📦 Make security testing of K8s, Docker, and Containerd easier.

A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APP_KEY of the Livewire project is known.

A tool designed to exploit bad implementations of decryption mechanisms in Laravel applications.

A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting) vulnerabilities on sites where injections are blocke…

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

An IIS short filename enumeration tool

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

An idiomatic Go (golang) validation package. Supports configurable and extensible validation rules (validators) using normal language constructs instead of error-prone struct tags.

Connection multiplexer for GoLang: serve different services on the same port!

Terminal JSON viewer & processor

oauth-labs: an intentionally vulnerable set of OAuth 2.0 labs for security training and learning

Slack enumeration and exposed secrets detection tool

Package gorilla/feeds is a golang rss/atom generator library

Validate Golang request data with simple rules. Highly inspired by Laravel's request validation.

Exemplary RESTFul API built with go, gin, gorm

A curated list of resources for learning about http://www.keycloak.org

FlowAnalyzer is a tool to help in testing and analyzing OAuth 2.0 Flows, including OpenID Connect (OIDC).

A little like that j-thing, only in Go.

A PoC for a malicious Confluence plugin.

Transfer files to and from a Windows host via ICMP in restricted network environments.

Transparently tunnel your IP traffic through ICMP echo and reply packets.

This repository is dedicated to the analysis and insights derived from data collected by our SSH Honeypot.

This is a list of CVE's discovered by us

XSS challenge :)

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

PoC for a SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers