SyncShield

🔐 SyncShield — Browser Extension for CVE-2018-5764 Detection Detect unsafe Rsync commands before they become exploits A lightweight, privacy-focused browser extension developed as part of Final Year Project NWS/129/23B to detect missing --protect-args flag in Rsync commands — preventing remote...

Compose Aperisite

AperiSite Requirements Docker; Docker Compose; Less time to prepare environment, more time to compose. Download git clone https://gitlab.com/AperiKube/compose-aperisite aperisite pushd aperisite/ git submodule update --init --recursive git submodule foreach --recursive git checkout master Prepare...

CVE-2024-7591-PoC

CVE-2024-7591-PoC These PoC python scripts test the Kemp LoadMaster for remote code execution. THIS TOOL IS INTENDED FOR TESTING PURPOSES ONLY These scripts were based on Marius Walter's writeup on the specifics of this exploit. You can read their post at:...

vulnerability-remediation-cve-2013-3900

🛡️ Remediation of CVE-2013-3900: WinVerifyTrust Signature Validation 📝 Project Overview This project demonstrates a real-world Vulnerability Management Workflow. Using an Azure VM, I hunted down a high-severity signature validation flaw, confirmed it manually via PowerShell, and deployed a...

Ni8mare

🔒 Ni8mare Scanner Ethical Security Scanner for CVE-2026-21858 Ni8mare Vulnerability "Knowledge is power, but only if shared responsibly." Comprehensive vulnerability detection tool for n8n workflow automation instances. Detects the critical CVE-2026-21858 vulnerability CVSS 10.0 without performin...

CVE-Requests-1896609

CVE Requests 1896609 - feiskyer/mcp-kubernetes-server Executive Summary This report details two critical security vulnerabilities discovered in the feiskyer/mcp-kubernetes-server package. When deployed, the server exposes an MCP tool named kubectl which is intended to provide limited, safe access...

kube-beacon

Kube-Beacon Project Scan your kubernetes runtime !! Kube-Beacon is an open source audit scanner who perform audit check on a deployed kubernetes cluster and output a security report. The audit tests are the full implementation of CIS Kubernetes Benchmark specification NEW !! audit result now can ...

htb-ctf-walkthroughs

HTB CTF Walkthroughs Documented solutions for HackTheBox machines. Each walkthrough covers enumeration → exploitation → privilege escalation with commands, screenshots, and technical analysis. Structure htb-ctf-/ ├── index.md Full walkthrough └── media/ Screenshots and supporting files Methodolog...

CVE-2025-30065

💥 CVE-2025-30065 - Parquet Deserialization PoC This project demonstrates a safe proof-of-concept for CVE-2025-30065 using Apache Parquet and Java deserialization. When a Parquet file containing a serialized Java object is read, the payload executes a visible command to prove code execution. 📦 Usa...

CVE-2023-25690-POC

CVE 2023 25690 - Proof of Concept Published: 7 March 2023 Base score| Confidentiality| Integrity impact| Availability impact ---|---|---|--- 9.8| High| High| High Table of contents Advisory Description Vulnerable Apache Configuration Breakdown Data Flow Lab Setup HTTP Request Splitting causing HT...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...

theZoo

theZoo - A Live Malware Repository theZoo is a project created to make the possibility of malware analysis open and available to the public. Since we have found out that almost all versions of malware are very hard to come by in a way which will allow analysis, we have decided to gather all of th...

cve-2023-22515-1

🛡️ CVE-2023-22515: In-Depth Analysis of Confluence Privilege Escalation Vulnerability !IMPORTANT Urgent Security Alert : This vulnerability has a CVSS score of 10.0 Critical , the highest risk level. If you are using an affected version, immediate patching is required. 1. Overview CVE-2023-22515...

CVE-2024-38856_Scanner

CVE-2024-38856 For Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your responsibility. CVE-2024-38856: Apache OFBiz remote code execution Scanner & Exploit The CVE Analysis: https://blog.securelayer7.net/cve-2024-38856-apache-ofbiz-rce This issue affects Apache...

CAPEv2

CAPE: Malware Configuration And Payload Extraction - Documentation CAPE is a malware sandbox. A sandbox is used to execute malicious files in an isolated environment whilst instrumenting their dynamic behaviour and collecting forensic artefacts. CAPE was derived from Cuckoo v1 which features the...

CVE-2025-47227_CVE-2025-47228

ScriptCase - Pre-Authenticated Remote Command Execution Chaining administrator's password reset authentication bypass, CVE-2025-47227 and shell injection authenticated remote command execution, CVE-2025-47228 Pre-authenticated remote command execution is achieved by chaining two vulnerabilities:...

CVE-2024-22026

CVE-2024-22026 Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core" CVE-2024-22026 is a local privilege escalation vulnerability in Ivanti EPMM formerly MobileIron server versions prior to 12.1.0.0, 12.0.0.0, and 11.12.0.1. This vulnerability allows a local attacker to gain root...

node9-proxy

🛡️ node9 Access control for AI agents Your AI agents can reach Slack, GitHub, email, and your database. node9 decides what they may do with each one. Credential jail · secrets and PII · destructive git, SQL and shell held for review · MCP tool pinning · network egress allowlist · loop breaker · on...

simvyn

simvyn Universal mobile devtool — control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI Table of Contents Quick Start Installation AI Coding Agents Features Module Showcases Collections Guide CLI Reference How It Works Supported Platforms Contributing Securit...

citrix-netscaler-memory-leak

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install citrix-netscaler-memory-leak Run bellow command to check citrix-netscaler-memory-leak -h Configurations 2. We integrated with t...