TeamFiltration

TeamFiltration TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 EntraID accounts. See the TeamFiltration wiki page for an introduction into how TeamFiltration works and the Quick Start Guide for how to get up and running! This tool has bee...

agent-vault

!IMPORTANT Use Agent Vault in Infisical instead of this repository. This open-source Agent Vault project is no longer the recommended way to run Agent Vault for any use case, including personal projects. New setups should use Agent Vault in Infisical and follow the Infisical Agent Vault quickstar...

tirith

tirith Your browser would catch this. Your terminal won't. Website | Docs | SKILL.md | Changelog | Releases Independent open-source project, with hosting supported by the Vercel Open Source Program Spring 2026 Cohort. Can you spot the difference? curl -sSL https://install.example-cli.dev | bash...

WifiPassword-Stealer

WifiPassword-Stealer Get All Registered Wifi Passwords from Target Computer. INSTALLATION if you are using a python file pip install smtplib pip install subprocess pip install glob USAGE •Create an account on "https://mailtrap.io/" using a temp mail. •Set your own SMTP USERNAME and SMTP PASSWORD ...

FakeAuth

FakeAuth FakeAuth is a tool that prompts for user credentials and exfiltrates it with HTTP protocol. Inspired by following projects 1. hlldz's PICKL3 https://github.com/hlldz/pickl3 Expect dirty code and some bugs ; Installation No special requirements Usage v1.01 Usage: FakeAuth.exe Example:...

CVE-2023-7231

CVE-2023-7231 – Critical SSRF → Memcached/Docker RCE Chain via Audible fetchResource 🔥 Summary This vulnerability enables Server-Side Request Forgery SSRF in Audible’s fetchResource API on .audible.com, allowing unauthenticated attackers to pivot into internal infrastructure. Through SSRF payload...

THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook-

THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook- On February 13, 2024, Microsoft published a critical security vulnerability in Microsoft Outlook, identified as CVE-2024-21413, known as the Moniker Link Vulnerability. The vulnerability allows an attacker to bypass Outlook's Protected View...

metasploitable2-exploitation-metasploit

Exploiting Metasploitable2 with Metasploit: VSFTPD, Samba, and More A hands-on walkthrough of exploitation using the Metasploit Framework — from PostgreSQL database setup and dbnmap scanning, through three root shells via vsftpd, Samba, and UnrealIRCd, to credential exfiltration with Netcat...

EXPLOIT-CVE-2026-33634

CVE-2026-33634 — LiteLLM supply chain + SSRF in apibase PoC / Lab ⚠️ Deliberately vulnerable lab, for educational and authorized use only. Run it only on your machine, against the containers in this repository. Read SECURITY-NOTES.md before starting. 🚫 NEVER run this lab on a cloud VM or a shared...

Malicious code in spectral-core (npm)

Source: amazon-inspector 451c36f03e81be0ff6c85334587d7ff401de1e5134e179557ec4bc454cd7ba76 The tarball ships only package.json and binding.gyp plus a markdown file, with gypfile: true set in package.json so npm invokes node-gyp rebuild on install. binding.gyp declares a 'none'-type target with no...

MAL-2026-18377 Malicious code in spectral-core (npm)

spectral-core contains no library code: where an index.js is present e.g. 3.0.12 it only exports the package name and version. It ships a binding.gyp and package.json sets "gypfile": true, so npm runs node-gyp rebuild on install, and the binding.gyp declares a build action "Finalizing spectral-co...

Malicious code in spectral-core (npm)

spectral-core contains no library code: where an index.js is present e.g. 3.0.12 it only exports the package name and version. It ships a binding.gyp and package.json sets "gypfile": true, so npm runs node-gyp rebuild on install, and the binding.gyp declares a build action "Finalizing spectral-co...

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. "On May 27, 2026, a configuration file was committed to the public...

MEGALODON

MEGALODON Automated w...

Open Redirect

Overview @modelcontextprotocol/client is a Model Context Protocol implementation for TypeScript - Client package Affected versions of this package are vulnerable to Open Redirect via unconstrained redirect-following in the HTTP fetch layer used by auth.ts, sse.ts, and streamableHttp.ts. When the...

Open Redirect

Overview @modelcontextprotocol/sdk is a Model Context Protocol implementation for TypeScript Affected versions of this package are vulnerable to Open Redirect via unconstrained redirect-following in the HTTP fetch layer used by auth.ts, sse.ts, and streamableHttp.ts. When the client performs OAut...

CVE-2026-109444

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shellrun commands without confirmation because the headless presenter's executionallowed always returns True. Attackers can inject instructions into alerts or Slack messages triaged by t...

EUVD-2026-104684

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shellrun commands without confirmation because the headless presenter's executionallowed always returns True. Attackers can inject instructions into alerts or Slack messages triaged by t...

CVE-2026-109444

Versions of OpenSRE through 0.1.2026.10.19 are vulnerable to an approval gate bypass caused by the headless presenter's execution_allowed() function consistently returning True. This flaw allows attackers to bypass confirmation requirements for shell_run commands. By injecting instructions into a...

CVE-2026-109444 OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shellrun commands without confirmation because the headless presenter's executionallowed always returns True. Attackers can inject instructions into alerts or Slack messages triaged by t...