian Holzbauer, Philipp É. Frenzel, and Johanna Ullri Fri, 12 Dec 2025 13:08:00 GMT https://tools.cyberkendra.com/2025/07/username-finder.html https://tools.cyberkendra.com/2025/07/username-finder.html Sat, 05 Jul 2025 22:39:15 GMT https://tools.cyberkendra.com/2025/04/pyxl-python-directly-in-hardware.html https://tools.cyberkendra.com/2025/04/pyxl-python-directly-in-hardware.html What is PyXL? PyXL is a custom hardware processor that executes Python directly — no interpreter, no JIT, and no tricks. It takes regular Python code and runs it in silicon. A custom toolchain compiles a .py file into CPython ByteCode, translates it to a custom assembly, and produces a binary that r Mon, 28 Apr 2025 10:50:00 GMT https://tools.cyberkendra.com/2025/03/cf-hero-find-real-ip-behind-cloudflare.html https://tools.cyberkendra.com/2025/03/cf-hero-find-real-ip-behind-cloudflare.html CF-Hero is a comprehensive reconnaissance tool developed to discover the real IP addresses of web applications protected by Cloudflare. It gathers multi-source intelligence through various methods. DNS Reconnaissance Current DNS records (A, TXT) Historical DNS data analysis Associated domain discove Mon, 31 Mar 2025 05:48:00 GMT https://tools.cyberkendra.com/2025/01/hexhttp-http-header-exploitation-tool.html https://tools.cyberkendra.com/2025/01/hexhttp-http-header-exploitation-tool.html HExHTTP is a tool designed to perform tests on HTTP headers and analyze the results to identify vulnerabilities and interesting behaviors. Features Server Error response checking Localhost header response analysis Vhosts checking Methods response analysis HTTP Version analysis [Experimental] Cache P Tue, 28 Jan 2025 00:28:00 GMT https://tools.cyberkendra.com/2025/01/hanko-an-authentication-and-user-management-solution-for-the-passkey.html https://tools.cyberkendra.com/2025/01/hanko-an-authentication-and-user-management-solution-for-the-passkey.html Hanko is an open-source authentication and user management solution with a focus on moving the login beyond passwords while being 100% deployable today. Supports all modern authentication methods, incl. passkeys, social logins, and SAML SSO Highly flexible configuration options (e.g. optional/user-d Mon, 20 Jan 2025 05:06:00 GMT https://tools.cyberkendra.com/2025/01/postiz-free-ai-social-media-scheduling-tool.html https://tools.cyberkendra.com/2025/01/postiz-free-ai-social-media-scheduling-tool.html Postiz: An alternative to: Buffer.com, Hypefury, Twitter Hunter, Etc… Postiz offers everything you need to manage your social media posts, build an audience, capture leads, and grow your business. Intro Schedule all your social media posts (many AI features) Measure your work with analytics. C Mon, 20 Jan 2025 04:50:00 GMT https://tools.cyberkendra.com/2025/01/maigret-search-person-by-username-from-thousands-of-sites.html https://tools.cyberkendra.com/2025/01/maigret-search-person-by-username-from-thousands-of-sites.html Maigret collects a dossier on a person by username only, checks for accounts on many sites, and gathers all the available information from web pages. No API keys are required. Maigret is an easy-to-use and powerful fork of Sherlock. Currently supports more than 3000 sites (full list), search is laun Mon, 20 Jan 2025 04:41:00 GMT https://tools.cyberkendra.com/2024/09/logicytics-system-data-harvester.html https://tools.cyberkendra.com/2024/09/logicytics-system-data-harvester.html Logicytics is a cutting-edge tool designed to meticulously harvest and collect a vast array of Windows system data for forensic analysis. Crafted with Python 🐍, it’s an actively developed project that is dedicated to gathering as much sensitive data as possible and packaging it neatly into a ZIP fi Mon, 23 Sep 2024 11:02:00 