
NetSpecter
Real-time system monitoring tool for detecting process activity and network exposure!

Real-time system monitoring tool for detecting process activity and network exposure!

Code, aggregate data and LaTeX source for 'Who Patches the Lightning Network? Release Lines from Gossip, Node Platforms and Security Advisories,…

🤖 NO, There is an easy way to exploit this vulnerability! (vibecoded to prove a point)

Repository for PHP2Shell exposure hunting and related analysis

High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)

Pure-HTTP exploit achieving RCE on PHP 8.4.26 + Apache mod_php via session upload_progress heap leak, dangling pointer reuse, and ASLR bypass to call…

CLI that checks a website's PHP version or a local PHP binary against embedded patch cutoffs to determine php2shell vulnerability status, with JSON…

Runnable proof-of-concept reproducer for CVE-2026-85315, demonstrating camel-grpc consumer exception message disclosure (CWE-209) in Camel Spring…

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full…

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing,…

Collection of CVE findings, proof-of-concept references, and vulnerability research notes, including ExploitDB entries and credited security…

CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis

Multi-agent LLM system for autonomous penetration testing in isolated labs: planner/worker agents share asset and exploration graphs, with MITM…

Runnable Spring Boot and Quarkus reproducer for CVE-2026-85257, demonstrating camel-cxf SOAP fault information disclosure and verifying the…

Documents CVE-2026-106173, a path traversal (CWE-22) in Fortinet FortiSIEM, with impact analysis, detection guidance, and mitigation steps for…

Packet capture artifacts of plex2shell exploitation against Plex, including lab and in-the-wild traffic, for building and validating detection…

Runnable proof-of-concept reproducer for CVE-2026-80344 in Apache Camel camel-as2, demonstrating asynchronous MDN SSRF and credential disclosure with…

Runnable Spring Boot and Quarkus reproducers for CVE-2026-84180, demonstrating camel-knative HTTP consumer exception leakage and verifying the…