EasyTokens

EasyTokens A device-code phishing server for adversary emulation. Captures Microsoft 365 OAuth tokens via the Device Authorization Grant flow. Inspired by GraphSpy. Warning — Authorized Use Only. This tool is intended for penetration testers and red teamers operating under explicit written...

usbsnoop

usbsnoop — live USB transfer sniffer from two fentry hooks A real-time, colorized feed of USB traffic system-wide — built on the two universal URB chokepoints every host-controller driver funnels through, so it works on xHCI/EHCI/OHCI/dwc alike with no per-controller tracepoints and no usbmon...

CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN

CVE-2026-0073 — Android ADBD TLS Authentication Bypass EVPPKEYcmp Type Confusion → Unauthorized ADB Shell 🔥 Overview A critical authentication bypass vulnerability exists in Android's ADB daemon adbd that allows any attacker on the local network to obtain full shell access on a target device...

kin

A new foundation for code. Kin is a graph-native code repository for people and AI agents. It stores source, recorded code relationships, and versioned history as repository state. The graph is the repository model, not a search index maintained beside another repository. Functions, types, and th...

shocker

Shocker Una herramienta para encontrar y explotar servidores vulnerables a Shellshock Referencia: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Publicado como código abierto por NCC Group Plc - https://www.nccgroup.trust/ Desarrollado por: Tom Watson, tom dot watson at nccgroup dot trust...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

vulnerable-next-js-poc

CVE-2025-55182 React2Shell - Prueba de Concepto ⚠️ SOLO PARA INVESTIGACIÓN DE SEGURIDAD Este repositorio contiene una prueba de concepto para CVE-2025-55182 , una vulnerabilidad crítica de ejecución remota de código en React Server Components. Esto es solo para pruebas de seguridad autorizadas y...

OffensiveRust

OffensiveRust My experiments in weaponizing Rust for implant development and general offensive operations. Table of Contents OffensiveRust Why Rust? Examples in this repo Compiling the examples Compiling the examples in this repo Cross Compiling Optimizing executables for size Pitfalls I found...

CrystalSliver

crystal-kit-sliver Kit de evasión Crystal Palace portado a Sliver C2. Esta es la primera versión pública del port de Crystal-Kit Cobalt Strike de rasta-mouse a Sliver. Sigue el mismo patrón cruzado entre C2 probado por Crystal-Kit-Xenon Mythic. Licencia: MIT — Derechos de autor c 2026 Simone...

AFLTriage

AFLTriage AFLTriage es una herramienta para clasificar archivos de entrada que causan caídas usando un depurador. Está diseñado para ser portátil y no requerir dependencias de tiempo de ejecución, aparte de libc y un depurador externo. Admite la clasificación de caídas generadas por cualquier...

CVE-2026-73570

CVE-2026-73570 — Zimbra Collaboration Suite RCE Note: This repository contains an independent technical analysis and PoC reproduction of CVE-2026-73570. It is not the original vulnerability report. Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection CVSS 8.9, CI...

PoC-CVE-2025-66224

OrangeHRM RCE Exploit - CVE-2025-66224 📋 Description This Proof of Concept PoC demonstrates a Remote Code Execution RCE vulnerability in OrangeHRM through command injection in the sendmailpath configuration parameter. The exploit works by: 1. Injecting a malicious payload into the MySQL database...

SSH-Remote-Code-Execution

SSH Remote Code Execution SSH Zero-Day | Made by ClumsyLulz & Taylor Christian Newsome Summary This repository contains a C program that accepts input parameters and generates a packet to be sent to a server over the SSH protocol. The program allocates a buffer to hold the data, writes it to a...

windbg-mcp

WinDbg MCP Un servidor MCP Model Context Protocol que expone cada función del depurador de Windows de pybag como una herramienta nativa de MCP. Le otorga a cualquier cliente compatible con MCP Claude Desktop, Claude Code, Cowork, OpenAI Codex CLI, Cursor y agentes personalizados control total sob...

mariadb-13-rce-lab

MariaDB 13.0.1-rc RCE Lab Remote code execution on the unmodified, stock MariaDB 13.0.1-rc Docker image as uid 999 mysql. Two exploit variants: Variant| File| Requirements| Notes ---|---|---|--- Pure SQL recommended| exploitpuresql.py| a low-priv MariaDB account + TCP| no host access, no docker, ...

CVE-2023-4220-RCE

CVE-2023-4220-RCE Resumen Aviso de Starlabs Producto afectado: Chamilo , -p --port REMOTE PORT -c --comand Banderas para reverse shell -lh/--localhost: IP del atacante -lp/--localtcat listener port...

ruzzy

Ruzzy A coverage-guided fuzzer for pure Ruby code and Ruby C extensions. Ruzzy is heavily inspired by Google's Atheris, a Python fuzzer. Ruzzy uses libFuzzer or LibAFL for its coverage instrumentation and fuzzing engine. Ruzzy also supports AddressSanitizer and UndefinedBehaviorSanitizer when...

MaliciousMacroGenerator

Utilidad Generadora de Macros Maliciosas Utilidad simple diseñada para generar macros ofuscadas que también incluyen un mecanismo de evasión de AV / Sandboxes. Requisito Python 2.7 Uso MMG.Malicious Macro Generator v2.0 - RingZer0 Team Author: Mr.Un1k0d3r [email protected] Usage: MMG.py conf...

CVE-2025-55182-EXP

CVE-2025-55182 Exploitation Tool Tool Introduction This tool is used to detect and exploit the CVE-2025-55182 vulnerability presumably a code execution vulnerability in frameworks related to Next.js. It supports single-target / multi-target batch detection, command execution, interactive shell, a...

CVE-2023-30547

CVE-2023-30547 Vulnerability description vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException...