Tools

hashcat/hashcat-utils

Small utilities that are useful in advanced password cracking

dshield-isc/dshield

Installs and configures a DShield honeypot sensor on Raspberry Pi or Ubuntu, running Cowrie SSH and HTTP honeypots and forwarding firewall logs to…

gmh5225/no-access-protection-x86

It encrypts the text section and set the protection to NO_ACCESS.

jaksi/sshesame

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

abraxas/spark-connect-copy-local

Apache Spark 4.2.0 - High - Remote - File write - Connect session SET copyFromLocalToFs.allowDestLocal

abraxas/spark-jdbc-serde-url

Apache Spark 4.2.0 - High - Remote - JDBC URL injection - ALTER TABLE SET SERDEPROPERTIES

abraxas/sonic-gnmi-noauth

Documents and reproduces a fail-open authentication flaw in SONiC gNMI where an empty UserAuth map allows unauthenticated gNMI Set and gNOI writes,…

vigiloss/vigil

AI harness for long-running code audits, web pentests, and bug bounty hunting, built around how real investigations fail: anchored hypotheses, false…

abraxas/mysql-set-role-leftover

MySQL Community Server 26.7.0 - High - SET ROLE ALL EXCEPT leftover FILE - mysqld UID write

kaandemir993/overlord-rat-reverse-engineering-a-go-based-rat-injection-keylogging-c2-exfiltration-analysis

Full static & memory analysis of Overlord RAT: Go agent architecture, HTTP/2 + WebSocket C2, reflective DLL injection, browser keylogging, and IOCs.…

abraxas/phpmyadmin-config-set-2fa

phpMyAdmin 5.2.3 - High - Remote - 2FA - config/set clears two-factor

moontea0416/webmirage

Adversarial image attacks on vision-language web agents, from visual grounding to browser execution

vqkro/ultrasploiter

A single binary that folds a port scanner, the full Exploit-DB index (47k entries) and runnable exploit modules into one tool. Written in Rust, runs…

andresriancho/enumerate-iam

Enumerate the permissions associated with AWS credential set

cyb3rmik3/prompt-injection-email-samples

Open .eml test set for evaluating how email security controls and AI mailbox assistants handle indirect prompt injection across disclosure,…

murrez/cve-2026-100740

Python PoC for CVE-2026-100740, an L2TP Host Name AVP out-of-bounds write in D-Link DIR-895L A1_102b07 tunnel_set_params. Fingerprints the device and…

bombobombone/cve-2026-100381

Report and PoC for CVE-2026-100381, a DOM XSS in MediaWiki UploadWizard Flickr collection and set titles, with patch verification notes and a local…