redamon

Unmask the hidden before the world does An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merge...

Letta-CVE-2025-51482-RCE

Letta-CVE-2025-51482-RCE Vulnerability Cause Analysis 1. Lack of Code Security Inspection Problem: The system does not perform any security inspection on user-provided source code. Evidence: generateexecutionscript method directly inserts user code into the execution script: code += "\n" +...

kube-monkey

kube-monkey kube-monkey is an implementation of Netflix's Chaos Monkey for Kubernetes clusters. It randomly deletes pods in the cluster, encouraging and validating the development of failure-resilient services. Apps opt in with a label, terminations happen during the hours and days you pick, and...

polypyus

Polypyus Firmware Historian Polypyus learns to locate functions in raw binaries by extracting known functions from similar binaries. Thus, it is a firmware historian. Polypyus works without disassembling these binaries, which is an advantage for binaries that are complex to disassemble and where...

CVE-2026-24061

Docker Telnet Auto-Login Lab A lightweight Docker lab for experimenting with Telnet protocol negotiation , explained in the CVE-2026-24061 exploit, which contains automatic username injection using the NEW-ENVIRON option. This project creates an isolated client–server environment to study how...

CVE-2026-34197-payload-Apache-ActiveMQ-

ActiveMQ Jolokia RCE Vulnerability Reproduction Guide This repository provides a remote code execution RCE vulnerability reproduction environment and exploitation script based on the exposed Jolokia API endpoint /api/jolokia/ of Apache ActiveMQ. By invoking the addNetworkConnector operation, it...

CVE-2025-34100-demo

CVE-2025-34100-demo Demo web server !NOTE Please note that this is just the PHP files for the website, to understand the CVE better and create a more effective PoC, visit https://nvd.nist.gov/vuln/detail/CVE-2025-34100 These files will not cause the CVE, but rather are the entry point to exploit...

PoW-Shield

Description PoW Shield provides DDoS protection on OSI application layer by acting as a proxy that utilizes proof of work between the backend service and the end user. This project aims to provide an alternative to general anti-DDoS methods such as Google's ReCaptcha that has always been a pain t...

HostHunter

HostHunter v2.0 A tool to efficiently discover and extract hostnames providing a large set of target IPv4 or IPv6 addresses. HostHunter utilises simple OSINT and active reconaissance techniques to map IP targets with virtual hostnames. This is especially useful for discovering the true attack...

SourcePoint

SourcePoint SourcePoint is a polymorphic C2 profile generator for Cobalt Strike C2s, written in Go. SourcePoint allows unique C2 profiles to be generated on the fly that helps reduce our Indicators of Compromise "IoCs" and allows the operator to spin up complex profiles with minimal effort. This...

jshound

jshound Recover every request a web app is built to make from the JavaScript it ships: method, URL, body, content type and headers. A single page app's JavaScript bundle contains every API request the app can make. Given a URL, jshound finds the app's bundle, crawls all of it, lazily loaded chunk...

linux-kernel-exploitation

Linux Kernel Exploitation A collection of links related to Linux kernel security and exploitation. Updated bimonthly. Pull requests are welcome as well. Follow @andreyknvl on X, @[email protected] on Mastodon, or @andreyknvl on Bluesky to be notified of updates. Subscribe to @linkersec on...

yowie

Yowie ▄▄▓▓▓▓▓▓▓▓▓▄▄ ▄▓▓▒▒▒▒▒▒▒▒▒▒▒▓▓▄ Yowie · tracking down the SaaS nobody told you about ▓▓▒▒░░░░░░░░░░░▒▒▓▓ ▓▒░░ ● ● ░▒▓ Domain acme.com.au ▓▒░░ ▼ ░▒▓ Candidates acme, acmecorp ▓▓▒░░ ╰───╯ ░▒▓▓ ▀▓▓▒▒░░░░░░░░░▒▒▓▓▀ ▀▀▓▓▓▓▓▓▓▓▓▓▓▀▀ Finds the SaaS services an organisation subscribes to, using onl...

hayabusa

Windows event log fast forensics timeline generator and threat hunting tool. Written in memory-safe Rust by Yamato Security — the only open-source tool with full Sigma support, including v2 correlation rules. !https://img.shields.io/badge/SINCON%20Kampung%20Wor...

changeme

changeme A default credential scanner. About changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials. change...

kubeshark

Network Observability for SREs & AI Agents Live Demo · Docs Kubeshark indexes cluster-wide network traffic at the kernel level using eBPF — delivering instant answers to any query using network, API, and Kubernetes semantics. What you can do: Download Retrospective PCAPs — cluster-wide packet...

RsaCtfTool

RsaCtfTool RSA multi-attack tool that decrypts data from weak public keys and recovers private keys. Overview This tool is a utility designed to decrypt data from weak public keys and attempt to recover the corresponding private key. It offers a comprehensive range of attack options for cracking...

pvbrf-id

PVBRF-ID: Private, Verifiable and Byzantine-Robust Federated Intrusion Detection for Oilfield Enterprise Networks Simulation code, raw results and figure scripts for the paper Mustafa S. Aljumaily, Ali Ataeemh Allami, Mustafa N. Mnati, Nawar S. Alseelawi, Shahab Abdulla, "PVBRF-ID: Private,...

LLM-Attack-Prompt

LLM-Attack-Prompt A comprehensive collection of Large Language Model LLM attack techniques, prompts, and security research materials. This repository serves as a centralized resource for understanding and studying various methods used to exploit or bypass LLM safety mechanisms. The latest large...

lithium-kernel

██╗ ██╗████████╗██╗ ██╗██╗██╗ ██╗███╗ ███╗ ██║ ██║╚══██╔══╝██║ ██║██║██║ ██║████╗ ████║ ██║ ██║ ██║ ███████║██║██║ ██║██╔████╔██║ ██║ ██║ ██║ ██╔══██║██║██║ ██║██║╚██╔╝██║ ███████╗██║ ██║ ██║ ██║██║╚██████╔╝██║ ╚═╝ ██║ ╚══════╝╚═╝ ╚═╝ ╚═╝ ╚═╝╚═╝ ╚═════╝ ╚═╝ ╚═╝ Windows kernel-mode driver framewor...