🛠️ In-House Development & Automations
A catalog of custom-built offensive security tools, research frameworks, and utility setups. Select any card below to view detailed specifications, design blueprints, and execution guides.
PressVector
WordPress Core Pre-Auth RCE & Blind SQLi Framework (CVE-2026-63030 / CVE-2026-60137). Chained REST batch route confusion with time-based blind SQLi to forge admin sessions.
DNSPhantom
Asynchronous DNS Reconnaissance & Security Auditing Framework. Resolver health feedback loop, 20+ takeover signatures, HTML dashboard, and VulnTrace Origin IP Classifier.
NexShell v2.2
Unified Pentest Operations Platform — 58 professional plugins, 112+ source files, 69,000+ LOC, real-time WebSocket web dashboard, Cloud/K8s/AD attack suites. No dependencies.
UAC Apex Framework (AEF) v4.0
Enterprise-grade adaptive UAC elevation framework for Windows. Context-aware technique selection, pre-flight risk scoring, retry/fallback orchestration, and full cleanup pipeline.
DirtyClone Exploit Framework
Professional exploit framework for CVE-2026-46331 — Linux kernel LPE via TC pedit + IPsec page-cache corruption. 8-stage automated attack chain in C + Python.
vuln_hmv
Full-featured HackMyVM CLI — browse VMs, compare local library, resolve MEGA links, submit flags, and view the leaderboard. Includes setup.sh for system-wide install to /usr/local/bin.
mega-download-cli
Batch MEGA downloader with live progress bar, smart selection, HackMyVM direct download, and auto-MEGA-CMD installer for Windows/Linux/macOS.
myrepo on GitHub
Direct access to all open-source repositories, release packages, and custom scripts on my profile.