Tools

pandaadir05/ghost

Detects process injection and memory manipulation used by malware. Finds RWX regions, shellcode patterns, API hooks, thread hijacking, and process…

entysec/ghost

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

ahxr/ghost

Lightweight RAT providing silent remote command-line access, hidden file download/execution, and persistence mechanisms for Windows systems.…

razkom/ghost

ESP32-S3 firmware for standalone WPA/WPA2 handshake capture and deauthentication testing via TFT UI, with pcap download over WiFi AP.

screetsec/vegile

This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in…

cryptolok/ghostinthenet

Ultimate Network Stealther that makes Linux a Ghost In The Net and protects from MITM/DOS/scan

dinosn/ghost-cve-2026-26980

CVE-2026-26980 — Ghost CMS Content API SQL Injection Lab (unauthenticated blind SQLi via slug filter ordering)

0xyassine/cve-2023-40028

Proof of concept demonstrating authenticated symlink upload in Ghost CMS leading to arbitrary file read via CVE-2023-40028.

gagaltotal/cve-2026-26980-ghost-cms-api

Go-based PoC for Ghost CMS Content API SQL injection (CVE-2026-26980). Verifies vulnerability, extracts admin credentials and API secrets, and…

vognik/cve-2026-26980

Unauthenticated SQL injection exploit for Ghost CMS Content API (CVE-2026-26980); dumps database tables from SQLite/MySQL with active/passive checks…

0xdtc/ghost-5.58-arbitrary-file-read-cve-2023-40028

CVE-2023-40028 affects Ghost, an open source content management system, where versions prior to 5.59.1 allow authenticated users to upload files that…

makelinux/cve-2015-0235-workaround

A shared library wrapper with additional checks for vulnerable functions gethostbyname2_r gethostbyname_r (GHOST vulnerability)

fser/ghost-checker

Test wether you're exposed to ghost (CVE-2015-0235). All kudos go to Qualys Security

godylockz/cve-2023-40028

POC for CVE-2023-40028: Ghost CMS Arbitrary File Read

arm13/ghost_exploit

CVE-2015-0235 EXIM ESTMP GHOST Glibc Gethostbyname() DoS Exploit/PoC

zhou-cybersecurity-ai/synghost

Syntactic Ghost: An Imperceptible General-purpose Backdoor Attacks on Pre-trained Language Models

eqstlab/cve-2026-26980

Ghost Content API SQL Injection