CVE-2025-5548

🛡️ Research and Exploitation: CVE 2025-5548 This is the main repository where I document my progress in the analysis of CVE 2025-5548. In this space I record each phase of the process: from lab preparation to final exploit development. 📂 Repository Structure Below is the organization of the...

seclab-taskflows-fuzzing

Seclab Taskflows Fuzzing An LLM-driven, OSS-Fuzz-style fuzzing pipeline for native C/C++ projects. AFL++ for execution, clang+lcov for coverage, an LLM agent for harness writing, coverage-feedback decisions, triage, and reporting. Fully autonomous: give it a GitHub repo and it handles everything...

evmbench-certora-agent-harness

EVMBench Certora Agent Harness Configurable agent harness for iterative smart-contract spec generation/refinement using: EVMBench-style tasks openai/frontier-evals - project/evmbench Certora Prover Certora/CertoraProver LLM backend: OpenAI API, OpenRouter API, local Ollama, or mock mode What this...

-SSH-Enum-CVE-2018-15473

🛡️ OpenSSH User Enumeration Tool CVE-2018-15473 Herramienta de enumeración de usuarios para OpenSSH versiones inferiores a 7.7. Esta versión ha sido portada a Python 3 y optimizada para máxima estabilidad en laboratorios de HackTheBox y TryHackMe. ✨ Mejoras clave Compatibilidad: Funciona con...

CVE-2025-4517-POC-Sudoers

CVE-2025-4517 - POC adding user to sudoers This script is a weaponized version of the research published in the Google Security Research Advisory: https://github.com/google/security-research/security/advisories/GHSA-hgqp-3mmf-7h8f While the original research demonstrates the vulnerability by...

Injectus

Injectus Simple python tool that goes through a list of URLs trying CRLF and open redirect payloads. ▪ ▐ ▄ ▐▄▄▄▄▄▄ . ▄▄· ▄▄▄▄▄▄• ▄▌.▄▄ · ██ •█▌▐█ ·██▀▄.▀·▐█ ▌▪•██ █▪██▌▐█ ▀. ▐█·▐█▐▐▌▪▄ ██▐▀▀▪▄██ ▄▄ ▐█.▪█▌▐█▌▄▀▀▀█▄ ▐█▌██▐█▌▐▌▐█▌▐█▄▄▌▐███▌ ▐█▌·▐█▄█▌▐█▄▪▐█ ▀▀▀▀▀ █▪ ▀▀▀• ▀▀▀ ·▀▀▀ ▀▀▀ ▀▀▀ ▀▀▀▀...

Katana

Katana-ds Katana-ds ds for dork scan is a simple python tool that automates Google Hacking/Dorking and supports Tor. It becomes a more powerful in combination with GHDB Note 25/09/2021 : This Repo is New but the script it self is old back when google dorking was something, i wrote this script bac...

chromebackdoor

Puerta trasera del navegador Chrome VÍDEO Texto de instalación V 3.0 Video de instalación ANTIGUO Guía de Binder Guía de módulos Complementos de captura de formularios Complementos de MessengerSpy de Facebook Notificador de Jabber / Ocultar panel Infección en Windows Payload de Rubber Ducky...

SECMON

SECMON - Infosec Watching Tool -red Description SECMON is a web-based tool for the automation of infosec watching and vulnerability management with a web interface. A demo is available here. A Discord channel is available here Features Mail alerting when a new CVE is published and which concerns...

Source

LibreWolf Source Repository This repository contains all the patches and theming that make up LibreWolf, as well as scripts and a Makefile to build LibreWolf. There also is the Settings repository, which contains the LibreWolf preferences. LibreWolf overview graph LR FFSRCFirefox Source...

CLEANSTART-2026-XA70442 Mako is a template library written in Python

Security vulnerability affects the apache-superset package. Mako is a template library written in Python...

hermes

Hermes Hermes is a lightweight Linux agent written in Python, designed for Mythic 3.0 and newer. Named after Hermes, messenger of the gods — built for speed and discretion. Features Linux support SOCKS5 proxy support for pivoting and lateral movement Multiple C2 profiles: HTTP, Notion Encrypted K...

CVE-2020-3452

CVE-2020-3452 TL;DR This is an exploit for CVE-2020-3452. It's not entirely finished yet. Use it in legal context. If you fuck up it's your problem. W00t is dis? This is a quick'n dirty try to enhance the original PoC of CVE-2020-3452. At the current stage there is nothing more than a simple py...

PT-2026-109186

Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109218

Loop with unreachable exit condition 'infinite loop' vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109174

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109165

ssl.SSLContext.wrap bio didn't require the server hostname argument to not be None if ssl.SSLContext.check hostname was set. Due to a missing parameter check in SSLObject, if the server hostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead t...

PT-2026-109167

ssl.SSLContext.wrap bio didn't require the server hostname argument to not be None if ssl.SSLContext.check hostname was set. Due to a missing parameter check in SSLObject, if the server hostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead t...

AlmaLinux 10 : python3.14 (ALSA-2026:77018)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:77018 advisory. python: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio CVE-2026-19553 python: Use-after-free of a...

PT-2026-109203

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...