freeipa

FreeIPA Server FreeIPA allows Linux administrators to centrally manage identity, authentication and access control aspects of Linux and UNIX systems by providing simple to install and use command line and web based management tools. FreeIPA is built on top of well known Open Source components and...

cfgrip

cfgrip PE/ELF x86/x64 CFG extractor. Takes a binary in, disassembles it, resolves every jump and call GOT, jump tables, register tracing, and exports the full control flow graph as structured JSON. why You need to know exactly where every branch goes. Not for reading — for patching. Feed the JSON...

godoh

🕳 godoh A DNS-over-HTTPS Command & Control Proof of Concept introduction godoh is a proof of concept Command and Control framework, written in Golang, that uses DNS-over-HTTPS as a transport medium. Currently supported providers include Google, Cloudflare but also contains the ability to use...

witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ docker build ...

Echo's middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path

Summary When middleware.Static is mounted globally e.Usemiddleware.Static... and an application relies on a route- or group-level middleware guard to restrict a path that also falls under the served static root, a %2F-encoded request bypasses that guard while the file is still served. This is the...

anti-anti-automation

Anti-Anti-Automation Framework A framework for techniques to bypass common anti-automation security controls. Common Anti-Automation Controls Email Verification CAPTCHA SMS/Phone Credit Card WASC-21: Insufficient Anti-automation...

DeimosC2

DeimosC2 Deimos is in: DEPRECATED DeimosC2 is no longer maintained and has a known XSS vulnerability CVE-2025-26244. Thanks to JaRm222 for identifying the vuln and notifying us. His writeup of the vuln can be foundhere. DeimosC2 is a post-exploitation Command & Control C2 tool that leverages...

CVE-2026-54415-PoC

CVE-2026-54415 — Azuriom CMS Broken Access Control → Account Takeover Missing authorization on the admin server-management routes in Azuriom CMS This PoC is published for defensive and educational purposes against a patched version. Only run it against systems you own or are explicitly authorized...

SecurityNotFound

404 Page Not Found Webshell 📼 Clone me! Clone or download the project: git clone --depth=1 https://github.com/CosasDePuma/SecurityNotFound.git 📦 "Installation" The src/404.php file should be located on the target server and it must have the ability to execute .php files. Here is an example of som...

CVE-2025-25968

CVE-2025-25968: Improper Access Control vulnerability in DDSN Interactive cm3 Acora CMS version 10.1.1 DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive information, such as system administrator...

CVE-2022-24924

Improper access control vulnerability in LiveWallpaperService CVE-2022-24924SVE-2021-24089 Windows version tested: Windows 10 20H2 Build 19042.1348 64bit Live Wallpaper Version: 3.0.9.0 or earlier There is a LiveWallpaperService that works by default in Samsung laptops, but there was a...

Reverse_DNS_Shell

DNShell v1.7 Description: A Python Reverse Shell that uses DNS as the C2 channel. Requires: dnslib dnspython pycrypto Gotchyas: don't forget to change your HOST don't forget to change your SECRET key run server first Moar Info: http://lockboxx.blogspot.com/2015/01/python-reverse-dns-shell.html...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git git clone https://github.com/smythtech/sdnpwn Make...

EUVD-2026-112401

In deployments of WSO2 Identity Server configured with a case-insensitive user store and a case-sensitive database for identity data, mismatches in username case handling can occur. This inconsistency results in OAuth token revocation operations failing to correctly identify usernames containing...

CVE-2026-6647

The WSO2 Identity Server is vulnerable to incomplete OAuth token revocation due to a case mismatch between a case-insensitive user store and a case-sensitive database. When usernames contain mixed-case characters, revocation operations during certain lifecycle events may fail to identify the corr...

CVE-2026-6647 Incomplete OAuth Token Revocation via Case Mismatch in WSO2 Identity Server Allows Continued Access After Lifecycle Events

In deployments of WSO2 Identity Server configured with a case-insensitive user store and a case-sensitive database for identity data, mismatches in username case handling can occur. This inconsistency results in OAuth token revocation operations failing to correctly identify usernames containing...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

CVE-2025-65900

CVE-2025-65900: Kalmia CMS v0.2.0 - is vulnerable to Incorrect Access Control Vulnerability Overview CVE ID: CVE-2025-65900 Product: DifuseHQ Kalmia CMS Affected Version: 0.2.0 Vulnerability Type: Incorrect Access Control Privileges Required: Low Read-only user account Impact This vulnerability...

JitBit_Helpdesk_Auth_Bypass

This repository does not have a README...

CVE-2026-20127

🛡️ CVE-2026-20127 — Cisco Catalyst SD-WAN Authentication Bypass 📌 Overview CVE-2026-20127 is a critical authentication bypass vulnerability affecting Cisco Catalyst SD-WAN components, including controllers and management systems. A remote unauthenticated attacker can exploit improper authenticatio...