RTTM

Real Time Threat Monitoring Tool V2.0 Monitoring possible threats of your company on Internet is an impossible task to be achieved manually. Hence many threats of the company goes unnoticed until it becomes viral in public. Thus causing monetary/reputation damage. This is where RTTM comes into...

CVE-2026-35204

CVE-2026-35204 Этот репозиторий представляет собой PoC для CVE-2026-35204 Описание «Helm — это менеджер пакетов для чартов Kubernetes. Начиная с версии 4.0.0 до 4.1.3, специально созданный плагин Helm при установке или обновлении заставляет Helm записывать содержимое плагина в произвольное место...

social_mapper

Social Mapper This tool is no longer actively maintained, parts of it may still work and I will accept pull requests to keep it up to date WARNING: FACEBOOK NOW DETECTS THIS AFTER A FEW 100 SEARCHES, USE ONLY DISPOSABLE FACEBOOK ACCOUNTS A Social Media Mapping Tool that correlates profiles via...

CVE-2025-55182-React2Shell-Async-Scanner

⚡ React2Shell CVE-2025-55182 / CVE-2025-66478 - Async RCE Scanner Prototype-pollution → Remote Code Execution via React Server Actions Async, version-first, output-based canary detection - no blind guessing !WARNING For authorised security research and penetration testing only. Scanning systems...

CVE-2026-49049

CVE-2026-49049 Vulnerability Analysis: Unauthenticated Arbitrary File Write in JoomShaper Helix3 Joomla This repository contains materials, technical analysis, and a Proof of Concept PoC for the critical vulnerability CVE-2026-49049 found in the outdated template framework Helix3 by JoomShaper fo...

bitcrook

Bitcrook Centralize and expedite OSINT investigations View the roadmap Table of Contents Information About Disclaimer Changelog Preview Attributions Usage Installation CLI GUI Docker Authentication Information About Bitcrook is an open-source intelligence apparatus that aims to centralize all of...

CVE-2017-12615

In memory of Chia Junyuan https://packetstormsecurity.com/files/author/11924/ POC CVE-2017-12615 POC Exploit for Apache Tomcat 7.0.0 to 7.0.79 running on Windows; CVE-2017-12615 PUT JSP vulnerability. Description: By design, you are not allowed to upload JSP files via the PUT method on the Apache...

gha-lab-a815a82f03-1

CloudPirates Open Source Helm Charts A curated collection of production-ready Helm charts for open-source cloud-native applications. This repository provides secure, well-documented, and configurable Helm charts following cloud-native best practices. ⚠️ IMPORTANT : As of April 15, 2026 , all...

EvilSlackbot

EvilSlackbot A Slack Attack Framework for conducting Red Team and phishing exercises within Slack workspaces. Disclaimer This tool is intended for Security Professionals only. Do not use this tool against any Slack workspace without explicit permission to test. Use at your own risk. Background...

365Inspect

Purpose Further the state of Microsoft 365 security by authoring a PowerShell script that automates the security assessment of Microsoft 365 environments. Soteria Inspect Soteria Inspect is born from the 365Inspect project and is Soteria's SaaS solution to aid in assessing the security of a...

CVE-2024-1561

CVE-2024-1561 - Gradio Arbitrary File Read CVE-2024-1561 is an arbitrary file read vulnerability affecting Gradio versions prior to 4.13.0. Gradio is a popular Python framework used to quickly build web interfaces for machine learning models and AI applications. The vulnerability exists because t...

authproof-sdk

AuthProof SDK AuthProof is a cryptographic delegation protocol for agentic AI. Most protocols in this space enforce against an operator-defined policy -- giving the operator authority to expand or reinterpret the user's original intent after the fact. AuthProof is built around a different trust...

backdoorppt

backdoorppt - 'Office spoof extensions tool' root@kitploit: Version release: v1.7-Stable Author: pedro ubuntu r00t-3xp10it Distros Supported: Linux Kali, Ubuntu, Mint Suspicious-Shell-Activity© SSA RedTeam develop @2017 Transform your payload.exe into one fake word doc .ppt root@kitploit: Simple...

Ruse

Ruse Mobile camera-based application that attempts to alter photos to preserve their utility to humans while making them unusable for facial recognition systems. Installation 1 Easy Method: Wait and download app from appropriate app store. 2 Download and run ios app via XCode see Development setu...

NotCVE-2026-0009

Path Traversal Vulnerability in nitroshare Description NitroShare Desktop v0.3.4 contains a path traversal vulnerability in its LAN file transfer server. The server listens on all network interfaces port 40818 without authentication. When receiving files, the name field from the sender's JSON ite...

CVE-2026-66749-Unchecked-Room-Lookup-Leads-to-Server-Crash-Let-s-Chat-

Security Advisory: Unchecked Room Lookup Leads to Server Crash Let's Chat Assigned CVE ID: CVE-2026-66749 Summary One HTTP request from any logged-in account shuts down the Let's Chat server process. GET /messages takes a room parameter, looks that room up by id, and then calls a method on the...

csf

ArmourBird CSF - Marco de Seguridad para Contenedores Nota: El Cliente CSF está en desarrollo activo y se está convirtiendo a GoLang para un mejor rendimiento y arquitectura Tabla de Contenidos 1. Acerca de 2. Diagrama de Arquitectura 3. APIs del Servidor CSF 4. Instalación/Uso 5. Construcción de...

csf

ArmourBird CSF - Container Security Framework Note: The CSF Client is under active development and is getting converted into GoLang for better performace and architecture Table of Contents 1. About 2. Architecture Diagram 3. APIs-CSF Server 4. Installation/Usage 5. Building Docker Images 6. Sneak...

pbck-exploit

Mass Exploitation & Validation Framework for Joomla Page Builder CK Unauthenticated Arbitrary File Upload → Remote Code Execution 📑 Table of Contents Vulnerability Overview Affected Versions Features Installation Usage Proof of Concept Technical Deep-Dive Detection Methodology Defense & Mitigatio...

CVE-2026-57829

Helix Ultimate Framework — Unauthenticated Stored XSS comajax → Admin Session-Riding → Full Account Takeover This is the strongest finding in this research folder — CRITICAL, fully confirmed end-to-end. Unlike the delete-only bug in helixultimatedeletepoc.md, this one has a real, working path to...