Tools

eqstlab/cve-2026-6951

Proof-of-concept exploit for CVE-2026-6951, a simple-git --config filter bypass enabling RCE via the Git ext protocol, with a Docker lab and reverse…

emrekybs/pikachu-smtp

Simple python script for brute force attack to smtp users

codextf2/cobaltstrike-sleepmask-yara

Just a git repo for the sleepmask detection rule i found in https://codex-7.gitbook.io/codexs-terminal-window/blue-team/detecting-cobalt-strike/sleep-…

alex188dot/agensic

Cryptographic terminal forensics and session replay for AI agents. Tracks, signs, and audits every command with provenance labels, replayable…

backline-playground/gogs

Fork of gogs/gogs for reachability benchmark testing (CVE-2024-45337)

nccgroup/chuckle

An automated SMB relay exploitation script.

htr-tech/nexphisher

Advanced Phishing tool

pirafrank/vault-conductor

An SSH Agent that provides SSH keys stored in Bitwarden Secrets Manager

george0papasotiriou/cve-2026-22004-git-lfs-pointer-poisoning-supply-chain-

Proof-of-concept for Git LFS pointer poisoning, with Bash and Python scripts that create a malicious repository, simulate a rogue LFS server, and…

1uanwu/cve-2021-21300

remote code exec for git

shoucheng3/spring-cloud__spring-cloud-config_cve-2020-5405_2-1-6-release

Centralized configuration server for distributed systems with HTTP API, encryption/decryption of properties, and support for Git, Vault, JDBC, and…

sondermc/git-cveissues

vulnerabilities, CVE-2022-41903, and CVE-2022-23521, that affect versions 2.39 and older. Git for Windows was also patched to address an additional,…

kiss-sh0t/cve-2018-11235-poc

for git v2.7.4

kulkansecurity/gitxray

A multifaceted security tool which leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more.

thelastbyte/cve-2017-1000117

Proof-of-concept exploit for CVE-2017-1000117, a remote code execution vulnerability in git clients prior to v2.14.1, demonstrating recursive clone…

godaddy/tartufo

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

tralsesec/cve-2023-23946

Original standalone Proof-of-Concept exploit for CVE-2023-23946 (Git path traversal via crafted patches in git-apply).