medusa

Sponsored by: MEDUSA A modular automation framework and script repository for runtime testing and investigating Android and iOS apps, designed for penetration testers and malware analysts. It lets you plug in modules to bypass protections like SSL pinning, inspect network/WebView activity, trace...

SSLPatch

SSL Patch CVE-2014-1266 Copyright c 2014 Linus Yang Introduction CVE-2014-1266 , or known as "goto fail SSL verification exploit", is a very serious SSL/TLS vulnerability of iOS and OS X. Apple issues iOS 6.1.6 and 7.0.6 to fix this problem, but ignores some users who can't or just don't want to...

proxmox-lxc-docker-fix

Proxmox LXC AppArmor Fix for Docker/Containers Workaround for CVE-2025-52881 : Fixes Docker, Podman, and container runtime breakage in Proxmox LXC containers caused by AppArmor incompatibility with runc 1.2.7+/1.3.2+ 🚨 The Problem Recent security updates to runc versions 1.2.7+ and 1.3.2+ and...

DIY-CVE-2026-42945-POC

Ubuntu 22.04 + nginx 1.30.0 Docker Runtime This environment builds nginx 1.30.0 from source on Ubuntu 22.04 for local HTTP testing. PHP-FPM is configured directly in the Dockerfile because nginx.conf forwards PHP requests to /tmp/php-cgi-80.sock. Run docker compose up -d --build The compose file...

mp-flipper

MicroPython Flipper Zero Allows you to use the power of Python natively on your Flipper Zero. The application is available on the official Flipper Lab. For details on how to programm your Flipper with Python, check out the documentation on GitHub pages. Disclaimer This FAP version requires about ...

agentbox

🛡️ AgentBox The open-source sandboxed runtime for AI agents Run AI agents with confidence. Every agent gets its own permission scope, credential vault, audit trail, and kill switch. Why AgentBox exists On January 27, 2026, CVE-2026-25253 became the first CVE ever assigned to an agentic AI system. ...

openclaw-defender

openclaw-defender Comprehensive security framework protecting OpenClaw agents from skill supply chain attacks discovered in Snyk's ToxicSkills research Feb 2026. Repository: https://github.com/nightfullstar/openclaw-defender — blocklist and allowlist updates are fetched from here by update-lists....

VulnReach

VulnReach Runtime-aware SCA — proves which CVEs are actually reachable, not just installed. VulnReach is now an officialOWASP Project. 🎉 Demo Step 1 — SCA surfaces 74 CVEs across dependencies Step 2 — VulnReach proves which ones are actually reachable Findings — evidence chain per CVE Dashboard —...

cve-2024-21626

CVE-2024-21626 Overview This repository contains code examples for an app vulnerable to CVE-2024-21626 as well as an eBPF gadget to detect exploitation attempts. This repoistory was created as part of this blog post. The gadget program used to detect this vulnerability is for demonstration purpos...

Soviet

Soviet A Runtime Crypter in C for Linux. This will encrypt ELF binaries, but allow them to still run in memory while using no file handles. Then it will overwrite the program in memory with random data. The point being to make binary analyis and memory analysis more difficult. Dependencies On...

ClawGuard

ClawGuard 🛡️ 中文版 Our Project:https://github.com/SafeAgent-Beihang/clawguard ClawGuard is a security toolkit designed to mitigate risks associated with autonomous agents, such as OpenClaw and other LLM-driven entities. As agents gain more autonomy to execute code, access APIs, and manage files,...

processhacker-mcp

processhacker mcp this is dynamic mcp server for runtime analysis and process hacking. it is like processhacker but for ai agents. setup 1. open folder in visual studio it has cmakelists 2. build all ctrl+shift+b 3. it makes ProcessHackerMCP.exe and extensions/ folder. 4. run exe. it communicates...

Anvil

Runtime-first privilege escalation and attack surface assessment for Windows thick clients. Anvil is a runtime-first privilege escalation and attack surface assessment tool for Windows thick client applications. Rather than scanning the filesystem blindly, it pairs Procmon capture with Windows...

maya

maya Linux ELF Anti-tamper, anti-exploitation. Prototype from 2014. No longer maintained. Target binaries: ETEXEC ELF binaries only. Maya uses a relocatable runtime engine 'tracer.o' which is ultimately injected and linked into the protected binary. This is the heart of the runtime processing for...

XStream <1.4.18 - Server-Side Request Forgery

XStream before 1.4.18 is susceptible to server-side request forgery. An attacker can request data from internal resources that are not publicly available by manipulating the processed input stream with a Java runtime version 14 to 8. This makes it possible to obtain sensitive information, modify...

Rclone RC - Broken Access Control

Rclone = 1.45.0 and = 1.45.0 and 1.73.5 contains a broken access control vulnerability caused by unauthenticated access to the RC endpoint options/set allowing mutation of global runtime configuration, letting unauthenticated attackers access sensitive administrative functions, exploit requires R...

SUSE CVE-2026-98933

In the Linux kernel, the following vulnerability has been resolved: usb: hub: use shorter 120ms post resume hold for SS root hubs Holding a USB3 hub PM runtime reference for 200ms at hub resume triggers an AMD platform issue. Users running Android adb report crashes after adb has been polling and...

SUSE CVE-2026-99049

In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: fix runtime PM leak on request error path pmruntimegetsync leaves the usage counter incremented even when it fails, and xgpiorequest returns the error without dropping it. gpiolib does not call -free when -request...

tetragon-dirtyfrag

tetragon-dirtyfrag Blocking the DirtyFrag Linux privilege-escalation chain CVE-2026-43284 / CVE-2026-43500 at runtime with a Cilium Tetragon TracingPolicy. The policy SIGKILLs the public proof-of-concept at its socket-setup step, before it reaches the page-cache write that would give it root. Wha...

defense-as-skill

Defense-as-Skill: Evolving Runtime Guard Skill for Skill-Augmented Agents 🎉 Accepted by NeurIPS 2026 🎉 🔍 What is Defense-as-Skill? Skill-augmented agents SAAs such as Claude Code and OpenClaw load reusable skills — packaged instructions, scripts, and workflow guidance — as persistent runtime...