Tools

ihsspotlight/heartbleed-cve-2014-0160--scripts-python3

Python scripts for detecting and exploiting OpenSSL Heartbleed (CVE-2014-0160), leaking sensitive memory contents from vulnerable TLS services.

infobyte/pyrmax

Decoder/encoder for Ubiquiti AirMAX wireless protocol frames; parse pcap/live captures, discover devices, scan for vulnerable firmware, craft…

george0papasotiriou/cve-2026-23009-dicom-network-image-injection-without-authentication

Proof-of-concept for CVE-2026-23009 demonstrating unauthenticated DICOM image injection into vulnerable PACS servers using pynetdicom, with a…

george0papasotiriou/cve-2026-22007-ntp-monlist-amplification-over-ipv6

Python PoC for CVE-2026-22007: NTP monlist amplification over IPv6, including a simulated vulnerable server and spoofed UDP reflection attack.

george0papasotiriou/cve-2026-22002-vnc-authentication-bypass-via-protocol-version-confusion

Python PoC demonstrating CVE-2026-22002 VNC authentication bypass by forcing protocol version downgrade to RFB 3.3, including a simulated vulnerable…

george0papasotiriou/cve-2026-11118-http-2-rapid-reset-ddos

Python PoC for CVE-2026-11118 demonstrating HTTP/2 Rapid Reset DDoS via RST_STREAM resource exhaustion; includes vulnerable server simulator and…

siboy17/cve-2022-21907-http.sys

Proof-of-concept exploit for CVE-2022-21907, a critical remote code execution vulnerability in the Windows HTTP.sys stack, targeting vulnerable…

george0papasotiriou/cve-2026-6060-quic-handshake-amplification-via-address-validation-bypass

Educational Python PoC for a QUIC address-validation bypass that triggers handshake amplification, including vulnerable server simulation and attack…

george0papasotiriou/cve-2026-8888-printer-firmware-unsigned-update-via-http

Demonstrates CVE-2026-8888, an unsigned printer firmware update over HTTP, including a malicious update server and vulnerable printer emulator for…

mahfuzreham/ovswrap-cve-2026-64531-mitigation-tool

Shell script that detects vulnerable Open vSwitch kernel modules, blocks automatic loading, removes the affected module, and verifies mitigation…

m0n3ef/regresshion-checker

A lightweight, fast tool to scan and detect the "regreSSHion" OpenSSH remote code execution vulnerability (CVE-2024-6387).

stoerti2/abyssal

Abyssal is a high-performance Telnet vulnerability scanner for CVE-2026-24061, delivering root shells on vulnerable systems with false-positive…

orevic21/wazuh-home-soc

Wazuh + Suricata SOC lab detecting real exploits (CVE-2011-2523) and brute-force attacks, with custom detection rules for gaps in default IDS…

p4ncontomat3/smbghost

scanner for CVE-2020-0796

jonathaninfinity01/soc-l1-osint-investigation-mikrotik-cve-2018-1156

L1 SOC Analysis: OSINT detection and risk validation of publicly exposed MikroTik RouterOS vulnerable to RCE | Tools: Shodan, NIST NVD

mr-whiskerss/ssh-terrapin-prefix-truncation-weakness-cve-2023-48795-checker

Lightweight Python scanner for CVE-2023-48795 (SSH Terrapin prefix truncation). Performs passive banner grab and KEXINIT parse to detect vulnerable…

ayushghatkar8080/madeyoureset_tester

A Python script that checks if a web server is vulnerable to MadeYouReset (CVE-2025-8671) — an HTTP/2 DoS attack that bypasses Rapid Reset…