CVE-2022-29072

INFORMATION I haven't posted any poc code anywhere for privilege escalation attack. The poc codes found have nothing to do with privilege escalation. For your information. About 7-zip 7-Zip is a free and open-source file archiver. The command line version of 7-Zip is also available for Unix-like...

TriforceAFL

New: For those looking to play with TriforceAFL and TLSF, Richard Johnson created a Dockerfile which installs both and even builds a Linux kernel for you. It's available here https://hub.docker.com/r/moflow/afl-triforce/tags/. Also new: afl-tmin now works with the forkserver!...

joy

| |/ | | | | | | | || |/ |/ , | |/ | / A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring. TLS Fingerprinting Addendum: For our most recent network fingerprinting tools and data, please see Mercury. Overview Joy is ...

weightBufs

WeightBufs: WeightBufs is a kernel r/w exploit for all Apple devices with Neural Engine support. Bugs and Exploit by @simo36, you can read my presentation slides at POC for more details about the vulnerabilities and the exploitation techniques. The exploit doesn't rely on any hardcoded address or...

WonkaVision

WonkaVision WonkaVision is a proof of concept POC tool to analyze Kerberos tickets and attempt to determine if they are forged. This tool was created by Charlie Clark and Andrew Schwartz. It should be noted that this POC is not intended to be a production-ready enterprise application, but rather ...

ExecASLR-ekoparty

ExecASLR - Abusing Intel branch predictors to bypass ASLR What is ASLR Address Space Layout Randomization is a mitigation used to make harder to exploit memory corruption attacks. In a scenario of a buffer overflow vulnerability, for example, an attacker that tries to make a Return Oriented...

reflector

reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...

PR0CESS

PR0CESS some gadgets about windows process and ready to use :...

blind-ssrf-chains

Introduction What is Server Side Request Forgery SSRF? Server Side Request Forgery occurs when you can coerce a server to make arbitrary requests on your behalf. As the requests are being made by the server, it may be possible to access internal resources due to where the server is positioned in...

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 is a Passive Open Source Intelligence OSINT Automated Reconnaissance framework 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 can be used by Infosec Researchers, Penetration Testers, Bug Hunters to find deep information, more assets, WAF/CDN bypassed IPs, Internal/External Infra, Publicly exposed leaks and many...

CVE-2022-4174_CVE-2022-41742

CVE-2022-4174CVE-2022-41742 PoC for CVE-2022-4174CVE-2022-41742 to determine if Nginx 1.22.1 is vulnerable [email protected] This PoC allows determining if an Nginx server version 1.22.1 is vulnerable to certain known vulnerabilities, including: CVE-2022-41741 : Memory corruption in the...

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Simple Proof of Concept Tool 🛠 About This Application This tool shows a technical proof of concept PoC for the security issue CVE-2026-2472. The issue affects the Vertex AI Python SDK from Google Cloud Platform. It relates to an unauthenticated and...

CVE-2025-67511

CVE-2025-67511: Tricking a Security AI Agent Into Pwning Itself Hacktive Security blog post for CVE-2025-67511 Blog Post Link : https://www.hacktivesecurity.com/blog/2025/12/10/cve-2025-67511-tricking-a-security-ai-agent-into-pwning-itself/ TL;DR A command injection vulnerability in the function...

anti-jndi

anti-jndi Fun things against the abuse of the recent CVE-2021-44228 Log4Shell vulnerability using common web servers. Based on the post by @shipilev https://gist.github.com/shipilev/92e709a868f3d328b6636e1bfc21cf09 I ported his example to Apache2. A coworker did it for Lighttpd. I decided to make...

Unwinder

Content SilentMoonWalk Description Credits Usage callfunction! macro indirectsyscall! macro Parameter passing Examples Calling kernel32.dll!Sleep Calling kernel32.dll!OpenProcess Calling NtDelayExecution as indirect syscall Concatenate macro calls Considerations Initial frame PoC Stack replacemen...

TJ-OSINT-Notebook

TJ-OSINT-Notebook Intial Release November 18th 2022 Main Purpose: This OSINT Notebook provides an overview of the tools, techniques, and resources that I use for a variety of situations for performing reconaissance and OSINT operations. This Notebook has helped me in many situations to learn more...

fuzzing-templates

Fuzzing Templates Community curated list of fuzzing templates for the nuclei engine to find unknown security vulnerabilities. Documentation • Contributions • Discussion • Community !Caution This repository is archived and merged into nuclei-templates project under /dast directory. Fuzzing templat...

IATelligence

IATelligence IATelligence is a Python script that extracts the Import Address Table IAT from a PE file and uses OpenAI's GPT-3 model to provide details about each Windows API imported by the file. The script also searches for related MITRE ATT&CK techniques and explains how the API could...

printer-cracktro

printer cracktro My Pwn2Own entries for Pwn2Own Toronto 2022 targeted two different printers. One is Linux based Lexmark and other is DryOS based CANON. After pwning the software on the printer the entries would display a little oldschool crack-intro animation thing to celebrate/illustrate the...

AdvSim.Cryptography

AdvSim.Cryptography The AdvSim.Cryptography NuGet contains a set of cryptographic wrapper functions which are reusable, configured with sane defaults and are easy to use. Further details are available under the different subheadings below. Symmetric Key Material Generation AES Triple DES RC4 RC2...