portbuster1337

Decentralized C2 framework built on libp2p

Arachne C2 is a Go-based command-and-control framework for authorized red-team testing that routes implant communications over a decentralized peer-to-peer network (IPFS/DHT) instead of a fixed server, making traffic harder to block or attribute.

Multi-architecture Linux privilege escalation toolkit with 19 pre-built and runtime-compilable exploits. Auto-detects kernel version, filters patched exploits, tries each until root.

CVE-2026-27771 - Gitea/Forgejo Container Registry Auth Bypass Exploit PoC - Pull private container images without authentication

Gogs RCE via argument injection in git rebase (CWE-88) — Python PoC. No CVE yet.

CVE-2026-20182 PoC - Cisco Catalyst SD-WAN Controller / Manager Authentication Bypass (CVSS 10.0)

MongoDB user enumeration tool exploiting the authenticate command (UserNotFound leak) and saslSupportedMechs in hello. No dependencies, pure Python standard library.

A native, user-mode, multi-process, graphical debugger.

CVE-2026-46376 - FreePBX Unauthenticated UCP Access via Hard-Coded Credentials

XWiki Platform - CVE-2026-33137 PoC - Unauthenticated XAR Import via REST /wikis/{wikiName}

CVE-2026-33712 - Typebot <= 3.15.2 Unauthenticated SSRF via isolated-vm sandbox fetch