Tools

rat5ak/cve-2026-66804-crossdevice-service-eop

CVE-2026-66804 Windows Cross Device virtual camera EoP - private internal research repository

boreas37/cve-2026-33267-poc

CVE-2026-33267 — Apache Traffic Server @ header internal-metadata spoof (CVSS 10.0). Verified: @ headers leak to plugins on 10.1.2, stripped on 10.1.4

dievus/powershellforpentesters

Course repository for PowerShell for Pentesters Course

octoberfest7/memfiles

A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk

george0papasotiriou/cve-2026-11106-dns-zone-transfer-axfr-information-disclosure

Proof-of-concept for CVE-2026-11106 exploiting unrestricted DNS AXFR zone transfers to enumerate domain records, expose internal hosts, and leak…

b3rito/peeko

peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.

flowerwitch/cve-2026-59774_docker

Dockerized reproduction of CVE-2026-59774 for Gitea; demonstrates path traversal in go-org markup include to read arbitrary files and escalate to RCE…

kalhoralireza/cve-2026-17532

Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scripting PoC

amnestytech/inside-pegasus

A curated set of NSO Group internal documents, product materials and sworn testimony that entered the public record in WhatsApp Inc. and Meta…

srlabs/certiception

An ADCS honeypot to catch attackers in your internal network.

ev3rpalestine/0xmiddleware

CVE-2025-29927: Next.js Middleware Exploit

samyk/poisontap

Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using…

elttam/publications

Offensive security research hub aggregating original vulnerability advisories, CVE proof-of-concept exploits, conference talks, and internal tooling…