http-mcp-bridge

HTTP MCP Bridge This project implements an HTTP server that acts as a bridge between HTTP/1.1 requests and a remote MCP server, using the mcp python library GitHub. The main purpose of this initiative is to be able to use HTTP security tools to test remote MCP servers using the remote transport...

cerebro-red-v2

CEREBRO-RED v2 Research Edition Autonomous Local LLM Red Teaming Suite A research-grade framework for automated vulnerability discovery in local LLMs using Agentic Fuzzing and Adaptive Adversarial Mutation AAM. Research Goals Implement PAIR Algorithm Prompt Automatic Iterative Refinement from...

ClientInspectorV2

Introducción a ClientInspector v2 ¿Tienes el control? - ¿o algunos de tus procesos de infraestructura básicos como parcheo, antivirus, habilitación de BitLocker se están desviando? ¿O te gustaría hacer un inventario avanzado , donde puedas consultar el estado de la garantía contra la garantía de...

sliver-gui

Sliver GUI A desktop operator console for the Sliver C2 framework in the spirit of Cobalt Strike and Havoc. Designed and Developed by Raj Kumar Mullapudi Sliver GUI is a thin Wails v2 Go + plain HTML/CSS/JS frontend over Sliver's existing rpcpb.SliverRPC gRPC service. It reimplements no C2 logic...

Netryx-Astra-V2-Geolocation-Tool

Netryx Astra V2 State-of-the-art AI geolocation from a single image. The Idea • How It Works • Getting Started • Community Hub • Installation The Idea You have a photograph. Maybe it's a screenshot from a video. Maybe it's a cropped, blurry phone photo someone posted online. Maybe it shows just a...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

teletunnel

TeleTunnel v2 Una herramienta de acceso remoto basada en Telegram para Windows. Aviso: Solo para uso autorizado en sistemas que poseas. ¡Por favor 🙇 Características Administración remota a través de un bot de Telegram. Control seguro solo acepta comandos de tu ID de usuario de Telegram...

mtr

¿QUÉ ES MTR? mtr combina la funcionalidad de los programas 'traceroute' y 'ping' en una sola herramienta de diagnóstico de red. Al iniciar mtr, investiga la conexión de red entre el host donde se ejecuta mtr y un host de destino especificado por el usuario. Envía sondas al destino con valores de...

ipscan

Angry IP Scanner This is the source code of Angry IP Scanner, licensed with GPL v2. Official site The code is written mostly in Java. SWT library from Eclipse project is used for GUI that provides native components for each supported platform. The project runs on Linux, Windows and macOS. Helping...

netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers

A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested PP2TYPESSL type-length-value TLV records. This can lead to a memory leak, causing the underlying cumulation...

netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers

A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested PP2TYPESSL type-length-value TLV records. This can lead to a memory leak, causing the underlying cumulation...

netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers

A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested PP2TYPESSL type-length-value TLV records. This can lead to a memory leak, causing the underlying cumulation...

webkiller

WebKiller V2 Herramienta de recolección de información escrita con Python. Vista previa ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗...

Converto

Converto V2 Instalador automatizado de Kali Linux o Parrot OS para VPS Instalando Kali Linux o Parrot OS en un servidor VPS. Probado en Ubuntu. Probado en Debian. También instala VNC VNC gráfico / no gráfico. Pasos para la instalación :- Video :- Cómo instalar IMAGE ALT TEXT HERE 1.sudo apt-get...

USBArmyKnife

🚀 USB Army Knife v2 is steeping — and its going to be a beast After two years of active development on v1, v2 is planned to turn the USB Army Knife into a full red-team platform in your pocket. A big announcement is coming this autumn but I still wanted to tease: Brand-new web UI — smaller, faste...

cotopaxi

.d8888b. 888 d8b d88P Y88b 888 Y8P 888 888 888 888 .d88b. 888888 .d88b. 88888b. 8888b. 888 888 888 888 d88""88b 888 d88""88b 888 "88b "88b 'Y8bd8P' 888 888 888 888 888 888 888 888 888 888 .d888888 X88K 888 Y88b d88P Y88..88P Y88b. Y88..88P 888 d88P 888 888 .d8""8b. 888 "Y8888P" "Y88P" "Y888 "Y88P...

btr

Branch Target Reuse BTR Artifacts This repository contains the artifacts for the paper "Branch Target Reuse: Practical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries" accepted at ACM CCS 2026. For more information about the BTR attack, see our project-page and our paper! bt...

pe-bear

PE-bear PE-bear es una herramienta multiplataforma de ingeniería inversa para archivos PE. Su objetivo es ofrecer una “primera vista” rápida y flexible para analistas de malware, estable y capaz de manejar archivos PE malformados. Firmas para PE-bear: SIG.txt actualizado: 17 de octubre de 2022 -...

CVE-2026-105746

A flaw was found in Docling. The document processing pipeline fails to honor configurations that disable remote network services when utilizing the KServe V2 optical character recognition OCR model. This failure can result in unintended information disclosure, as page images from processed...

CVE-2026-105746

The Docling library (versions 2.83.0 through 2.131.0 ) contains a vulnerability where the KServeV2OcrModel class fails to enforce the enable_remote_services policy. Specifically, the docling/models/stages/ocr/kserve_v2_ocr_model.py file sends page images to configured endpoints without checking i...