frida-ios-hook

Frida iOS hook 📍 A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. 👉 For Android platform: frida-android-hook 👉 For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...

open-sesame

open-sesame Contiene informes divulgados de Hackerone y otros writeups de bug bounty. Una herramienta Python que se ejecuta para mostrar informes de Hackerone divulgados públicamente de forma aleatoria cuando estás aburrido. Abre automáticamente el informe en el navegador. Contiene más de 8k...

NmapReportTemplate

Plantilla de Informe de Nmap Plantilla diseñada para mostrar dinámicamente la información obtenida del Escaneo de Nmap Capturas de pantalla Uso 1. Descargue el archivo nmaptemplatereport.xsl y, al ejecutar Nmap , pase el archivo como stylesheet. Ejemplo nmap --open -A -T4 -F --script vulners -oX...

cpufetch

Herramienta simple pero elegante para obtener información de la CPU cpufetch es una herramienta de línea de comandos escrita en C que muestra la información de la CPU de forma limpia y hermosa Índice de contenidos 1. Soporte 2. Instalación 2.1 Instalación desde un paquete 2.2 Compilación desde el...

TChopper

TChopper Nueva técnica que he descubierto recientemente y le he dado un apodo Chop chop para realizar movimiento lateral utilizando el nombre para mostrar de servicios de Windows y WMI, contrabandeando el binario malicioso como fragmentos base64 y automatizando el proceso con la herramienta...

Overglade-Badges

Insignias del Hackathon Overglade ¡Estas son insignias de hackathon de cero energía que diseñé para el hackathon overglade en Singapur! Funcionan con el RP2040 y tienen NFC pasivo y un controlador de tinta electrónica integrado. Funcionalidades Personalizadas Toque NFC pasivo para lo que tu coraz...

Guide-and-theoretical-code-for-CVE-2023-35674

Guide-and-theoretical-code-for-CVE-2023-35674 Guide and theoretical code for CVE-2023-35674 Because android is out of my skill league please use this as a high overview from my pov on how i would exploit this cve. the code snippets are just skeletons , please help : So first of all u can't exploi...

CVE-2021-44228

CVE-2021-44228 checker This is the repository for checking for vulnerability CVE-2021-44228. This is a PoC that only displays strings without any external class loading. It cannot be used for arbitrary code execution. How it works? Step 1: Run the server application The image...

EDIDFuzzer

EDID fuzzer A tool for fuzzing Enhanced Display Identification Data Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com https://www.github.com/nccgroup/EDIDFuzzer Released under AGPL see LICENSE for more information...

PrecIR

PrecIR Colección de herramientas de software y hardware, su código fuente y archivos de diseño para comunicarse con etiquetas electrónicas de estantería basadas en infrarrojos. Vea http://furrtek.free.fr/index.php?a=esl para la ingeniería inversa del sistema, el protocolo y la electrónica. Gracia...

gdb-dashboard

GDB dashboard GDB dashboard es un archivo .gdbinit independiente escrito utilizando la Python API que habilita una interfaz modular que muestra información relevante sobre el programa que se está depurando. Su objetivo principal es reducir la cantidad de comandos de GDB necesarios para inspeccion...

SharpCookieMonster

SharpCookieMonster .&@. .@@. &&&@ @/ @ @ & ,& &@@@@/ &/ @ &@ @@@@@@@@ @. @. @@/ @ @@@@@@@/ @, @@ @ @@@@@@@@ && %%/%%&//... /% @@@@@@@@ @ ,@///////@. .@..@, %@@ &/////@@. .&@/////////////////&@. &%///@. &/////////////////////////%@ @/////////////////////////////////////////////////@//&@...

CVE-2026-104968 Plane: Cross-workspace member enumeration via /api/workspaces/{slug}/entity-search/

Plane is an open-source project management tool. Prior to 1.4.0, GET /api/workspaces/slug/entity-search/?querytype=usermention returns workspace-member display names, UUIDs, and avatar URLs to any authenticated user who knows the workspace slug, even when the caller is not a workspace member. The...

CVE-2025-29306

POC - CVE-2025-29306 FOXCMS /images/index.html Code Execution Vulnerability Overview An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component. Full POC Read about it — CVE-2025-29306 Disclaimer : This Proof of Concept POC ...

termshark

Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...

pyvex

PyVEX PyVEX is Python bindings for the VEX IR. Project Links Project repository: https://github.com/angr/pyvex Documentation: https://api.angr.io/projects/pyvex/en/latest/ Installing PyVEX PyVEX can be pip-installed: pip install pyvex Using PyVEX import pyvex import archinfo translate an AMD64...

CVE-2025-29306_poc

Description Published: 2025-03-27 Updated: 2025-03-27 An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component. Usage: python testpoc.py -u http://192.168.0.1/images/index.html "id" python testpoc.py -f url.txt "id"...

CVE-2026-20533

In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11296678; Issue ID: MSV-9167...

CVE-2026-20530

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195...

CVE-2026-20533

In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11296678; Issue ID: MSV-9167...