VulnFanatic-NG

VulnFanatic-NG LLM-assisted vulnerability research for Binary Ninja. VulnFanatic-NG adds a sidebar panel that scans the current binary and asks an LLM — a locally hosted OpenAI-compatible model by default, or Anthropic Claude, Google Gemini, or Azure OpenAI see LLM backends — to judge whether...

HERCULES

HERCULES HERCULES is a customizable payload generator that can bypass antivirus software. VERSION 3.0.5 INSTALLATION SUPPORTED PLATFORMS: Operative system | Version ---|--- Ubuntu | 16.04 / 15.10 Kali linux | Rolling / Sana Manjaro | Arch Linux | Black Arch | Parrot OS | 3.1 go get...

cpanel-sessionscribe

SessionScribe - CVE-2026-41940 Critical unauthenticated RCE in cPanel & WHM. Four HTTP requests forge a root session via CRLF injection into the password field of a preauth session. No auth, no preconditions, every supported tier affected. Disclosed 2026-04-28 by Sina Kheirkhah / watchTowr Labs...

CVE-2026-25243

CVE-2026-25243 — Redis RESTORE zipmap double-free → remote code execution TL;DR. A malformed DUMP payload passed to RESTORE triggers a heap double-free in Redis's legacy hash-zipmap loader. Under default jemalloc the double-free is silent the server keeps running, which turns it into a controllab...

synaptic-sentinel

SYNAPTIC Sentinel The vibe-coding security sentinel. An Apache-2.0 agentic security toolkit for projects where most of the code is written by AI. Five deterministic scouts catch the syntactic problems; a Brain Layer BYOK Anthropic decides what really matters and how to fix it — all inside the IDE...

MOEW

Invisible Threats, Visible Solutions. Misaligned Opcode Exception Waterfall MOEW 3‑Stage SEH Waterfall PoC Benign, x86/Wow64 TL;DR: This PoC demonstrates a 3‑stage Structured Exception Handling SEH cascade caused by deliberate misaligned execution into raw byte blobs whose first valid instruction...

nftables-oob-read-write-exploit-CVE-2023-35001-

nftables oob read/write exploit CVE-2023-35001 Exploit used at pwn2own Vancouver 2023 on Ubuntu desktop. The exploit supports the kernel version available at the beginning of the event 5.19.0-35. Requirements C compiler Go compiler Usage Build $ make Run $ ./exploit This produces a lpe.zip file...

CANalyzat0r

This software project is a result of a Bachelor's thesis created atSCHUTZWERK in collaboration with Aalen University by Philipp Schmied @CaptnBanana. Please refer to the correspondingblog post for more information. Why another CAN tool? Built from scratch with new ideas for analysis mechanisms...

otto-support

Otto Support Customer support MCP server for AI coding assistants. One Go binary, tiered authentication, 19 tools across 4 role levels. Built with mcp-go. Quick Start Option A: Docker container recommended Run everything in an isolated container. Claude Code is pre-installed and the MCP server...

WantasticCore

Wantastic A self-hosted WireGuard mesh with a browser admin portal, all in one container. Try the demo → · Join Discord → Why Wantastic The overlay-VPN space is crowded — Tailscale, Headscale, NetBird, wg-easy. They all stop at "your devices can reach each other." Wantastic keeps going. 1. You...

cve-2019-5736-exp

cve-2019-5736-exp This is a proof-of-concept PoC exploit for the CVE-2019-5736 vulnerability in runc, the runtime used in Docker. Disclaimer I undertook this project as an exercise, for educational reasons and for fun. It should go without saying that I do not support unethical and/or illegal...

orb

Orb — Zero-Trust Folder Tunneling Tool Orb is a secure, terminal-first utility that allows you to share a local folder across the internet using end-to-end encryption. No accounts, no cloud storage, no port forwarding required. Demo Sharing a Folder Share a folder with a single command - encrypte...

wiremax

wiremax A Wireshark/tshark dissector for Ubiquiti AirMAX AC + M and the companion Mikrotik / RouterBoard vendor Information Elements, written in Lua. It is the over-the-wire counterpart to pyrmax: the decode logic mirrors that Python package field-for-field. The AC packet format was...

LazySign

LazySign Create fake certs for binaries using windows binaries and the power of bat files Over the years, several cool tools have been released that are capeable of stealing or forging fake signatures for binary files. All of these tools however, have additional dependencies which require...

cve-bench

CVE-Bench A benchmark for evaluating LLM agents on fixing real-world security vulnerabilities. Agents run inside sandboxed Docker containers and are scored against the maintainer's security test suite. Requirements Python 3.12+ Docker OPENAIAPIKEY, ANTHROPICAPIKEY, and/or POOLSIDEAPIKEY in your...

Angora

Angora Angora is a mutation-based coverage guided fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution. Published Work Arxiv: Angora: Efficient Fuzzing by Principled Search, S&P 2018. Building Angora Build Requirements Linux-amd64...

sandfly-entropyscan

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...

CVE-2025-27591

CVE-2025-27591 – Privilege Escalation via Symlink Abuse in below 🛑 Disclaimer : This exploit is provided for educational and authorized security testing only. Unauthorized use may be illegal. 🧠 Overview below is a performance monitoring tool developed by Facebook for Linux systems. Versions of...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

LinEnum

LinEnum For more information visit www.rebootuser.com Note: Export functionality is currently in the experimental stage. General usage: version 0.982 Example: ./LinEnum.sh -s -k keyword -r report -e /tmp/ -t OPTIONS: -k Enter keyword -e Enter export location -t Include thorough lengthy tests -s...