Zerodapi

Zerodai Documentation Start! pip install zerodai==0.0.0.20 export zerodapikey="YOURAPIKEY" Get your api key https://zerodai.com Simple Conversational Chat - No memory from zerodai import zerodai import os zerodai.apiauthos.getenv"zerodapikey" messages = while True: prompt = input" " if prompt ==...

CVE-2024-32019-ndsudo

The ndsudo vulnerability allows an attacker to gain root permissions by exploiting an untrusted search path in the ndsudo tool, which is part of the Netdata Agent. This can enable the execution of arbitrary programs with elevated privileges if the attacker places a malicious binary in a writable...

gatekeeper-cve-2020-8554

Gatekeeper constraint for CVE-2020-8554 Install OPA client Follow the instructions. Run unit tests $ opa test --ignore=.yaml ./policies verbose output $ opa test -v --explain=full --format=pretty --ignore=.yaml ./policies...

Agent-Skills-Security-Standard

This repository does not have a README...

EIPP

EIPP Banned Password Lists Tools for manipulating Banned Password Lists BPL of Entra ID Password Protection. The eipp-global-bpl.txt containing the entries of the global banned password list was dumped on 2024-04-11. More info at...

php-8.1.0-dev-backdoor-rce

PHP 8.1.0-dev Backdoor Remote Code Execution PHP 8.1.0-dev Backdoor System Shell Script PHP verion 8.1.0-dev was released with a backdoor on March 28th 2021, but the backdoor was quickly discovered and removed. If this version of PHP runs on a server, an attacker can execute arbitrary code by...

skill-safety-bench

SkillSafetyBench SkillSafetyBench is a fully materialized benchmark for evaluating safety failures caused by attacks on skill-facing context. Each case keeps the user-facing task ordinary, while the attack is placed in local skills, helper scripts, sidecar files, corpora, templates, or other...

CVE-2024-32019-Netdata-ndsudo-PATH-Vulnerability-Privilege-Escalation

🚨 CVE-2024-32019 - Netdata ndsudo PATH Vulnerability Exploit LPE to Root A Python-based exploit for CVE-2024-32019 , a high-severity Local Privilege Escalation vulnerability in the Netdata Agent , leveraging a misconfigured SUID binary ndsudo that fails to securely handle the PATH environment...

CVE-2026-61791

OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to 1.2.1, Html::commandButton in lib/Html.class.php embeds an action URL containing a stored computer hostname into a JavaScript string in an inline onclick...

gospider

GoSpider GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? this project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine Installation GO install GO111MODULE=on go install github.com/jaeles-project/gospider@latest Docker...

EUVD-2026-108209

OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to 1.2.1, Html::commandButton in lib/Html.class.php embeds an action URL containing a stored computer hostname into a JavaScript string in an inline onclick...

CVE-2026-61791 OCO-Server: Stored XSS through agent hostnames in command buttons

OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to 1.2.1, Html::commandButton in lib/Html.class.php embeds an action URL containing a stored computer hostname into a JavaScript string in an inline onclick...

CVE-2026-61791

Versions of OCO-Server prior to 1.2.1 are vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The Html::commandButton() function in lib/Html.class.php incorrectly handles stored computer hostnames by using htmlspecialchars(ENT_QUOTES) for HTML escaping only. Because browsers decode HTML entit...

OpsGuard-simulation

OpsGuard - Simulation Dashboard 🖥️ This is the Frontend UI for OpsGuard. It serves as a visual "Brain" to demonstrate the autonomous SRE agent in action. Since OpsGuard is a backend-first agent, this dashboard is designed to simulate a production environment and visualize the agent's invisible...

CVE-2025-4660

Description A PoC for CVE-2025-4660, Forescout SecureConnector RCE forescoutredirect.py This is the exploit itself where you can redirect an agent to a specific IP address under the attackers control forescoutc2.py A simple C2 implementation that speaks the ForeScout SecureConnector language...

Fenrir

Fenrir Simple Bash IOC Scanner Fenrir is a simple IOC scanner bash script. It allows scanning Linux/Unix/OSX systems for the following Indicators of Compromise IOCs: Hashes MD5, SHA1 and SHA256 using md5sum, sha1sum, sha -a 256 File Names string - checked for substring of the full path, e.g...

agent-scanning

Control your AI agents. Track costs. Stay compliant. open-souce What It Does One dashboard to manage your AI team. Feature| How It Helps ---|--- Connect your agents| Plug in OpenAI, Anthropic, or custom agents Set goals & budgets| Assign work, cap costs, define success Watch in real-time| See wha...

CVE-2024-43044-POC

Usage Download the JAR package via http://ip:port/jnlpJars/agent.jar Modify the corresponding code in \hudson\remoting\RemoteClassLoader.class Recompile and repackage Need to know the node's secret and name in advance java -jar agent.jar -url http://ip:port/ -secret -name Add the following conten...

pidrila

PIDRILA Current Release: v0.1.0 2020.11.08 Overview PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer is really fast async web path scanner prototype developed by BrightSearch team for all ethical netstalkers. Installation & Usage git clone...

Agent-Tesla-APC-Injection-Token-Manipulation-Registry-Persistence-Analysis

1. Native API & APC Injection The x64dbg memory dump reveals that Agent Tesla uses Native API NT API calls for low-level operations, including APC Asynchronous Procedure Call injection. Key Functions Observed: NtQueueApcThread – Injects code into a target thread via APC. NtReadVirtualMemory –...