jshookmcp

@jshookmcp/jshook A search-first, profile-aware reverse-engineering workspace for AI agents. Hook the page, capture the network, deobfuscate the bundle, disassemble the WASM, instrument the process — and let one MCP server keep the whole attack surface in reach without drowning the model in...

CVE-2015-2291

CVE-2015-2291 1 IQVW32.sys before 1.3.1.0 and 2 IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted a 0x80862013, b 0x8086200B, c 0x8086200F, or d...

phishcollector

PhishCollector PhishCollector is a research framework for collecting, analysing, and tracking phishing sites. It is intentionally designed as a starting point — the detection rules, technology signatures, wordlists, and plugins are all plain data structures that researchers are expected to read,...

Serverless-Goat

Introduction Thank you for using OWASP ServerlessGoat! ​ This serverless application demonstrates common serverless security flaws as described in the Serverless Security Top 10 Weaknesses guide https://github.com/puresec/sas-top-10. ​ ServerlessGoat was created for the following educational...

Goreport

Goreport v3.0, a Gophish Reporting Tool This script accepts your Gophish campaign IDs as a parameter and then collects the campaign results to present the statistics and perform user-agent parsing and geolocation lookups for IP addresses. Goreport generates lists of IP addresses, operating system...

CVE-2022-37969

CVE-2022-37969 Windows Local Privilege Escalation PoC authors: Ricardo Narvaja & Daniel Kazimirow Solid For demonstration purposes only. Complete exploit works on vulnerable Windows 11 21H2 systems. Functional PoC based on previously published information by Zscaler Checkout the writeup...

CVE-2023-49606

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2023-49606:...

react2shell-scanner

react2shell-guard Security scanner for CVE-2025-55182 - a critical CVSS 10.0 unauthenticated Remote Code Execution vulnerability in React Server Components. ⚠️ DISCLAIMER This is a security scanner , NOT an exploit tool. It is designed to help developers and security teams identify vulnerable...

CVE-2024-42327

CVE-2024-42327: Zabbix Privilege Escalation - RCE Description This Proof-of-Concept POC can be used to exploit CVE-2024-42327 to leak the admin API authentication token and create an item to achieve a reverse shell on a Zabbix server 6.0.32rc1, 6.4.17rc1, 7.0.1rc1 A non-admin user account on the...

cracken

Cracken Cracken is a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust more on talk/talk. Inspired by great tools like maskprocessormp, hashcathashcat, Crunchcrunch and 🤗 HuggingFace's tokenizerstokenizers. What? Why? Woot?? At...

react2shell

React2Shell: RCE 0-day in React Server Components CVE-2025-55182 React and CVE-2025-66478 Next.js This repository contains exploit code for authorized security testing and educational purposes only. See also: Multiple researchers have published analyses of this vulnerability. Check the References...

dns-rebinding-tool

Inspired by @tavisio This project is meant to be an All-in-one Toolkit to test further DNS rebinding attacks and my take on understanding these kind of attacks. It consists of a web server and pseudo DNS server that only responds to A queries. The root index of the web server allowes to configure...

cryptoptic

cryptoptic Find the cryptography hiding in your code before quantum computers find it for you. cryptoptic uses CodeQL and GitHub Actions to scan a repository or an entire GitHub organisation and produce an inventory of every cryptographic function in use, the library it comes from, and where it i...

drvtrace

tracedrv Tiny WinDbg extension to trace transitions from a debugged driver into other modules i.e. to trace function calls. Usage !tracedrv 4000 trace for 4000 instructions...

PwnFox

PwnFox PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit. If you are a chrome user you can check https://github.com/nccgroup/autochrome. PwnFox Features Single click BurpProxy Containers Profiles PostMessage Logger Toolbox Security header remover Installation...

CVE-2026-90216

A flaw was found in the Linux kernel's Unsorted Block Images UBI subsystem. The ubiinitattach function, responsible for rolling back module initialization failures, incorrectly assumes that the parameter index matches the UBI device number. This can lead to a successfully attached device being...

CVE-2022-29885

CVE-2022-29885 The tool is only used for security research. It is prohibited to use the tool to launch illegal attacks, and the user is responsible for the consequences 工具仅用于安全研究以及内部自查，禁止使用工具发起非法攻击，造成的后果使用者负责 Introduce Apache Tomcat DoS CVE-2022-29885 Exploit Denial of Service in EncryptIntercept...

CVE-2026-90147

A flaw was found in the Linux kernel's clock management subsystem. The devmclkgetoptionalenabledwithrate function registers its cleanup action prematurely, before successfully setting the clock rate. If the rate setting fails, the system attempts to disable and unprepare a clock that was never...

CVE-2026-90201

A flaw was found in the Linux kernel's pagepool networking component. A race condition can occur when the pagepooldestroy function runs concurrently with page return operations. This race condition can lead to a Use-After-Free UAF vulnerability, where the system attempts to access memory after it...

Security Bulletin: IBM i is Affected by a Heap Buffer Overflow Vulnerability in Zlib [CVE-2026-85091]

Summary IBM i is vulnerable to a heap buffer overflow vulnerability due to an unchecked memmove in Zlib CVE-2026-85091 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-85091 DESCRIPTION: zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow...