
mcp-stdio-shellguard
Defense-in-depth bundle for MCP stdio servers: drop-in guardExec/guardSpawn wrappers, AST audit CLI, reference MCP server. Closes the Ox-Security…

Defense-in-depth bundle for MCP stdio servers: drop-in guardExec/guardSpawn wrappers, AST audit CLI, reference MCP server. Closes the Ox-Security…

Security research on Liferay CE 7.0.3 GA4: pre-auth RCE as root (CVE-2020-7961 class) reproduced end-to-end, plus 16 more findings — 8+ with no known…


log4j mitigation work

asadbg is a framework of tools to aid in automating live debugging of Cisco ASA devices

Log4Shell mitigation (CVE-2021-44228) - search and remove JNDI class from *log4j*.jar files on the system with Powershell (Windows)

Apply class remove process from ear/war/jar/zip archive, see https://logging.apache.org/log4j/2.x/

🎏 A library to enhance and speed up script/exploit writing for CTF players

Automatic analysis of SWF files based on some heuristics. Extensible via plugins.