chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

RCity-CVE-2024-27198

RCity - CVE-2024-27198 RCE & Admin Account Creation & CVE-2024-27199 Auth Bypass Exploiting CVE-2024-27198 & CVE-2024-27199 RCity is a Python script that interacts with a vulnerable TeamCity server. The CVE facilitates for unauthorised admin account creation, bypassing 403's on the domain. Whilst...

CVE-2018-19131

CVE-2018-19131 Demo Author: Jonathan M. Wilbur Copyright Year: 2018 License: MIT License Do not do anything illegal with this. This is not malware. This is just a proof of concept. This is a demo of CVE-2018-19131, which runs in a Docker Compose app. This library builds Squid version 3.5.27, whic...

vercel-april2026-incident-response

Vercel April 2026 Incident Response Guide Last updated: 20 April 2026 @ 12.07 PM AEST/Brisbane - v2 — incorporates Vercel CEO update of 20 April IMPORTANT: This is not legal or official advice. If you think you have been compromised please reach out to an incident response partner. This informati...

CVE-2025-0324-axis-vapix-privesc

CVE-2025-0324 — Root Cause Analysis A client-controlledHost header as a root-group backdoor in the AXIS OS VAPIX Device Configuration framework. %20%2F%208.8%20High%20\NVD-b3261e TL;DR Axis Communications disclosed CVE-2025-0324 on 2025-06-02 as a critical CVSS 9.4 privilege-escalation flaw in th...

FARO

FARO Document Sensitivity Detector Table of contents What is this What's in here? Run FARO with Docker Run FARO on host machine Prerequisites Virtual environment Dependencies NER models FARO Spider Single File Detection Technical Details FARO entity detector Configuration Supported Input File...

CVE-2025-30772

🚨 CVE-2025-30772 - Privilege Escalation in WPC Smart Upsell Funnel for WooCommerce 📅 Published: March 27, 2025 🔐 CVSS Score: 8.8 High 🔥 CWE-862: Missing Authorization 🐞 Vulnerability Summary A Missing Authorization vulnerability in the WPC Smart Upsell Funnel for WooCommerce plugin allows...

ThreatHunting

ThreatHunting | A Splunk app mapped to MITRE ATT&CK to guide your threat hunts This is a Splunk application containing several dashboards and over 130 reports that will facilitate initial hunting indicators to investigate. You obviously need to be ingesting Sysmon data into Splunk, a good...

tf-mythic-azure

Terraforming Mythic This project allows operators to set up multiple Mythic C2 servers in Azure. Optionally, Azure CDN redirectors can be created as well. The idea is that you are able to create multiple "projects" that you can manage from this Terraform code. This way, operators can manage the...

magic-extractor

Magic Extractor Description Magic Extractor is a universal extraction tool for Windows that identifies a file with several detectors and routes it to the right bundled extractor. It aims to cover mainstream compression formats, the installers you actually see today, and a range of less common...

shadow

shadow :: De Mysteriis Dom jemalloc shadow is a jemalloc heap exploitation framework. It has been designed to be agnostic of the target application that uses jemalloc as its heap allocator be it Android's libc, Firefox, FreeBSD's libc, standalone jemalloc, or whatever else. The current version 2....

Reconky-Automated_Bash_Script

Reconky-Automated Bash Script \ \ /|| \ /|\ /| | || /| /| || \ || \ / / \ / | || | | | | | || \ | || / / \ / | | | | | | | || \ \ || \ / | \ | | | | | | || | \ || \ \ | \ | /| /| || \ || / \ \ | | |/ ///|/ |/ / / Usage ./reconky.sh About Reconky is a script written in bash to automate the...

hostscan

hostscan 0.2 Hostscan is a php tool which allows you to scan specific range of hosts, mostly for information gathering and testing for weak passwords. I guess it's a pentest tool, i'd created it to automate some tests that i often do. Since it's PHP, it works quite slowly compared to client-side...

Yasso

Yasso Powerful intranet penetration auxiliary toolset - let Yasso be like the wind. Supports brute-forcing of RDP, SSH, Redis, PostgreSQL, MongoDB, MSSQL, MySQL, WinRM and other services, fast port scanning, powerful web fingerprint recognition, one-click exploitation of various built-in services...

PrettyTrusts

PrettyTrusts Try it out at:http://peewpw.github.io/PrettyTrusts Visualizes the output of PowerView's Get-DomainTrustMapping | Export-CSV -NoTypeInformation trusts.csv. Hand it the csv file and get a pretty diagram to play with! Should work with older and new PowerView outputs. Everything is...

SuricataLog

SuricataLog When I started learning how to use Suricata quickly found that I needed a tool to inspect the eve.json file; Most of the tutorials and documentation out there suggested installing a stack to do the following tasks: 1. Store the logs in a central location 2. Normalize and enrich the...

reportly

Reportly is an EntraID user activity report tool. About the tool This is a tool that will help blue teams during a cloud incident. When running the tool, the researcher will enter as input a suspicious user and a time frame and will receive a report detailing the following: 1. Information about t...

CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 is a security issue in the hypervisor firmware of some older Qualcomm chipsets. An unprotected hardware component the "boot remapper" can be abused to gain full read/write access to the hypervisor from a modified operating system privilege escalation. Exploiting the...

CaddySmith

CaddySmith CaddySmith is a small Python script that reads a Cobalt Strike or Sliver C2 profile and forges a Caddy web server config out of it. The generated Caddyfile turns a regular Linux box into a redirector: legitimate beacon traffic gets reverse-proxied to your team server, and anything else...

vexhub

VEX Hub is a centralized repository that collects and manages Vulnerability Exploitability eXchange VEXvex documents from various open-source software projects. It serves as a comprehensive resource for vulnerability information, helping users and security tools to efficiently access and utilize...