CVE-2026-28496-Lab

CVE-2026-28496 - FOSSBilling Server-Side Template Injection in Twig Rendering Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-28496, a Server-Side Template Injection vulnerability affecting FOSSBilling's Twig template rendering behavior...

claude-code-backdoor

Claude Code Backdoor PoC A Proof of Concept demonstrating how Claude Code Anthropic's CLI AI agent hooks can be leveraged for Initial Access and Persistence. ⚠️ Disclaimer This project is for educational and ethical security testing purposes only. Unauthorized access to computer systems is illegal...

opmonster

OpMonster CVE-2020-8636 — authenticated remote code execution exploit for Opmon About • Install • Usage • License About OpMonster is a proof-of-concept exploit for CVE-2020-8636 , a remote code execution vulnerability in the Opmon monitoring platform. It abuses the nettools.php endpoint, which le...

Apepe

📲 Apepe 📲 Enumerate information from an app based on the APK file 🕵️ What is Apepe? 🕵️ Apepe is a project developed to help to capture informations from a Android app through his APK file. It can be used to extract the content, get app settings, suggest SSL Pinning bypass based on the app detected...

docker-bench-security

Docker Bench for Security The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.6.0. We are making this available as an open-source utili...

toxiproxy

Toxiproxy Toxiproxy is a framework for simulating network conditions. It's made specifically to work in testing, CI and development environments, supporting deterministic tampering with connections, but with support for randomized chaos and customization. Toxiproxy is the tool you need to prove...

sipcheck

SIPCheck v.3.0 Introduction SIPCheck is a tool that watch the authentication of users of Asterisk and bans automatically if some user or bot try to register o make calls using wrong passwords. Unlike Fail2Ban, SIPCheck manage, not just the attacker, also the clients that you have trust so if you...

IRFuzz

IRFuzz - Simple Scanner with Yara Rules IRFuzz is a simple scanner with yara rules for document archives or any files. Install 1. Prerequisites Linux or OS X Yara: just use the latest release source code, compile and install it or install it via pip install yara-python Yara Rules - You may...

py3webfuzz

Py3webFuzz ';-- Python Web Fuzzing module Library Python3 Module Compatible Author Jonathan Angeles @ex0day Github: https://github.com/jangelesg/py3webfuzz Contributors Nathan Hamiel @nathanhamiel DESCRIPTION Based on pywebfuzz, Py3webfuzz is a Python3 module to assist in the identification of...

s3reverse

s3reverse Install go get $ go get -u github.com/hahwul/s3reverse snap snap install s3reverse brew $ brew tap hahwul/s3reverse $ brew install s3reverse Usage Input options Basic Usage 8""""8 eeee 8"""8 8"""" 88 8 8"""" 8"""8 8""""8 8"""" 8 8 8 8 8 88 8 8 8 8 8 8 8eeeee 8 8eee8e 8eeee 88 e8 8eeee...

Douglas-042

Douglas-042 - Threat Hunting Incident Response - PowerShell Hunting DOUGLAS-042 stands as an ingenious embodiment of a PowerShell script meticulously designed to expedite the triage process and facilitate the meticulous collection of crucial evidence derived from both forensic artifacts and the...

CVE-2026-31431

This repository does not have a README...

DeathSleep

██████╗ ███████╗ █████╗ ████████╗██╗ ██╗███████╗██╗ ███████╗███████╗██████╗ ██╔══██╗██╔════╝██╔══██╗╚══██╔══╝██║ ██║██╔════╝██║ ██╔════╝██╔════╝██╔══██╗ ██║ ██║█████╗ ███████║ ██║ ███████║███████╗██║ █████╗ █████╗ ██████╔╝ ██║ ██║██╔══╝ ██╔══██║ ██║ ██╔══██║╚════██║██║ ██╔══╝ ██╔══╝ ██╔═══╝...

fence

Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It's most useful for running semi-trusted code package installs, build scripts, CI jobs, unfamiliar repos with controlled side effects, and it can also compleme...

Awesome-LLM4Cybersecurity

When LLMs Meet Cybersecurity: A Systematic Literature Review 🔍 Explore 756+ Papers Across 11 Research Categories 📊 RQ1: Domain LLMs | 🎯 RQ2: Applications | 🤖 RQ3: Future Directions Updates 📆2026-06-15 We have updated the related papers up to 2026/06/15 , with 108 new papers added. 📆2026-02-09 We...

CVE-2019-15642

CVE-2019-15642 Webmin Remote Code Execution authenticated python Usage: python CVE-2019-15642.py https://xxx.xxx.xxx:10000 "cat /etc/passwd" 0x01 docker for Webmin cd /vulhub/webmin/CVE-2019-15107 docker-compose up -d root@9460493fa985:/ passwd root Webmin username=root,password=root ⚡ root@jas50...

CVE-2026-11499

🚨 CVE-2026-11499 Stack-Based Buffer Overflow in Tenda HG7 / HG9 / HG10 Routers 📖 Overview CVE-2026-11499 is a reported stack-based buffer overflow vulnerability affecting several Tenda router models , including: HG7 HG9 HG10 Successful exploitation may allow an attacker to trigger a crash, denial...

netrat

netrat Dependency Status Damn easy multiplatform Node.js RAT generator An easy tool to generate configurable backdoors that runs on Windows, Mac and Linux. Shells are upgradable to Meterpreter! Install $ npm install -g netrat Usage $ netrat It will start the building procedure that lets you...

sandbox

Concave AI Sandbox Run AI code safely, fast, untrusted A self-hostable code execution sandbox platform built with Firecracker microVMs. Sub-200ms startup times with snapshot-based warm pooling. About Concave provides secure, isolated code execution environments for running untrusted code. Built...

Tangled

Tangled Tangled is a phishing platform designed from an offensive security perspective. It automates many of the aspects of social engineering campaigns delivery and weaponizes iCalendar rendering features in Microsoft Outlook & Gmail Google Workspace to deliver spoofed meeting invites that are...