merlin

Merlin Merlin is a cross-platform post-exploitation Command & Control server and agent written in Go. Highlighted features: merlin-cli command line interface over gRPC to connect to the Merlin Server facilitating multi-user support Supported Agent C2 Protocols: http/1.1 clear-text, http/1.1 over...

CVE-2026-23744

CVE-2026-23744 MCPJam inspector Remote-Code-Execution: Proof Of Concept POC usage: python3 cve-2026-23744.py --target https:// --att-ip --att-p...

gitgalaxy

GitGalaxy Repository-scale structural intelligence without compilation. Docs · Visualizer · Language Crucible · Keyword Rosetta · Raw Output 1 scan · 97 structural signals · 50+ languages · no compilation · 17 risk-exposure categories · 6 outputs The short version GitGalaxy builds a...

AVideo3xploit

AVideo3xploit.go RCE exploit for AVideo root@kali: go get github.com/fatih/color root@kali: git clone https://github.com/ahussam/AVideo3xploit.git root@kali: cd AVideo3xploit root@kali:/AVideo3xploit go run AVideo3xploit.go http://target/avideo/ username password You should get a connection on yo...

cve-2026-85706

cve-2026-85706 Unauthenticated arbitrary local file read in GitLab CE/EE. Affects 18.7–19.1.7, 19.2.0–19.2.5, 19.3.0–19.3.1. Fixed in 19.1.8 / 19.2.6 / 19.3.2 2026-09-10. CVSS 10.0, reportedly exploited in the wild. Original report by s3ntago and this repo is just my writeup + PoC. disclaimer Thi...

Medusa

Medusa Medusa is a cross-platform agent compatible with both Python 3.8 and Python 2.7. Installation To install Medusa, you'll need Mythic v3 installed on a remote computer. You can find installation instructions for Mythic at the Mythic project page. From the Mythic install root, run the command...

ofrak

OFRAK OFRAK Open Firmware Reverse Analysis Konsole is a binary analysis and modification platform. OFRAK combines the ability to: Identify and Unpack many binary formats Analyze unpacked binaries with field-tested reverse engineering tools Modify and Repack binaries with powerful patching...

CVE-2024-25600-Bricks-Builder-plugin-for-WordPress

CVE-2024-25600 Exploit Tool 🚀 Description 📝 This tool 🛠️ is designed to exploit the CVE-2024-25600 vulnerability 🕳️ found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites 💻. The tool automates the exploitation...

jwt-key-id-injector

JWT Key ID Injector Simple python script to check against hypothetical JWT vulnerability. Let's say there is an application that uses JWT tokens signed HS256 algorithm. An example token looks like the follow:...

dradis-ce

Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...

Blackash-CVE-2025-54574

🛑 CVE-2025-54574 — Heap Buffer Overflow in Squid ≤ 6.3 🛑 Severity: Critical CVSS 9.3 Affected Software: Squid Proxy versions 6.3 and earlier Vulnerability Type: Heap-based buffer overflow Discovered in: URN Uniform Resource Name processing Impact: Possible remote code execution or denial-of-servi...

PENeL

PENeL - Powershell with Embedded .NET Library Program that prepares a .NET DLL Library to run embedded in Powershell Script Created By: Guilherme Bacellar Moralez Th3 0bservator https://twitter.com/th30bservator Disclaimer This code is created and maintened only for a research proposal. Please do...

CVE-2021-30657

CVE-2021-30657 A simple POC for CVE-2021-30657 affecting MacOS Vulnerability detail A vulnerability in syspolicyd allows specially crafted application bundle downloaded from internet to bypass foundational macOS security features such as File Quarantine, Gatekeeper, and Notarization. Armed with...

mcp-server-attestation

Part of theStudioMeyer MCP Stack — Built in Mallorca 🌴 · ⭐ if you use it mcp-server-attestation Layer-2 supply-chain hardening for Model Context Protocol servers. Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Direct response to: OX Security...

CVE-2023-26255-6

Jira plugin STAGIL Navigation FileName Parameter Arbitrary File Read Vulnerability POC Script Usage as follows: Single URL Detection 1. Use the command line to detect a single URL, pass the URL parameter with -U 2. Observe the returned result; if it shows "is vulnerable!", then the vulnerability...

Vba2Graph

Vba2Graph A tool for security researchers, who waste their time analyzing malicious Office macros. Generates a VBA call graph, with potential malicious keywords highlighted. Allows for quick analysis of malicous macros, and easy understanding of the execution flow. @MalwareCantFly Features Keywor...

not-a-mused

not-a-mused A proof-of-concept for a local Muse https://muse.ai vulnerability 0day that can let an unprivileged local process redirect Muse’s dictation traffic and abuse the trust/access granted to the app. What it demonstrates Muse exposes an undocumented setting: endovoyagerdictationendpoint A...

anubis-fetch

anubis-fetch $ nix run github:fzakaria/anubis-fetch -- --text https://lore.kernel.org/ A Go CLI for fetching URLs behind Anubis proof-of-work challenges. It solves legacy SHA-256 and WASM challenges in-process, with headless Chromium as a fallback. Sites such as lore.kernel.org and kernel.org use...

CVE-2020-8249

CVE-2020-8249: Buffer Overflow in Pulse Secure VPN Linux Client The root SUID executable pulsesvc, has a function “doupload” that unsafely calls a “sprintf” which can result in a buffer overflow. Because the “sprintf” writes the values on the stack, if a big enough string is passed to it, then it...

CVE-2023-40028

CVE-2023-40028 PoC Exploit Symlink Upload Vulnerability in Ghost CMS Leading to Arbitrary File Read POC Image Vulnerability Details CVE-2023-40028 is a vulnerability in Ghost CMS versions prior to 5.59.1 , where authenticated users can upload symbolic links symlinks that lead to arbitrary file...