wardgate

Wardgate - AI Agent Security Gateway Wardgate is a security gateway that sits between AI agents and the outside world -- isolating credentials for API calls, isolating SSH keys for remote command execution, and gating command execution in remote environments conclaves. Give your AI agents access ...

ActiveReign

ActiveReign ⚠️ Thank you for your support. This project is no longer publicly maintained. Background A while back I was challenged to write a discovery tool with Python3 that could automate the process of finding sensitive information on network file shares. After writing the entire tool with...

CVE-2018-1002105

CMPT733-Group110x90 CVE-2018-1002105 Members : Abhishek Rungta, Shubham Saini, Siddhant Sood Environment Setup A linux VM Such as Ubuntu 20.04 Minikube for local deploymnet of kubernetes Any of these older versions1.0.x— 1.9.x, 1.10.0—1.10.10,1.11.0—1.11.4,1.12.0—1.12.2 Run the exploit We have...

morf

MORF Mobile Reconnaissance Framework A powerful offensive security toolkit for mobile application analysis Find Secrets. Protect Apps. Stay Secure. 📋 Table of Contents 💡 Overview 🚀 Quick Start 🔍 Key Features 🏗️ Architecture 📋 Common Use Cases 📦 Installation Prerequisites Method 1: Docker...

mitos

Mitos Isolated, forkable computers for your AI agents. Millisecond microVM sandbox forking on Kubernetes: fork a running VM into parallel attempts and restore from memory in tens of milliseconds. Quickstart . Documentation . Features . Comparison . Contributing . Community What is Mitos Mitos giv...

ipatool

IPATool ipatool is a command line tool that allows you to search for iOS, iPadOS, tvOS, and visionOS apps on the App Store and download a copy of the app package, known as an ipa file. Requirements Installation Manual Package Manager macOS Usage Compiling License Releases FAQ Requirements Support...

CVE-2017-7269

EN GenWebDavIISExploit is a PoC tool demonstrating an exploit for a known vulnerability in the WebDAV component of IIS6. This tool is designed for educational and research purposes to showcase how the vulnerability can be leveraged to execute arbitrary code on a remote server. Disclaimer This...

hackviser_labs_CVE-2015-3306

hackviserlabsCVE-2015-3306 This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab. run it using the following command: python3 exploit.py replace with the address you got from starting the lab on the hackviser platform...

AgentWard

AgentWard · 玄甲OS AgentWard 玄甲 is a full-stack security operating system purpose-built for trustworthy, scalable AI agent deployment, with native code adaptation to OpenClaw. AgentWard unifies agent onboarding, secure reasoning, and trusted execution in one cohesive security architecture, with...

hpfeeds

hpfeeds About hpfeeds is a lightweight authenticated publish-subscribe protocol. It has a simple wire-format so that everyone is able to subscribe to the feeds with their favorite language in almost no time. Different feeds are separated by channels and support arbitrary binary payloads. This mea...

cve-2019-14514

CVEID : CVE-2019-14514 Name of the affected products and versions : Microvirt MEmu all versions prior to 7.0.2 Problem type : CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' Summary MEmu is an Android emulator for Windows. During our tests, we have...

huntglyph

huntglyph — Detect homograph attacks Homograph attacks leverage the visual similarity of characters from different writing systems e.g., Latin 'a' vs. Cyrillic 'а' to spoof domain names, filenames, or other identifiers, tricking users into believing they are interacting with a legitimate source...

gxdlmsdirector-cve

Multiple vulnerabilities in Gurux GXDLMS Director – remote code execution Gurux GXDLMS Director is an open-source Windows program for interacting with energy meters through the use of DLMS/COSEM protocol. The software has a remote update functionality for add-in DLLs as well as for files containi...

rewerse-engineering

rewerse engineering This repository aims to implement all publicly accessible unauthenticated API endpoints used by the Rewe app for querying current discounts, products, recipes and recalls. Current supported APK version: 5.15.2 as of 12.07.26 !CAUTION The certificates required for talking to th...

CVE-2025-2825

CVE-2025-2825/CVE-2025-31161 Introduction This document presents a security analysis of vulnerability CVE-2025-2825 affecting the server component of CrushFTP — a commercial solution for file transfer and storage FTP, SFTP, HTTP/S, S3-like interfaces, etc.. The defect is classified as an...

username-anarchy

Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...

cve-2019-14220

Summary An unprotected method in a bstutils service in BlueStacks 4.120 and below on Mac and 4.110 and below on Winodws allows a local attacker to read the contents of arbitrary files with system privileges. Description BlueStacks is an Android emulator available for Windows and Mac systems. It...

CVE-2007-2447

CVE-2007-2447 PoC: Samba "usermap script" remote command-execution historical CVE. This repository contains a small proof-of-concept script for research and educational review. The primary script is usermapscriptCommandExecution.py. Reference writeup:...

CVE-2023-32315-POC

CVE-2023-32315-POC CVE-2023-32315-Openfire-Bypass-Py Overview This code is a Python version POC for CVE-2023-32315. It performs a series of operations to verify whether the target website is affected by the CVE-2023-32315 vulnerability and attempts to execute certain operations on the affected...

yaralyzer

THE YARALYZER Visually inspect all of the regex matches and their sexier, more cloak and dagger cousins, the YARA matches found in binary data and/or text. See what happens when you force various character encodings upon those matched bytes. With colors. Quick Start root@kitploit: pipx install...