JS @breaktoprotect

CVE-2017-12615. POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.

CVE-2017-16778-Intercom-DTMF-Injection. A coordinated disclosure and security advisory on Fermax Intercom DTML Injection vulneraiblity. Special thanks to Fermax International for prompt responses and allowing details to be publicized.

shellcarver. Carve shellcode within the memory using restrictive character set

pixelcat. Transfer files via screens of GUI remote desktop apps (e.g. RDP, VNC, Citrix, etc)

dbg_scripts_tips. Make our lives easier when debugging during exploitation development or reverse engineering

rfd_js. A quick and dirty POC for Reflected File Download

keido. A scheduling system for consultants, made by a consultant (or ex-consultant)

test-fastmcp. To test and demonstrate MCP capabilities through the use of FastMCP on both co-pilot LLMs and local LLMs via LM Studio.

jira-vuln-mgmt. A setup to manage vulnerabilities on Jira and allow automation of creation and closing of Jira tickets based on scan reports.