adversarial-detection-engineering/adversarial-detection-engineering-frameworkA framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concrete examples…
mr-in4inci3le/sliver-guiA desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfacing with its…
talha-nazeef-ahmed/alpc-enumeratorA Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.
huzjie/aegisagentRuntime security gateway for AI agents: cryptographically attests tool calls, enforces policies, sandboxes execution, and logs tamper-evident audit…
ffffffff0x/f8x红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool
w4r10ck423/envvisualizerParse and visualize /proc/self/environ on compromised Linux boxes — categorizes env vars by tech stack (AWS, Django, Rails, NodeJS, MySQL, K8s,…
404-src/cve-2026-34486Exploit for Apache Tomcat EncryptInterceptor bypass leading to unauthenticated RCE via Java deserialization on port 4000. Includes lab setup,…
george0papasotiriou/cve-2025-15556-notepad-wingup-updater-rceProof-of-concept exploit for CVE-2025-15556, demonstrating update integrity bypass in Notepad++ WinGUp updater via MITM proxy or DNS spoofing,…
simoesctt/sctt-2026-33-0004-forticloud-sso-identity-singularityWhile Fortinet's January 27, 2026 mitigation for **CVE-2026-24858** focuses on blocking specific accounts like `[email protected]`, it fails to…
decoder-it/printerbugnewThe DCERPC only printerbug.py version
pentestgeek/phishing-frenzyRuby on Rails Phishing Framework
bronzebee/cve-2023-23397Python script for sending e-mails with CVE-2023-23397 payload using SMTP
mpgn/rails-doubletap-rceRCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420)
pentestical/cve-2019-5420Exploit in Rails Development Mode. With some knowledge of a target application it is possible for an attacker to guess the automatically generated…
si1ent-le/cve-2019-5736Proof-of-concept exploit for CVE-2019-5736, a Docker container escape via runc binary overwrite, enabling host shell access through libseccomp…
nickguitar/revcatOpenCATS <= 0.9.4 RCE (CVE-2021-41560)
mdsecactivebreach/o365-attack-toolkitA toolkit to attack Office365
its-arun/cve-2016-2098Bash-based proof-of-concept exploit for CVE-2016-2098, targeting Ruby on Rails Action Pack remote code execution via unrestricted render method.
