waf-detector

WAF Detector CLI tool for detecting, testing, and profiling Web Application Firewalls WAFs and Content Delivery Networks CDNs. Important: Only test systems you own or have explicit authorization to test. For AI coding agents: See AGENTS.md for skill mapping and workflow pointers. Use...

CVE-2026-35031

CVE-2026-35031: Jellyfin Subtitle Upload Path Traversal to RCE -darkred?style=flat-square -orange?style=flat-square TL;DR A critical path traversal vulnerability in Jellyfin Media Server allows authenticated users with "Upload Subtitles" permission to upload files to arbitrary locations on disk. ...

CVE-2026-41940

CVE-2026-41940 - cPanel/WHM Auth Bypass Scanner & Exploit Tool cPanel/WHM Authentication Bypass Scanner & Exploit Tool for CVE-2026-41940 ⚠️ Disclaimer This tool is provided for educational purposes and authorized security testing only. By using this tool, you agree that: You will only test system...

CVE-2025-15276-poc

CVE-2025-15276: FontForge SFD PickledData Insecure Deserialization RCE Disclaimer This Proof of Concept PoC is for educational purposes and security auditing only. The author is not responsible for any misuse of this information. Unauthorized access to computer systems is illegal. Always obtain...

NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule PoC Derivation Process and Thoughts Scope: Only for local ranges, authorized reproduction environments, vulnerability verification, and protection rule analysis. Do not use against unauthorized targets. The PoC ideas in this document only verify remotely...

CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC

CVE-2025-47812 — Wing FTP Server Unauthenticated remote code execution vulnerability in Wing FTP Server whoami root References CVE-2025-47812 W...

Argus

Argus Security Intelligence Framework Argus is a multi-p...

Azure

Azure Offensive Security Toolkit A collection of Bash and PowerShell scripts for Azure security assessments, covering IAM privilege escalation, container security, Key Vault exposure, Entra ID configuration, and more. Designed to run in Azure Cloud Shell or any authenticated terminal. Scripts IAM...

CVE-2025-2304-Camaleon-CMS-Mass-Assignment-Privilege-Escalation-PoC

CVE-2025-2304 — Camaleon CMS Mass Assignment Privilege Escalation PoC Privilege escalation vulnerability in Camaleon CMS /updatedajax with passwordrole=admin injected into the password parameters. 4. Verifies the role has been updated to admin. Requirements Python 3 Install dependencies: python3 ...

disrobe

Disrobe Disrobe is a static decompiler, deobfuscator, and unpacker. It strips packing and obfuscation from compiled software one layer at a time and recovers the source code or the original bytes underneath. Give disrobe auto an executable, an app package, a script, or a firmware image. It names...

CVE-2025-12101-Scanner-PoC

CVE-2025-12101 Scanner Multi-threaded vulnerability scanner for CVE-2025-12101 - Citrix NetScaler XSS via SAML RelayState. Overview CVE-2025-12101 is a reflected XSS vulnerability in Citrix NetScaler ADC and Gateway products affecting the /cgi/logout endpoint through the RelayState parameter. CVS...

ubuntils

ubuntils Forensic triage for live Ubuntu systems — automated artifact collection, persistence detection, and guided remediation in about a minute. The Problem When you suspect a Linux system is compromised, the first 30-40 minutes are usually spent running the same ten commands in sequence: check...

cnspec

cnspec Open source, cloud-native security and policy project cnspec assesses your entire infrastructure's security and compliance. It finds vulnerabilities and misconfigurations across public and private cloud environments, Kubernetes clusters, containers, container registries, servers, endpoints...

Hexestra

Orchestrate your pentest. An AI-native penetration testing workbench where you and AI agents work together to accelerate your pentest workflow. Download · Watch the demo · Get started · Discord English · 简体中文 Why Hexestra? Hexestra aims to make penetration testing smoother for you and your agent...

flipper-mcp

flipper-mcp A Rust MCP Model Context Protocol server that runs directly on the Flipper Zero's WiFi Dev Board v1 ESP32-S2, enabling AI agents to control a Flipper Zero over the network. What is this? This project puts an MCP server on the Flipper itself. Any MCP-compatible AI client Claude Desktop...

azure-pentesting-suite

azure-pentesting-suite azpt 🚧 Public beta. azpt is under active development — commands, flags, and output formats may still change between releases. Bug reports and feedback are welcome via GitHub issues. azpt is a Go toolkit for authorized Azure security assessments. It works from two...

SmuggleMyPayload

SmuggleMyPayload SmuggleMyPayload is an HTML Smuggling toolkit for generating HTML pages that embed and reconstruct files using JavaScript. It provides multiple HTML Smuggling methods, payload encoding options, JavaScript variations, and several built-in HTML templates. Features Multiple HTML...

CVE-2026-68571

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Kylin. Special parameter in JDBC URL can lead to code injection. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted...

CVE-2025-6563

MikroTik Hotspot Login Page Reflected XSS Vulnerability Advisory Overview A reflected Cross-Site Scripting XSS vulnerability was discovered in the MikroTik RouterOS Hotspot login page. The vulnerability is triggered via the dst URL parameter, which improperly sanitizes input, allowing malicious...

PoC-CVE-2025-69421

CVE-2025-69421 crash-only reproducer This repository contains a minimal malformed PKCS12 file that reproduces CVE-2025-69421 in an isolated laboratory environment. The generated PFX contains EncryptedData whose EncryptedContentInfo omits the optional encryptedContent field. Vulnerable OpenSSL...