buyer-eval-skill

Buyer Eval — The Rotten Tomatoes of B2B Software A free, open-source Claude skill that evaluates B2B vendors by talking to their AI agents, cross-referencing every claim against independent sources, and scoring what's verified vs. what's just optimistic marketing. New in v3.5 — Vendor questions a...

ExchangeRelayX

ExchangeRelayX Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to perform an SMB or HTTP based NTLM relay attack to the EWS endpoint on an on-premise Microsoft Exchange server to compromise the mailbox of the victim. This tool provides the attacker with an OWA looking...

chaos-operator

Litmus chaos-operator for injecting chaos experiments on Kubernetes Codacy Badge...

autoguardrails

autoguardrails Open source by Santander AI Lab. An LLM / AI-safety guardrail research library / evaluation harness autoresearch-style: it searches over a single mutable policy.md surface to minimize attack success rate ASR against a fixed evaluation suite, with a benign-pass floor. Part of...

CVE-2026-24055-OAuth-Langfuse

CVE-2026-24055 — Unauthenticated Slack OAuth Install in Langfuse Đồ án môn Bảo mật Web và Ứng dụng — Nhóm 06, lớp NT213.Q21.ANTT 📌 Tóm tắt Dự án tái hiện lại reproduce một lỗ hổng bảo mật thực tế đã được công bố CVE-2026-24055 trên nền tảng Langfuse — một endpoint OAuth cho phép kẻ tấn công chiếm...

PurpleKeep

Description With the rapidly increasing variety of attack techniques and a simultaneous rise in the number of detection rules offered by EDRs Endpoint Detection and Response and custom-created ones, the need for constant functional testing of detection rules has become evident. However, manually...

POC-S

POC-S: POC-T Strengthen Version POC-T Enhanced Edition Documentation for POC-T wiki is in the doc directory Preface: Currently Legal Disclaimer Using POC-S to attack targets without prior mutual consent is illegal. POC-S is intended for security testing purposes only. Features Compatible with POC...

thermoptic

thermoptic "I don't believe it, thermoptic camouflage!" What is it? This is an HTTP proxy designed to bypass services that use fingerprinting such as JA4+ to block certain HTTP clients. Using this proxy, you can use your preferred HTTP clients like curl and still have magically indistinguishable...

rekono

Automate the recon, keep your time for the part that actually needs a hacker Think about how an assessment really starts. You gather public information about the target. You discover its hosts, enumerate their ports and identify the services behind them. Then you run a more specific tool against...

CVE-2024-44902

CVE-2024-44902 Vulnerability description A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code. Affects Version Thinkphp v6.1.3 to v8.0.4 Exploit condition The thinkphp framework should have installed the Memcached extension. Vulnerability...

sqlsure

sqlsure AI writes your SQL. sqlsure makes sure it's right. A query can be perfectly valid, run without error, and return a number that's silently wrong — revenue double-counted by a join, an average summed, a patient identifier exposed. Databases don't catch this. Linters don't catch this. LLMs...

strelka-ui

Releases | Pull Requests | Issues !Pull...

CVE-2023-2598

CVE-2023-2598 what's iouring? ​ iouring is a system call interface for Linux. It has supported almost all system call so far, not only read and write initially. It enables an application to initiate system calls that can be performed asynchronously. Submission and Completion Queues At the core of...

CVE-2024-24401

Vulnerability Report CVE Disovered DESIGNED TO BE RUN ON KALI LINUX Notes Nagios has patched version 2024R1.0.1 in all recent downloads. To determine if a target is vulnerable, ensure they are using an older download of 2024R1.0.1. The updated script checks to make sure that the target system is...

ironclaw

IronClaw Your secure personal AI assistant, always on your side English | 简体中文 | Русский | 日本語 | 한국어 Reborn Quick Start • Philosophy • Features • Installation • Configuration • Security • Architecture IronClaw Reborn Quick Start IronClaw Reborn is the standalone runtime on the reborn-integration...

CVE-2026-8732

⚔️ CVE-2026-8732 WP Maps Pro ≤ 6.1.0 — Unauthenticated Privilege Escalation 8-Fase Automasi Eksploitasi | Multiprocessing + Asyncio | Admin Creation Terverifikasi 🎯 Tentang Kerentanan Plugin WordPress WP Maps Pro versi ≤ 6.1.0 memiliki kerentanan eskalasi hak istimewa tanpa autentikasi. Penyerang...

CVE-2026-9811

CVE-2026-9811 CVE-2026-9811 is a Stored Cross-Site Scripting Stored XSS vulnerability affecting Mautic 7 versions 7.0.0 through 7.1.1.The vulnerability exists in the Project Selector component, where project names returned via an AJAX request are inserted into the page without proper output...

DesckVB-RAT

DesckVB RAT v2.9 — Modular .NET RAT, Multi-Stage Delivery & Plugin Ecosystem Toolchain Linkage to “Pjoao1578” Author: ShadowOpCode X/Twitter: https://x.com/ShadowOpCode This repository accompanies a full technical report documenting an active malware ecosystem centered around DesckVB RAT , a...

web-traffic-generator

web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...

cve-2025-5781_FreePBX

cve-2025-5781FreePBX In August 2025, a critical vulnerability was disclosed in the FreePBX Endpoint module. CVE-2025–57819 allows an unauthenticated attacker to exploit SQL injection in the Endpoint module and, through a chain of database manipulation and scheduled task execution, achieve remote...