Exploitarium-Detections

Exploitarium KQL Detection Coverage KQL detection rules for Microsoft Sentinel and Defender XDR covering the bikini/exploitarium anonymous disclosure — a personal research archive of 15+ distinct vulnerability targets across 109+ tracked files, released without vendor notification on June 23, 202...

inceptor

🚩 This is the public repository of Inceptor, for latest version and updates please consider supporting us through https://porchetta.industries/ 🚩 Sponsors If you want to sponsors this project and have the latest updates on Inceptor, latest issues fixed, latest features, please support us on...

InjectProc

InjectProc Process injection is a very popular method to hide malicious behavior of code and are heavily used by malware authors. There are several techniques, which are commonly used: DLL injection, process replacement a.k.a process hollowing, hook injection and APC injection. Most of them use...

Responder

Responder Responder is a LLMNR, NBT-NS, and MDNS poisoner with built-in rogue authentication servers for HTTP, SMB, MSSQL, FTP, LDAP, Kerberos, DNS, and more. It supports NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP, and various authentication methods across 15+ protocols. Table of Contents...

unicorn

unicorn Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Magic Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

CVE-2020-0796

CVE-2020-0796 CVE-2020-0796 explanation and researching vulnerability for term porject CENG325 for beginners How to exploit? Userpayload generation for reverse shell: msfvenom -a x64 --platform windows -p windows/x64/shellreversetcp LHOST= LPORT=5555 -f python listening port: nc -lvnp 5555 exploi...

CVE-Lab

CVE-2023-46604 Lab This lab guides on exploiting vulnerabilities of CVE-2023-46604 Acknowledgements Apache ActiveMQ CVE-2023-46604 Environment This lab requires the installation of 2 virtual machines. One Kali Linux machine version 2023.4 and one Ubuntu machine version 22.04.3 LTS. You can downlo...

CVE-2019-0708

CVE-2019-0708 PoC Shellcode only tested on x86 versions of Windows thus far. Be responsible and only use this with good intentions...

Pegasus-Pentest-Arsenal

Pegasus Pentest Arsenal PPA /\ / | / \ | \ | || | | | | / | /| |/ |/ |/ ,/; ; ; ,'/|; ,/,/, ,'/ |;/,/,/,/| ,/; |;|/,/,/,/,/| ,/'; |;|,/,/,/,/,/| ,/'; |;|/,/,/,/,/,/|, / ; |;|,/,/,/,/,/,/| / ,'; |;|/,/,/,/,/,/,/| /,/'; |;|,/,/,/,/,/,/,/| /;/ '; |;|/,/,/,/,/,/,/,/| ██████╗ ███████╗ ██████╗ █████╗...

cloudgoat

CloudGoat ☁️🐐...

Nextjs_Exploit_Tool

Next.js RSC RCE Exploit Tool CVE-2025-55182 Project Introduction CVE-2025-55182 is a high-severity vulnerability in Next.js's Server Component RSC processing chain. An attacker can craft special multipart/form-data requests and forged RSC response chunks to induce the server to execute arbitrary...

CVE-2026-20841

🛡️ CVE-2026-20841 - Windows Notepad Security Test Tool ⚠️ What is CVE-2026-20841? CVE-2026-20841 is a known security weakness in the Windows Notepad application. It affects the markdown feature, which lets Notepad display formatted text with clickable links. This weakness happens because the...

Inline-Execute-PE

Inline-Execute-PE DISCLAIMER: This project is complex and failure to understand how it works and adequately test it can result in you crashing Beacons and losing access! I highly encourage you to read all of the documentation up until the "Design Considerations and Commentary" section! Introducti...

trust-my-agent-ai

🛡️ TrustMyAgent Security bodyguard for OpenClaw agents Website • Trust Center • Quick Start • Contributing An EDR-like security agent for OpenClaw agents. Runs 41 security checks across 14 domains, calculates a trust score 0-100, and sends telemetry to a centralized Trust Center dashboard where...

Tallow

Tallow - Transparent Tor for Windows Tallow is a small program that redirects all outbound traffic from a Windows machine via the Tor anonymity network. Any traffic that cannot be handled by Tor, e.g. UDP, is blocked. Tallow also intercepts and handles DNS requests preventing potential leaks...

cve-2021-38647

cve-2021-38647 https://github.com/corelight/CVE-2021-38647 without the bloat CVE-2021-38647 AKA "OMIGOD" A Zeek package which detects CVE-2021-38647 AKA OMIGOD exploit attempts. https://corelight.com/blog/detecting-cve-2021-38647-omigod...

cve-2019-3396

Confluence unauthorised template injection CVE-2019-3396 I Building This bug occurs on the following versions: All versions 1.x.x, 2.x.x, 3.x.x, 4.x.x and 5.x.x All versions 6.0.x, 6.1.x, 6.2.x, 6.3.x, 6.4.x and 6.5.x All versions 6.6.x before 6.6.12 All versions 6.7.x, 6.8.x, 6.9.x, 6.10.x and...

CVE-2025-55182

Affected Versions Component| Recommended Version for Reproduction| Vulnerable Version Range ---|---|--- Node.js| = 20.9.0| 20.9.0 LTS and above Next.js| 15.0.0| 15.x, 16.x App Router React Core| 19.0.0 or 19.2.0| 19.0.0 to 19.2.0 RSC Bundler| react-server-dom-webpack| 19.0.0 to 19.2.0 Build and...

CVE-2023-25690-POC

CVE 2023 25690 - Proof of Concept Published: 7 March 2023 Base score| Confidentiality| Integrity impact| Availability impact ---|---|---|--- 9.8| High| High| High Table of contents Advisory Description Vulnerable Apache Configuration Breakdown Data Flow Lab Setup HTTP Request Splitting causing HT...