
drupal-jsonapi-sqli-scanner
Scanner: CVE-2026-9082 Drupal PostgreSQL SQLi via JSON:API — Python scanner for unauthenticated SQLi leading to RCE (CISA KEV)
Tools for extracting sensitive data from compromised systems without detection.

Scanner: CVE-2026-9082 Drupal PostgreSQL SQLi via JSON:API — Python scanner for unauthenticated SQLi leading to RCE (CISA KEV)

A prototype malware C2 channel using x509 certificates over mTLS

The CIA Hive source code as released by Wikileaks

A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk

Academic purposes only. Attack against Salesforce lightning with guest privilege.

Default Detections for EDR

Updated version of PowerDNS by @domchell. Adds support for transfers over DNS A records and a few other useful features.

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

This repository is a collection of powershell functions every hacker should know

Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets…

Documents Exfiltration project for fun and educational purposes

Reproducer that exploits credential vending before location validation in Apache Polaris Iceberg REST, proving cross-tenant cloud reads and bucket…

DNSChef (NG) - DNS proxy for Penetration Testers and Malware Analysts

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI

A Collection of Over 60 Scripts - updated specifically for the BadUSB function on the FlipperZero.

