CVE-2026-61738

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, POST /api/scoutsuite/generate-gcp-report in backend/app/integrations/scoutsuite/routes/scoutsuite.py admits admin and analyst users and validates the uploaded content as...

CVE-2026-61708

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, POST /api/agentdatastore/upload in backend/app/datastore/datastoreroutes.py permits customeruser callers to choose bucketname and objectname without an allowlist, tenant prefix...

crackle

crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...

CVE-2025-55182

Affected Versions Component| Recommended Version for Reproduction| Vulnerable Version Range ---|---|--- Node.js| = 20.9.0| 20.9.0 LTS and above Next.js| 15.0.0| 15.x, 16.x App Router React Core| 19.0.0 or 19.2.0| 19.0.0 to 19.2.0 RSC Bundler| react-server-dom-webpack| 19.0.0 to 19.2.0 Build and...

Weblogic

English｜ 中文 Research topic on WebLogic vulnerabilities Weblogic CVE-2023-21931 vulnerability exploration technique: post-deserialization exploitation Abstract：In recent years, Weblogic deserialization vulnerabilities have been discovered and focused on the triggering point of deserialization...

container-cve-2021-22555

Reproducer for CVE-2021-22555 as a container First, this rolls in the exploit code from here as a handy pre-built container: https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555 Pre-built container: quay.io/cgwalters/cve-2021-22555 Mitigation: seccomp profiles A stron...

pfsense-api-acme-key-dump

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-acme-key-dump pfsense-api-acme-key-dump Class: Privilege leftover Reach: Remote pfSense Plus Nexus Multi-instance Management OpenAPI toolkit b4acd7ca - Netgate GET /services/acme GetACMEConfig returns...

evil-twin-ap

Evil Twin Access Point Toolkit A complete, modular, and reproducible evil twin access point setup for defensive security testing, penetration testing, and wireless security research. ⚠️ Legal Disclaimer FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY This tool is provided for: Educational...

IntelligentProcessLifecycle

IntelligentProcessLifecycle The Intelligent Process Lifecycle of Active Cyber Defenders Description This github hosts the poster related files of false positive and error categories in security operation services. The goal is to define an open source reporting standard for Security Operation Cent...

NyxInvoke

NyxInvoke NyxInvoke is a versatile Rust-based tool designed for executing .NET assemblies, PowerShell commands/scripts, Beacon Object Files BOFs and PE files with built-in Ntdll Unhooking, patchless AMSI and ETW bypass capabilities. It can be compiled as either a standalone executable or a DLL...

APTS

What is OWASP APTS? A governance standard for autonomous penetration testing platforms. It defines what these systems must do to operate safely, transparently, and within defined boundaries, whether they are delivered by vendors, operated as a service, or built in-house by enterprise security tea...

Pyrit

Please Read Pyrit is old, is outdated and it's still Python2 I am currently attempting to rewrite it from scratch, so thanks for all the stars but remember to keep an eye for Python3 version. Pyrit Pyrit allows you to create massive databases of pre-computed WPA/WPA2-PSK authentication phase in a...

grove

Grove is a Software as a Service SaaS log collection framework, designed to support collection of logs from services which do not natively support log streaming. Grove enables teams to collect security related events from their vendors in a reliable and consistent way. This data may then be store...

ASC

Droid ASC: R8 Compiler Optimization as a DeCompiler Primitive Rust version: This project has been rewritten 1:1 in Rust as rustASC. The Rust version is 10× faster and supports full APK decompilation: with 16 threads, it decompiles a 383 MB APK in just 4 seconds. If your workflow is written in...

Macrome

Macrome An Excel Macro Document Reader/Writer for Red Teamers & Analysts. Blog posts describing what this tool actually does can be found here and here. Installation / Building Clone or download this repository, the tool can then be executed using dotnet - for example: dotnet run -- build...

proxychains

ProxyChains ver. 4.3.0 README ProxyChains is a UNIX program, that hooks network-related libc functions in dynamically linked programs via a preloaded DLL and redirects the connections through SOCKS4a/5 or HTTP proxies. WARNING: this program works only on dynamically linked programs. also both...

community-id-spec

Community ID Flow Hashing When processing flow data from a variety of monitoring applications such as Zeek and Suricata, it's often desirable to pivot quickly from one dataset to another. While the required flow tuple information is usually present in the datasets, the details of such "joins" can...

ai-ublock-blacklist

AI uBlock Origin Blacklist A personal list for uBlock Origin blocking AI content farms. Pull requests welcome. Install You can click here to subscribe to this list automatically. This link works only if you have uBlock Origin installed. Alternatively, import the following URL as a 3rd party list ...

CVE-2019-25485

🐞 CVE-2019-25485: R 3.4.4 - Stack-Based Buffer Overflow x86 and x64 Stack-based buffer overflow in R 3.4.4. Full exploitation on x86, but only RIP control with gadget analysis on x64 due to program constraints. The same vulnerability across two architectures, leading to different exploitation...

CS-Remote-OPs-BOF

Remote Operations BOF This repo serves as an addition to our previously released SA repo. Our original stance was that we would not release our tooling that modified other systems, and we would only provide information gathering tooling in a ready to go format. Over time, we have seen many other...