
Hexestra
AI-native penetration testing IDE where operators and an AI agent share browser, terminals, traffic capture, shells, asset graph, tasks, and evidence…

AI-native penetration testing IDE where operators and an AI agent share browser, terminals, traffic capture, shells, asset graph, tasks, and evidence…

🔒 Modern C2 Platform with Cloudflare Tunnel Integration | WinRM & SSH Remote Management | Real-time Terminal & Remote Desktop | Built with FastAPI &…

Dahua cameras security scanner via P2P

Wireless mouse/keyboard attack with replay/transmit poc

Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs,…

Python-based penetration testing framework and reconnaissance toolkit offering port scanning, information gathering, and network scanning modules for…

CVE-2020-9992 - A design flaw in MobileDevice.framework/Xcode and iOS/iPadOS/tvOS Development Tools allows an attacker in the same network to gain…

This C# tool sprays for admin access over the entire domain

Modular Python3 attack framework for automating exploitation of SIEM platforms (Splunk, Graylog, OSSIM, QRadar, McAfee) via credential theft, payload…

TCP Port Forwarding Utility on C

Exploiting HID VertX and EDGE access control systems

Multi-Agent System for Automated Penetration Testing (MASAPT)

Step-by-step guide to exploiting MS17-010 EternalBlue vulnerability on Windows Server 2008 R2, including reconnaissance, exploitation,…

This repository holds interesting bits and pieces related to research I performed on wireless presentation devices manufactured by Awindinc and…

TrojanDropper/PS.Maloader.d

CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full…

Terminal-first attack surface intelligence engine. Built for speed, portability, and raw technical signal.

针对类似CVE-2017-10271漏洞的一个java反序列化漏洞扫描器