#1Tools for blue team, defensive security, and threat protection.
Kitploit recommended
kavryxdev-group/sandboxed-untrusted-code-execution-runnerExecutes untrusted Python, JavaScript, and Bash in a hardened jail with 5-second, 128 MB, 0.5-core, PID and output limits.
oscerd/cve-2026-85249Runnable Spring Boot and Quarkus reproducer for CVE-2026-85249, demonstrating camel-tika metadata header injection into CamelFileName with affected…
oscerd/cve-2026-83531Runnable Spring Boot proof-of-concept for CVE-2026-83531, demonstrating expression-language injection in Apache Camel's dynamic-router-control…
rtkwlf/wolf-toolsScans Windows, Linux, and macOS hosts for Java packages containing JndiLookup.class to detect Log4Shell (CVE-2021-44228, CVE-2021-45046) exposure and…
oscerd/cve-2026-79985Reproducer and analysis for CVE-2026-79985, a path traversal in Apache Camel camel-smb where share-listing names bypass directory containment, with…
oscerd/cve-2026-79984Runnable proof-of-concept reproducer for CVE-2026-79984, a path traversal in Apache Camel camel-mina-sftp, with malicious SFTP server fixtures and…
oscerd/cve-2026-78165Runnable proof-of-concept reproducer for CVE-2026-78165, demonstrating unfiltered JDK deserialization of Redis PUBLISH payloads in Apache Camel…
oscerd/cve-2026-84181Runnable Spring Boot and Quarkus proof-of-concept reproducing the Apache Camel camel-shiro thread-bound-subject authentication bypass, with affected…
oscerd/cve-2026-85315Runnable proof-of-concept reproducer for CVE-2026-85315, demonstrating camel-grpc consumer exception message disclosure (CWE-209) in Camel Spring…
oscerd/cve-2026-85301Runnable proof-of-concept reproducer for the Apache Camel camel-keycloak issuer validation bypass (CWE-287), demonstrating affected and patched…
deathbydata/php2shell-exposurehuntRepository for PHP2Shell exposure hunting and related analysis
leonlai-tw/php-eol-cve-2026-109618-109619Unofficial patches for PHP CVE-2026-109618 / CVE-2026-109619 (RCE, CVSS 9.2) on EOL platforms: PHP 7.3 on CentOS/RHEL 7 (Remi), PHP 5.4 on Amazon…
ncsc-nl/php2shellOperational advisory repository tracking CVE-2026-109618 and CVE-2026-109619 PHP RCE flaws, with detection and mitigation guidance, affected software…
oscerd/cve-2026-88900Runnable Spring Boot proof-of-concept reproducing CVE-2026-88900, the camel-jgroups unsafe Java deserialization flaw, showing affected versus patched…
oscerd/cve-2026-85247Runnable Spring Boot and Quarkus reproducer for CVE-2026-85247, demonstrating camel-knative TLS trust-all fallback and verifying the fix.
oscerd/cve-2026-85245Runnable Spring Boot proof-of-concept reproducing CVE-2026-85245, a camel-thrift cross-exchange data disclosure, with affected vs fixed comparison…
oscerd/cve-2026-85243Runnable Spring Boot and Quarkus proof-of-concept for CVE-2026-85243, demonstrating the Apache Camel camel-crypto-pgp integrity-verification…
oscerd/cve-2026-78164Runnable proof-of-concept for CVE-2026-78164, demonstrating secret leakage when Apache Camel HTTP producers resolve property placeholders in…
