327400 matches found
MAccConc
Overview This is tooling for exploring Linux kernel race conditions and for general kernel debugging. See also the announcement blog post https://projectzero.google/2026/09/maccconc-race-condition.html. There are currently three tools: 1. A GUI for viewing KCOV traces of Linux kernel execution an...
git-scanner
Git Scanner Framework This tool can scan websites with open .git repositories for Bug Hunting/ Pentesting Purposes and can dump the content of the .git repositories from webservers that found from the scanning method. This tool works with the provided Single target or Mass Target from a file list...
WPSniper
WPSniper CVE-2026-87902 detector for WordPress Core. getpagetemplate can be steered so page-template resolution includes a readable local .php file outside the active theme. WPSniper fingerprints the site, picks a published pageid, probes the include class, and only prints VULN when a strong PEAR...
CVE-2019-15514
CVE-2019-15514 Type: Information Disclosure Affected Users, Versions, Devices: All Telegram Users Still not fixed/unpatched. brute.py is available exploit written under python. Description Suppose ali is hacktivist. His telegram user ID is 21788973 and mobile number is hidden. He lives in pakista...
OpenCLAW-P2P
P2PCLAW - Decentralized Autonomous Research Collective P2PCLAW is a decentralized research network where AI agents and human researchers publish, validate, preserve, and evaluate scientific work through open infrastructure. Latest public paper: arXiv:2604.19792, currently revised as OpenCLAW-P2P...
MemShellParty
MemShellParty δΈζ | English !WARNING This tool is intended only for security researchers, network administrators, and related technical personnel for authorized security testing, vulnerability assessment, and security auditing. Using this tool for any unauthorized network attack or penetration tes...
infisical
The open-source security infrastructure platform : Manage secrets, certificates, keys, privileged access, and AI agent access in one platform. Community | Infisical Cloud | Self-Hosting | Docs | Website | X | Hiring Remote/SF Introduction Infisical is the open source security infrastructure...
r3con
R3CON Multifunctional Web Recon & Vulnerability Scanner Tool r3con is a Multifunctional Web Recon & Vulnerability Scanner Tool and incredibly fast crawler that can find multiple vulnerabilitys and gather information. Check for vulnerabilities Reflected XSS Multi-threaded crawling Open-redirection...
CVE-2025-48384
PoC for CVE-2025-48384 See CVE-2025-48384 To run: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Example output: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning into 'test'... done. 'ubmodule...
claude-code-devcontainer
Claude Code in a devcontainer A sandboxed development environment for running Claude Code with bypassPermissions safely enabled. Built at Trail of Bits for security audit workflows. Why Use This? Running Claude with bypassPermissions on your host machine is riskyβit can execute any command withou...
CVE-2020-3452-Exploit
CVE-2020-3452-Exploit Just basic exploit abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of CISCO ASA/FTD applicances. Usage: By default this uses a file list constructed from sample output from CVE-2018-0296 in the Metasploit Framework...
cve-2020-0688
cve-2020-0688 Usage: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD, --password...
aftermath
About Aftermath is a Swift-based, open-source incident response framework. Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an MDM ideally, but it can also run independently from the infected...
evillimiter-ng
Evil Limiter Next Generation Software-blue A tool to monitor, analyze and limit the bandwidth upload/download of devices on your local network without physical or administrative access. evillimiter-ng employs ARP spoofing and traffic shaping to throttle the bandwidth of hosts on the network. New ...
frameless-bitb
Frameless BITB A new approach to Browser In The Browser BITB without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft. This POC code is built for using this new BITB with Evilginx, and a Microsoft Enterprise phishlet. Before diving deep...
santamon
Santamon Lightweight macOS detection sidecar for Santa that evaluates Endpoint Security telemetry locally with CEL rules and forwards only matched detection signals to a backend server. Experimental. Built for home labs and small fleets. Early release β expect bugs and API changes. What It Does...
Cooper
Cooper, noun, a maker or repairer of casks and barrels It's a "fish in a barrel" joke. I enjoy puns! A Python tool for ingesting HTML and producing HTML source suitable for phishing campaigns. Cooper simplifies the process of cloning a target website or email for use in a phishing campaign. Just...
CVE-2014-4322
poc code works on Nexus 5 Android4.4.4 Gain privilegesοΌsystem-rootοΌas part of https://github.com/koozxcv/CVE-2014-7911-CVE-2014-4322getrootprivilege authorοΌandy websiteοΌhttps://blog.csdn.net/koozxcv The exploit must be excuted as system privilege and serveral specific SELinux context.If exploit...
CVE-2019-14079
USB device fuzzing on Android CVE-2019-14079 This blog post is about a simple bug I found in my android deviceMI A2 - runs stock android using USB device fuzzing and was marked as high severity by google. The bug was in Qualcomm USB driver which was later patched and disclosed in March 2020 Andro...
Quantum-Silicon-Core-Loader
Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 under development Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Legally Protected Research - This project operates under established legal frameworks for security research, right to repair, and academic freedom...