CVE-2026-24061-POC

CVE-2026-24061 Vulnerable Lab ⚠️ WARNING : Intentionally vulnerable environment. Do NOT expose to untrusted networks. Overview Vulnerable GNU InetUtils telnetd v2.5 for testing CVE-2026-24061 - authentication bypass via argument injection. Quick Start Build sudo docker compose up -d Test...

SigDigger

SigDigger - The free digital signal analyzer SigDigger is a free digital signal analyzer for GNU/Linux and macOS, designed to extract information of unknown radio signals. It supports a variety of SDR devices through SoapySDR, and allows adjustable demodulation of FSK, PSK and ASK signals, decode...

bfac

BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...

mip22

mip22 mip22 v3.3 mip22 is a advanced phishing tool 83 default websites, clone any site with manual method, add any site with customize method, mask link with subdomains, url shortener, audio notice for view the credentials live, music in background etc... The program is made for educational...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

CVE-2025-43920

CVE-2025-43920: Command Injection via Email Subject in GNU Mailman 2.1.39 cPanel/WHM Bundle Discovered by: Firudin Davudzada & Musazada Aydan Disclosure Date: April 2025 CVE ID: CVE-2025-43920 Severity: 5.4 Medium CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Attack Type: Remote Affected Software:...

gdbgui

A browser-based frontend to gdb gnu debugger Documentation : https://gdbgui.com Source Code : https://github.com/cs01/gdbgui/...

lama

lama Lama, the application that does not mince words. Description Lama is a GNU Linux tool to generate a word list. The goal is to obtain a custom password dictionary to a particular target, whether physical or moral. It is therefore important that words in this list correspond to the target. Kee...

NodeGoat

NodeGoat Being lightweight, fast, and scalable, Node.js is becoming a widely adopted platform for developing web applications. This project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them. Getti...

Abyssal

🔥 Abyssal CVE-2026-24061 Telnet Vulnerability Scanner & Exploit From the depths, we rise. Multi-threaded, false-positive detection, interactive root shell on success. 👨‍💻 About the Author This project was built by an experienced IT professional with decades of hands-on work in network security,...

harbian-audit

harbian-audit Hardening Introduction Hardened Debian GNU/Linux and CentOS 8 distro auditing. The main test environment is in debian GNU/Linux 9/10/11/12/13 and CentOS 8 and ubuntu 22, and other versions are not fully tested. There are no implementations of desktop related items in this release. T...

CVE-2026-24061

CVE-2026-24061 GNU Inetutils telnetd Remote Authentication Bypass Seriously, telnet in 2026? Come on guys, it's time to move on. SSH exists since 1995. 🤦 Description A critical authentication bypass vulnerability in GNU Inetutils telnetd affecting versions 1.9.3 through 2.7. The vulnerability...

reverse-shell

reverse-shell Reverse Shell as a Service - https://reverse-shell.sh Easy to remember reverse shell that should work on most Unix-like systems. Detects available software on the target and runs an appropriate payload. Usage 1. Listen for connection On your machine, open up a port and listen on it...

Ashwesker-CVE-2026-24061

🚨 CVE-2026-24061 : Critical Remote Authentication Bypass in GNU InetUtils telnetd 🧠 Overview CVE-2026-24061 is a critical vulnerability affecting the telnetd service in GNU InetUtils. It allows an unauthenticated remote attacker to log in as root by exploiting improper handling of environment...

samplicator

UDP Samplicator This small program receives UDP datagrams on a given port, and resends those datagrams to a specified set of receivers. In addition, a sampling divisor N may be specified individually for each receiver, which will then only receive one in N of the received packets. DOWNLOADING Thi...

CVE-2026-24061_Lab

CVE-2026-24061 Telnetd Lab This repository contains a simple Docker lab to demonstrate the CVE-2026-24061 vulnerability. It allows authentication bypass and root access on GNU telnetd, on Linux. The purpose is exclusively educational. Requirements Docker installed Telnet Client installed Building...

CVE-2026-24061

CVE-2026-24061 GNU inetutils-telnetd - Remote Authentication Bypass A security research tool for exploiting CVE-2026-24061, a critical remote authentication bypass vulnerability in GNU inetutils-telnetd that allows instant root shell access without authentication. Table of Contents Vulnerability...

CVE-2026-24061-Scanner

CVE-2026-24061 Scanner: GNU Inetutils Telnet Exploit Checker CVE-2026-24061 Scanner is a Bash Script-based tool for performing detection reconnaissance and active verification active exploitation check of the Authentication Bypass vulnerability in the telnetd service of the GNU Inetutils package...

rdesktop

IMPORTANT: rdesktop is no longer maintained Please, beware that this project is no longer maintained and hadn't received a patch in many years. There are reported security vulnerabilities, yet those haven't been reviewed. Use with caution and use it at your own risk. rdesktop - A Remote Desktop...

objdump-Out-Of-Bounds-write

GNU Binutils objdump — OOB Write → FSOP → Arbitrary Code Execution Target: GNU Binutils all versions through HEAD — objdump Environment: Debian 13 Trixie, glibc 2.41, x8664 Impact: Arbitrary code execution Vector: Crafted ELF file processed by objdump -g ASLR: Bypassed deterministic mmap delta...