GMT https://tools.cyberkendra.com/2024/08/dubbie-open-source-ai-video-dubbing-studio.html https://tools.cyberkendra.com/2024/08/dubbie-open-source-ai-video-dubbing-studio.html Dubbie is an open-source AI dubbing studio that costs $0.1/min, which is about ~20x less than alternatives like ElevenLabs, RaskAI, or Speechify. While still in early development and not at feature parity with these alternatives, Dubbie offers enough features to create dubs for basic videos. What is Wed, 21 Aug 2024 05:35:00 GMT https://tools.cyberkendra.com/2024/07/hamster-kombat-auto-clicker-and-desktop-version.html https://tools.cyberkendra.com/2024/07/hamster-kombat-auto-clicker-and-desktop-version.html Everyone is now familiar with the trending telegram-based crypto game name Hamster Kombat, a game that blends adorable critters with the world of cryptocurrency, which is taking the internet by storm. This Telegram-based game has rocketed to popularity, boasting over 200 million users in a shockingl Mon, 01 Jul 2024 06:22:00 GMT https://tools.cyberkendra.com/2024/06/gwpsan-sampling-based-sanitizer-framework.html https://tools.cyberkendra.com/2024/06/gwpsan-sampling-based-sanitizer-framework.html GWPSan is a framework for low-overhead sampling-based dynamic binary instrumentation, designed for implementing various bug detectors (also called “sanitizers”) suitable for production uses. GWPSan does not modify the executed code, but instead performs dynamic analysis from signal handl Mon, 10 Jun 2024 05:18:00 GMT https://tools.cyberkendra.com/2024/05/agentic-security-llm-security-scanner.html https://tools.cyberkendra.com/2024/05/agentic-security-llm-security-scanner.html Features Customizable Rule Sets or Agent based attacks🛠️ Comprehensive fuzzing for any LLMs 🧪 LLM API integration and stress testing 🛠️ Wide range of fuzzing and attack techniques 🌀 Note: Please be aware that Agentic Security is designed as a safety scanner tool and not a foolproof solution. It Tue, 07 May 2024 00:36:00 GMT https://tools.cyberkendra.com/2024/04/how-to-make-an-ultraviolet-proxy.html https://tools.cyberkendra.com/2024/04/how-to-make-an-ultraviolet-proxy.html Ultraviolet is a highly advanced web proxy used for evading internet censorship or accessing websites in a controlled sandbox. It is designed with security and performance in mind. Ultraviolet intercepts HTTP requests with a service worker, while adhering to the TompHTTP specifications and is a lead Fri, 19 Apr 2024 01:39:00 GMT https://tools.cyberkendra.com/2024/04/indetectables-toolkit-a-toolkit-for-reversing-malware-analysis-and-cracking.html https://tools.cyberkendra.com/2024/04/indetectables-toolkit-a-toolkit-for-reversing-malware-analysis-and-cracking.html This tool compilation is carefully crafted to be useful both for beginners and veterans of the malware analysis world. It has also proven useful for people trying their luck at the cracking underworld. It’s the ideal complement to be used with the manuals from the site, and to play with the numbered Thu, 18 Apr 2024 01:11:00 GMT https://tools.cyberkendra.com/2024/04/morphic-an-ai-powered-answer-engine-with-a-generative-ui.html https://tools.cyberkendra.com/2024/04/morphic-an-ai-powered-answer-engine-with-a-generative-ui.html It is an AI-powered answer engine with a generative UI. Stack App framework: Next.js Text streaming / Generative UI: Vercel AI SDK Generative Model: OpenAI Search API: Tavily AI Component library: shadcn/ui Headless component primitives: Radix UI Styling: Tailwind CSS 🚀 Quickstart 1. Fork and Clone Tue, 09 Apr 2024 07:28:00 GMT https://tools.cyberkendra.com/2024/04/xzbot-exploit-demo-for-the-xz-backdoor-cve-2024-3094.html https://tools.cyberkendra.com/2024/04/xzbot-exploit-demo-for-the-xz-backdoor-cve-2024-3094.html