petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

vger

V'ger V'ger is an interactive command-line application for post-exploitation of authenticated Jupyter instances with a focus on AI/ML security operations. User Stories As a Red Teamer , you've found Jupyter credentials, but don't know what you can do with them. V'ger is organized in a format that...

publications

Publications A home for publications, including slides/papers, proof-of-concepts, videos and tools. For blog posts, see the elttam blog, and for our services, see our website. Date| Type| Event| Title| Resources ---|---|---|---|--- 2026| adv| -| Home Assistant Authenticated Arbitrary File Read vi...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.2, azureml-inference-server-http, chroma, kubeflow-volumes-web-app, dask-kubernetes-fips, pgadmin4-fips, open-webui, ansible-operator-fips, dagster-fips, k8s-sidecar, kubeflow-jupyter-web-app, litellm, prefect, mcp-atlassian,...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.2, azureml-inference-server-http, chroma, kubeflow-volumes-web-app, dask-kubernetes-fips, pgadmin4-fips, open-webui, ansible-operator-fips, dagster-fips, k8s-sidecar, kubeflow-jupyter-web-app, litellm, prefect, mcp-atlassian,...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, open-webui...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: k8s-sidecar, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, open-webui...

msticpy

Herramientas de Seguridad en Python y Jupyter de MSTIC Herramientas de Seguridad en Python de Microsoft Threat Intelligence. msticpy es una biblioteca para investigación y caza en ciberseguridad en Jupyter Notebooks. Incluye funcionalidad para: consultar datos de registros de múltiples fuentes...

msticpy

MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...

HELK

HELK The Hunting ELK or simply the HELK is one of the first open source hunt platforms with advanced analytics capabilities such as SQL declarative language, graphing, structured streaming, and even machine learning via Jupyter notebooks and Apache Spark over an ELK stack. This project was...

CVE-2025-40536-Analysis

CVE-2025-40536-Analysis victoriaalicex.github.io linearregressiontaxi.ipynb linearregressiontaxi.ipynb...

DevHub-HTB-Walkthrough

DevHub – HTB Walkthrough Medium Linux Machine: DevHub Difficulty: Medium OS: Linux Topics: CVE-2026-23744, Chisel Tunneling, Jupyter, Flask API, Root Privilege Escalation 📌 1. Reconnaissance nmap -sC -sV devhub.htb Result: Port 22 SSH Port 80 HTTP Port 6274 MCPJam Inspector 📌 2. Edit Hosts File...

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Simple Proof of Concept Tool 🛠 About This Application This tool shows a technical proof of concept PoC for the security issue CVE-2026-2472. The issue affects the Vertex AI Python SDK from Google Cloud Platform. It relates to an unauthenticated and...

ThreatHunting-JupyterNotebooks

🟣 Weekly Purple Team - Threat Hunting Notebooks A collection of threat hunting and detection engineering Jupyter notebooks accompanying the Weekly Purple Team YouTube channel. Each notebook provides detection logic to help security professionals understand both offensive techniques and defensive...

memOptix

memOptix This Jupyter notebook was created to assist DFIR professionals with triaging Windows memory dumps. Please note that this notebook was created based on the output generated from CrowdStrike's Supermem python script https://github.com/CrowdStrike/SuperMem. SuperMem triage mode 2 or 3 shoul...

RITA-J

RITA Real Intelligence Threat Analytics en Jupyter Notebook RITA es un framework de código abierto para el análisis de tráfico de red patrocinado por Active Countermeasures RITA-J es la implementación de las características de RITA en Jupyter Notebook. El objetivo es admitir todos los tipos de...

susvibes-jupyter-server-cve-2026-35397

SusVibes Benchmark Task: Jupyter Server Contents Path Resolution This repository contains one complete SusVibes-style benchmark task built from a real upstream Python security fix in Jupyter Server. The task is designed to evaluate whether an agent can reimplement masked contents path-resolution...

CitrixNetscalerAnalysis

Cuaderno de análisis de Citrix Un notebook de Jupyter para ayudar a automatizar parte del análisis forense relacionado con hosts de Citrix Netscaler comprometidos mediante CVE-2019-19781. Para obtener ayuda sobre cómo recuperar los artefactos que examinar, consulta este script de triaje de Citrix...

CVE-2026-86049

A flaw was found in Jupyter Server. The server's logging mechanism for HTTP 500 errors fails to properly redact sensitive information. When a request results in an HTTP 500 error and includes a Referer header containing a security token, this token is written to server logs in plaintext. An...