RFCpwn

RFCpwn An SAP enumeration and exploitation toolkit using SAP RFC calls Twitter: @icryo This is a toolkit for demonstrating the impact of compromised service accounts. This PoC is not for use in production environments, no guarantee of stability or support. RFCpwn relies on the pyrfc and the...

Transformers-Forged-To-Fight-Offline-Version

Transformers: Forged to Fight, offline revival handoff This package contains a working offline boot of Transformers: Forged to Fight, plus every tool, patch, and reverse engineering note used to get there. It is meant to be picked up by someone who has the time and energy to take the next and muc...

FarsightAD

FarsightAD Table of Contents FarsightAD Table of Contents Description Prerequisite Basic usage AD Hunting cmdlets Demo Fully / partially hidden objects detection Acknowledgements Thanks Author Licence Description FarsightAD is a PowerShell script that aim to help uncovering eventual persistence...

Agentic-SOC-Simulation

🛡️ Agentic SOC Parallel Simulation ASPS: Autonomous Security Operations Parallel Simulation Center Redefining the Future of Security Operations: Full-Stack SOC Parallel Simulation, Multi-Agent Collaboration, and Data-Driven Autonomous Defense 🇨🇳 中文文档 Chinese Version This project is a cutting-edge...

soc-automation-lab

SOC Automation Lab This repository documents the design, detection logic, automation workflows, and lessons learned from building an automated SOC demo using open-source tools. The project focuses on how alerts move from detection to investigation and notification , and what breaks along the way...

mitm-proxy

Go MITM Proxy A lightweight, developer-friendly Man‑in‑the‑Middle MITM HTTP/HTTPS proxy written in Go. It supports HTTP/1.1 and HTTP/2, CONNECT tunneling, WebSocket tunneling ws/wss, on‑disk response caching with flexible filters, and live config reloading. Badges Admin Dashboard Preview Overview...

creepy-plugins

creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...

xmloxide

xmloxide A pure Rust reimplementation of libxml2 — the de facto standard XML/HTML parsing library in the open-source world. libxml2 became officially unmaintained in December 2025 with known security issues. xmloxide aims to be a memory-safe, high-performance replacement that passes the same...

django-defender

django-defender .. image:: https://jazzband.co/static/img/badge.svg :target: https://jazzband.co/ :alt: Jazzband .. image:: https://img.shields.io/pypi/pyversions/django-defender.svg :alt: Supported Python versions :target: https://pypi.org/project/django-defender/ .. image::...

spring-cloud-netflix-hystrix-dashboard-cve-2021-22053

CVE-2021-22053: Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability Severity High Vendor Spring by VMware Description Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

atproto

Blacksky AppView This is Blacksky's fork of the AT Protocol reference implementation by Bluesky Social PBC. It powers the AppView at api.blacksky.community. We're publishing this for transparency and so other communities can benefit from the work. This repository is not accepting contributions,...

kimi

Kimi: Attack Surface Discovery Engine Developed with 💜 by @alechilczenko Project Context: This project serves as a portfolio piece demonstrating concepts in offensive security, concurrency, and distributed architecture. 1. Introducing Kimi: The Origin Story What was Kimi ? During my early days...

meteor

Meteor A cross-platform C2/teamserver supporting multiple transport protocols, written in Go. Note: This is in development and as such is not exactly stable. Documentation is also lacking, but will be improved gradually over time. General The Meteor system is split into several parts: Core : the...

rastrea2r

.. image:: https://github.com/rastrea2r/rastrea2r/blob/master/logo.png :align: center :alt: logo .. image:: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :target: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :alt: travis-ci for master branch .. image::...

CVE-2025-55449

CVE-2025-55449 - AstrBot Remote Code Execution RCE Vulnerability Overview This repository contains a proof-of-concept exploit for CVE-2025-55449 , a critical Remote Code Execution RCE vulnerability in AstrBot. The vulnerability allows an attacker to execute arbitrary code on the target system by...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

CVE-2026-42945

CVE-2026-42945 Nginx Rift - PoC Toolkit A comprehensive proof-of-concept toolkit for CVE-2026-42945 Nginx Rift, a critical heap buffer overflow vulnerability in Nginx's ngxhttprewritemodule. Vulnerability Summary Field| Details ---|--- CVE ID| CVE-2026-42945 Name| Nginx Rift Type| Heap Buffer...

log4j-cve-2021-44228

Log4j-CVE-2021-44228 detector scanner playbook Ansible playbook to verify target Linux hosts using the official Red Hat Log4j detector script for Log4Shell CVE-2021-44228. Red Hat version 1.3 detector 2022-01-10. The result is saved in a txt file under detectordir default: /opt/cve-2021-44228/...

CVE-2025-3464-AsIO3-LPE

CVE-2025-3464-AsIO3-LPE CVE-2025-3464: Unprivileged LPE exploit for ASUS AsIO3.sys - TOCTOU auth bypass + PreviousMode decrement CVE-2025-3464: AsIO3.sys Local Privilege Escalation This exploit will only work on Windows 11 22H2 or earlier. Microsoft fixed PreviousMode hijinks. Local privilege...