LABS@ITRES Claim this profile

Repository with tools, exploits, and material associated with the analysis and discovery process of CVE-2025-31702 and other related security issues.

CVE-2025-1868: Advanced IP Scanner & Advanced Port Scanner NTLM Leakage HTTP Tester

ESXimulate is a Python-based low-interaction honeypot designed to simulate a VMware ESXi environment. It serves fake ESXi web client pages and responds to specific HTTP and HTTPS requests to mimic the behavior of a real ESXi server. A open-source module of our own cyberdeception suite.

USBCoercer turns an ESP32 development board with native USB-OTG into an Ethernet-over-USB gadget capable of coercing proxy configuration via WPAD.

A suite of tools built to support "CMS Media Timeleaks" research

CVE-2025-68686: Check remotely if a Fortigate has been fixed and/or is compromised vs the Symlink Persistence method used by TA

Defensive toolkit to detect Supply Chain Necromancy and reborn namespaces in JitPack dependencies.

Source-derived GLPI plugin surface mapper for building canonical plugin path wordlists and probing reachable code paths under /plugins/ and /marketplace/.

wp2shell Pre Authentication RCE in WordPress Core Checker

This repository is a reproducible LLM "folding" implementation for DeepSeek-V4-Flash GGUF files in a pinned `llama.cpp` fork. It was built around the expert-pool consolidation proposed by ConMoE, then adapted to produce a physically smaller GGUF and execute it on the ROCm/HIP backend.

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]

Python code that extracts plaintext passwords using as input a BASE64-encoded authpassword encypted string contained in a CSV AddressBook file exported from an HP M775 printer