Tools

u20024804/bash-4.2-fixed-cve-2014-6271

Patched version of GNU Bash 4.2 fixing the Shellshock vulnerability (CVE-2014-6271). Provides a secure shell environment with standard POSIX…

cashapp/pivit

Manage x509 certificates on PIV-enabled YubiKeys, generate keys and certificate requests, and sign or verify git commits and files.

saied25/fix-react2shell-next

🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.

drackyjr/cve-2020-15778-scp-command-injection-check

This script is a safe and simple tool that helps system users, students, and administrators check if their SCP (Secure Copy) client is vulnerable to…

pingpongplus/safeguard

CLI Encryption tool written in Go only for learning purposes (not secure)

kaleth4/cve-2025-0690

Technical analysis of CVE-2025-0690: integer overflow in GRUB2's read command leading to heap out-of-bounds write, arbitrary code execution, and…

themalwareguardian/cve-2022-34303

Demonstrates CVE-2022-34303 Secure Boot bypass via CryptoPro signed UEFI Shell, using the mm command to nullify gSecurity2 and load unsigned UEFI…

themalwareguardian/cve-2022-34301

Demonstrates CVE-2022-34301 Secure Boot bypass via Eurosoft signed UEFI Shell (esdiags.efi), using the mm command to nullify gSecurity2 and load…

richlegrand/bitbang-cli

Establish secure remote access to a machine with interactive shell, file transfer, and web proxy over end-to-end encrypted peer-to-peer WebRTC, using…

yen223/hotpot

A simple and secure command-line tool for managing TOTP-based two-factor authentication codes.

u20024804/bash-4.3-fixed-cve-2014-6271

Patched GNU Bash 4.3 with fix for Shellshock (CVE-2014-6271). Provides a secure Bourne Again SHell with command-line editing, job control, and…

superandroidanalyzer/super

Secure, Unified, Powerful and Extensible Rust Android Analyzer

comparedarray/printix-cve-2022-29554

A "Mishandling of Input to API" or "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure…

mbadanoiu/cve-2020-8250

CVE-2020-8250: Privilege Escalation via Command Injection in Pulse Secure VPN Linux Client

embedi/ble_norton_core

Proof-of-concept exploit demonstrating command injection via BLE service in Norton Core Secure WiFi Router (CVE-2018-5234). Includes SSH access setup…

crowthearchfiend/rtcore64-probe

A tiny cpp program to test reading memory using a vulnerable RTCore64.sys driver/device (CVE-2019-16098). It tries to read a "secret" from its own…

dr-noob/cpufetch

Simple yet fancy CPU architecture fetching tool