Exploration of the xz backdoor (CVE-2024-3094). Includes the following: honeypot: fake vulnerable server to detect exploit attempts ed448 patch: patch liblzma.so to use our own ED448 public key backdoor format: format of the backdoor payload backdoor demo: cli to trigger the RCE assuming knowledge o Mon, 01 Apr 2024 13:56:00 GMT https://tools.cyberkendra.com/2024/03/openui-next-gen-tool-for-building-powerful-applications.html https://tools.cyberkendra.com/2024/03/openui-next-gen-tool-for-building-powerful-applications.html OpenUI aims to make the process fun, fast, and flexible. It lets users describe UI using their imagination, and then see it rendered live. You can ask for changes and convert HTML to React, Svelte, Web Components, etc. It’s like v0 but open source and not as polished 😝. Running Locally You can also Sat, 30 Mar 2024 01:20:00 GMT https://tools.cyberkendra.com/2024/03/bluespy-tool-to-record-audio-from-a-bluetooth-device.html https://tools.cyberkendra.com/2024/03/bluespy-tool-to-record-audio-from-a-bluetooth-device.html BlueSpy BlueSpy was developed to record and replay audio from a Bluetooth device without the legitimate user’s awareness. The PoC was demonstrated during the talk BSAM: Seguridad en Bluetooth at RootedCON 2024 in Madrid. It’s designed to raise awareness about the insecure use of Bluetooth devices, Fri, 22 Mar 2024 12:55:00 GMT https://tools.cyberkendra.com/2024/01/web-check-comprehensive-on-demand-open-source-intelligence-for-any-website.html https://tools.cyberkendra.com/2024/01/web-check-comprehensive-on-demand-open-source-intelligence-for-any-website.html Web-Check is a powerful all-in-one tool for discovering information about a website/host. The core philosophy is simple: feed Web-Check a URL and let it gather, collate, and present a broad array of open data for you to delve into. The report shines a spotlight onto potential attack vectors, existin Sun, 14 Jan 2024 14:42:00 GMT https://tools.cyberkendra.com/2024/01/ssh-snake-automated-ssh-based-network-traversal.html https://tools.cyberkendra.com/2024/01/ssh-snake-automated-ssh-based-network-traversal.html 🐍 SSH-Snake is a powerful tool designed to perform automatic network traversal using SSH private keys discovered on systems, to create a comprehensive map of a network and its dependencies, identifying to what extent a network can be compromised using SSH and SSH private keys starting from a partic Sun, 14 Jan 2024 12:37:00 GMT https://tools.cyberkendra.com/2024/01/webcopilot-an-automation-tool-for-xss-sqli-lfi-ssrf-and-rce.html https://tools.cyberkendra.com/2024/01/webcopilot-an-automation-tool-for-xss-sqli-lfi-ssrf-and-rce.html ──────▄▀▄─────▄▀▄ ─────▄█░░▀▀▀▀▀░░█▄ ─▄▄──█░░░░░░░░░░░█──▄▄ █▄▄█─█░░▀░░┬░░▀░░█─█▄▄█ ██╗░░░░░░░██╗███████╗██████╗░░█████╗░░█████╗░██████╗░██╗██╗░░░░░░█████╗░████████╗░██║░░██╗░░██║██╔════╝██╔══██╗██╔══██╗██╔══██╗██╔══██╗██║██║░░░░░██╔══██╗╚══██╔══╝░╚██╗████╗██╔╝█████╗░░██████╦╝██║░░╚═╝██║░░██║██████╔ Sun, 14 Jan 2024 12:14:00 GMT https://tools.cyberkendra.com/2023/06/exploit-released-for-vmware-aria-operations-for-networks-rce-cve-2023-20887-bug.html https://tools.cyberkendra.com/2023/06/exploit-released-for-vmware-aria-operations-for-networks-rce-cve-2023-20887-bug.html A group of researchers has unveiled a proof-of-concept (PoC) demonstration for a serious Remote Code Execution (RCE) vulnerability present in VMware’s Aria Operations for Networks. This software suite is commonly utilized by large-scale networks, making the potential impact of this vulnerability qui Wed, 14 Jun 2023 00:34:00 GMT https://tools.cyberkendra.com/2023/04/windows-dhcp-remote-code-execution-vulnerability-cve-2023-28231.html https://tools.cyberkendra.com/2023/04/windows-dhcp-remote-code-execution-vulnerability-cve-2023-28231.html Dynamic Host Configuration Protocol (DHCP) is a client/server protocol that automatically provides an Internet Protocol (IP) host with its IP address and other related configuration information, such as subnet mask and default gateway. RFCs 2131 and 2132 define DHCP as an Internet Engineering Task F Wed, 12 Apr 2023 02:50:00 GMT https://tools.cyberkendra.com/2022/12/teler-real-time-http-intrusion-detection.html https://tools.cyberkendra.com/2022/12/teler-real-time-http-intrusion-detection.html Teler is a real-time intrusion detection and threat alert based on a weblog that runs in a terminal with resources that we collect and provide by the community. ❤️ Features Real-time: Analyze logs and identify suspicious activity in real time. Alerting: teler provides alerting when a threat is detec Sun, 04 Dec 2022 11:45:00 GMT https://tools.cyberkendra.com/2022/12/openai-chat-gpt-google-chrome-extension.html https://tools.cyberkendra.com/2022/12/openai-chat-gpt-google-chrome-extension.html Chrome Extension that Integrates ChatGPT (Unofficial) into Google Search. Prerequisites Unofficial ChatGPT API Chrome Extension Installation Clone this repository Go to chrome://extensions/ Enable Developer Mode Click on Load Unpacked Select the folder where you cloned this repository Usage Make sur Sun, 04 Dec 2022 11:38:00 GMT https://tools.cyberkendra.com/2022/11/aptrs-an-automated-penetration-testing-reporting-system.html https://tools.cyberkendra.com/2022/11/aptrs-an-automated-penetration-testing-reporting-system.html APTRS (Automated Penetration Testing Reporting System) is an automated reporting tool in Python and Django. The tool allows Penetration testers to create a report directly without using the Traditional Docx file. It also provides an approach to keeping track of the projects and vulnerabilities. Prer Thu, 24 Nov 2022 05:01:00 GMT https://tools.cyberkendra.com/2022/11/intlog-a-flask-app-to-track-interesting-artifacts-during-an-investigation.html https://tools.cyberkendra.com/2022/11/intlog-a-flask-app-to-track-interesting-artifacts-during-an-investigation.html INTLog is a simple Flask app designed to keep track of potentially interesting artifacts during an investigation. This application was designed to keep track of artifacts that you may stumble across during an investigation. This project is in an EXTREMELY early stage. Setup Setup env: INTLog » pyth Thu, 24 Nov 2022 03:27:00 GMT https://tools.cyberkendra.com/2022/11/emailall-a-powerful-email-collect-tool.html https://tools.cyberkendra.com/2022/11/emailall-a-powerful-email-collect-tool.html EmailAllis a powerful Email Collect tool —— a powerful email collection tool. Installation $ git clone https://github.com/Taonn/EmailAll.git $ cd EmailAll $ pip3 install -r requirements.txt EmailAll is a powerful Email Collect tool Example: python3 emailall.py check python3 emailall.py –domain Thu, 24 Nov 2022 02:33:00 GMT https://tools.cyberkendra.com/2022/11/donpapi-dumping-dpapi-credential-remotely.html https://tools.cyberkendra.com/2022/11/donpapi-dumping-dpapi-credential-remotely.html Dumping relevant information on compromised targets without AV detection. DPAPI dumping Lots of credentials are protected by DPAPI. We aim at locating those “secured” credentials, and retrieve them using : User Password Domaine DPAPI BackupKey Local machine DPAPI Key (protecting TaskSche Tue, 22 Nov 2022 02:44:00 GMT https://tools.cyberkendra.com/2022/11/awsgoat-a-damn-vulnerable-aws-infrastructure.html https://tools.cyberkendra.com/2022/11/awsgoat-a-damn-vulnerable-aws-infrastructure.html Compromising an organization’s cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure. Since the cloud is relatively new, many developers are Tue, 22 Nov 2022 00:34:00 GMT