#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
freeqaz/react2shellRCE exploit toolkit for CVE-2025-55182 and CVE-2025-66478 in React Server Components. Includes multiple exploit variants, detection scripts, a…
aliclub0x00/cve-2025-55182-poc-nextjsWorking proof of concept for NextJS RCE to establish a reverse shell. [React2Shell]
ngvcanh/cve-2025-55182-attack-analysisReal-world attack analysis of CVE-2025-55182 (React2Shell) - React Server Components RCE vulnerability
zemarkhos/cve-2025-55182-exploit-poc-scannerExploit tool for CVE-2025-55182 and CVE-2025-66478 in React Server Components and Next.js, featuring RCE gadgets, file read/write, OOB callbacks, and…
zihxs/check-react-rce-cve-2025-55182Security scanner to detect CVE-2025-55182 & CVE-2025-66478 vulnerabilities in React Server Components (RSC) projects
r2c-cse/multer-sca-rule-test_cve-2025-7338Test to validate CVE-2025-7338 https://semgrep.dev/orgs/-/advisories?f=CAAQGRoTCg1jdmUtMjAyNS03MzM4GgAiAA%3D%3D
taielab/awesome-hacking-listsA curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and…
heiheishushu/rsc_detect_cve-2025-55182Detects whether a website uses React Server Components (RSC) or Next.js, aiding in vulnerability assessment for CVEs like CVE-2025-55182.
osmankandemir/docf-sec-checkStatic analysis tool that scans Dockerfiles for insecure commands and configuration issues, providing actionable security notifications to harden…
daem0nc0re/atomicsyscallTools and PoCs for Windows syscall investigation.
google/permhashFramework for hashing declared permissions in Chromium extensions and APKs, enabling clustering, hunting, and pivoting across potentially malicious…
github/securitylabResources related to GitHub Security Lab
shoucheng3/rhuss__jolokia_cve-2018-1000129_1-4-0Agent-based JMX access via JSON/HTTP with bulk requests, fine-grained security policies, and proxy mode for remote MBeanServer monitoring and…
kylvgoi/cve-2019-1663Educational exploit for CVE-2019-1663 targeting a stack-based buffer overflow in Cisco RV routers. Includes a Python exploit script, reverse shell…
egkritsis/cve-2025-61303Critical Vulnerability (9.8) - RecordedFuture Triage dynamic analysis engine can fail to record malicious behavior when samples produce very…
egkritsis/cve-2025-61301CVE-2025-61301 proof-of-concept demonstrating denial-of-analysis in CAPEv2 via recursive process forking that triggers MongoDB BSON limits and orjson…
sumidcyber/zeroscout🦅 ZeroScout: The Autonomous Local & Cloud Threat Hunter. Visualize attacks in a live War Room, identify APT groups via Genetic Analysis, and…
