#1Tools for blue team, defensive security, and threat protection.
Kitploit recommended
aide/aideFile integrity monitoring tool that detects unauthorized changes to monitored files and directories using attribute checks, multiple hash algorithms,…
oscerd/cve-2026-91858Runnable Spring Boot and Quarkus reproducer for CVE-2026-91858, an XXE in Apache Camel camel-fop via a third-party TransformerFactory, with affected…
gmh5225/mapped-dumperA program written in C++ for remotely dumping manual mapped modules.
abraxas/vaultwarden-ip-header-spoofVaultwarden 1.37.3 default X-Real-IP trusted-local bypasses login rate limits on Docker NAT
oscerd/cve-2026-85300Runnable Spring Boot and Quarkus reproducer for CVE-2026-85300, demonstrating camel-pqc writing private keys with permissive umask-derived file…
oscerd/cve-2026-85254Runnable Spring Boot and Quarkus reproducer for CVE-2026-85254, demonstrating Apache Camel camel-platform-http header-echo suppression bypass via…
oscerd/cve-2026-80344Runnable proof-of-concept reproducer for CVE-2026-80344 in Apache Camel camel-as2, demonstrating asynchronous MDN SSRF and credential disclosure with…
ncsc-nl/php2shellOperational advisory repository tracking CVE-2026-109618 and CVE-2026-109619 PHP RCE flaws, with detection and mitigation guidance, affected software…
gmh5225/no-access-protection-x86It encrypts the text section and set the protection to NO_ACCESS.
oscerd/cve-2026-85312Runnable proof-of-concept reproducer for CVE-2026-85312, demonstrating Apache Camel saga hijacking via the Long-Running-Action header in Spring Boot…
oscerd/cve-2026-85260Runnable Spring Boot and Quarkus reproducer for CVE-2026-85260, demonstrating camel-mllp PHI logging in affected versions and suppression after the…
oscerd/cve-2026-85257Runnable Spring Boot and Quarkus reproducer for CVE-2026-85257, demonstrating camel-cxf SOAP fault information disclosure and verifying the…
oscerd/cve-2026-79983Runnable proof-of-concept reproducer for CVE-2026-79983, a path traversal in Apache Camel camel-ftp consumers, with malicious FTP server fixtures and…
abraxas/vsftpd-cmds-denied-aliasvsftpd 3.0.5 - High - Remote - Privilege leftover - cmds_denied misses RFC aliases (XRMD)
abraxas/pfsense-api-example-ssl-verifypfSense Plus MIM API toolkit b4acd7ca - Medium - Remote - Privilege leftover - official samples verify_ssl=False
leonlai-tw/php-eol-cve-2026-109618-109619Unofficial patches for PHP CVE-2026-109618 / CVE-2026-109619 (RCE, CVSS 9.2) on EOL platforms: PHP 7.3 on CentOS/RHEL 7 (Remi), PHP 5.4 on Amazon…
oscerd/cve-2026-88901Runnable Spring Boot proof-of-concept reproducing CVE-2026-88901, an XXE (CWE-611) flaw in Apache Camel camel-smooks, with affected and patched…
oscerd/cve-2026-85249Runnable Spring Boot and Quarkus reproducer for CVE-2026-85249, demonstrating camel-tika metadata header injection into CamelFileName with affected…
