DIBF

DIBF Windows Driver IOCTL Tool Suite. DIBF Dynamic Ioctl Brute-Forcer and fuzzers This tool encompasses two distinct features. It guesses the IOCTL values that the driver accepts and also their valid size limitations and store the results are in a file for future reuse. The second feature is...

kong

Kong: The Agentic Reverse Engineer LLM orchestration for reverse engineering binaries What is Kong? Most tasks follow a linear relationship: the more difficult a task, the longer it usually takes. Reverse engineering and binary analysis is a task in which the actual difficulty is somewhat trivial...

project_mantis

Project Mantis: Hacking Back the AI-Hacker Prompt Injection as a Defense Against LLM-driven Cyberattacks Install Mantis pip install -r requirements.txt Run Mantis with pre-made configurations Various pre-made configurations are available in the ./confs directory. Hack-back An example of a Mantis...

athena

Dive into a new Pentesting Experience with Athena OS 🏅Born for InfoSec Professionals, Bug Bounty Hunters, Passionate Students and Spicy Hackers🏅 💞 Get Athena OS Now! 💞 Click Docker icon above to explore Athena OS Docker containers! Click the icon above to explore Athena OS WSL in Microsoft Store...

CVE-2020-7931

CVE-2020-7931: SSTI exploitation in Artifactory Pro CVE-2020-7931 is somewhat of a purposeful misconfiguration vulnerability in Artifactory that lets attackers conduct server-side template injections from a FreeMarker template. The vulnerability was discovered by Ryan Hanson from Atredis and was...

enum4linux-ng

enum4linux-ng A next generation version of enum4linux enum4linux-ng.py is a rewrite of Mark Lowe's former Portcullis Labs now Cisco CX Security Labs enum4linux.pl, a tool for enumerating information from Windows and Samba systems, aimed for security professionals and CTF players. The tool is main...

cabir_analysis

description: Bluetooth-Worm:SymbOS/Cabir Analysis Bluetooth-Worm:SymbOS/Cabir Analysis Before you start reading , i have to do this announcement : PLEASE TAKE EVERYTHING YOUR READ WITH A PINCH OF SALT AS I'M NO WHERE A SymbianOS developer or anything familiar with SymbianOS environment But why ev...

ibm-sterling-b2b-integrator-poc

IBM Sterling B2B Integrator PoC Proof of concept code for the exploitation of the vulnerabilities discovered against IBM Sterling B2B Integrator, versions 6.2.0.0 to 6.2.0.2, and 6.0.0.0 to 6.1.2.5 for Linux, Windows and AIX systems: LPE Command Injection - if authentication is disabled Pre-auth...

CaA

Insight into information, exploring with intelligence in a thousand ways. First Author: EvilChen Second Author: 0chenccMystery Security Team Third Author: MingXiMystery Security Team README Version: English | 简体中文 Project Introduction CaA is an auxiliary project in the field of cybersecurity...

VEN0m-Ransomware

VEN0m Ransomware https://github.com/user-attachments/assets/5a1fc9b5-a647-41f6-a152-7b9d97381adc This project demonstartes how a legit, and signed driver can be weponized to evade defenses and deploy ransomware simulating a real cyberattack. 🚨 Tested on Windows 11 Pro 24H2. Fully undetectable as ...

gha-lab-6c3094af9e

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of openlit/openlit at commit...

CVE-2025-55182

CVE-2025-55182 — React Server Components Unauthenticated RCE Severity: Critical — CVSS 10.0 CWE: CWE-502 Deserialization of Untrusted Data Vendor: Meta Facebook Disclosed: December 3, 2025 Overview CVE-2025-55182 is a maximum-severity unauthenticated remote code execution RCE vulnerability in Rea...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

CVE-2024-53677-Exploitation

CVE-2024-53677 Exploitation Apache Struts RCE via File Upload Description CVE-2024-53677 is a vulnerability which impacts Apache Struts from 2.0.0 before 6.4.0. ⚠️ This was exploited in a Hack The Box lab. File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params...

Starlink-FI

Starlink User Terminal Modchip This repository accompanies the talk titled "Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal". A slide deck is available here, a recording of the talk should be available soon. The talk covers how we managed to execu...

FreeMOCA

Continual Learning Trajectory as Memory for Replay-Free Consolidation in Malicious Code Analysis !NOTE This is official implementation of the paper Continual Learning Trajectory as Memory for Replay-Free Consolidation in Malicious Code Analysis. FreeMOCA Pipeline FreeMOCA operates in the followin...

CVE-2019-0211-exploit

CVE-2019-0211 — Apache HTTP Server Local Privilege Escalation CARPE DIEM Description CVE-2019-0211 is a local privilege escalation vulnerability affecting Apache HTTP Server between versions 2.4.17 and 2.4.38 using modprefork and modphp or PHP-FPM. The vulnerability allows an attacker with a shel...

lazyrecon

/ \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Usage ./lazyrecon.sh -d domain.com To exclude particular subdomains: ./lazyrecon.sh -d domain.com -e excluded.domain.com,other.domain.com About...

xssentinel

XSSentinel — A comprehensive XSS detection framework !CIht...

dorkbot

dorkbot Scan Google or other search results for vulnerabilities. dorkbot is a modular command-line tool for performing vulnerability scans against sets of webpages returned by Google search queries or other supported sources. It is broken up into two sets of modules: Indexers - modules that retur...