CVE-2025-8088

CVE-2025-8088 PoC Educational Use Only Details about this CVE can be found at: https://nvd.nist.gov/vuln/detail/CVE-2025-8088 ⚠️ Warning: This repository contains a proof-of-concept PoC for CVE-2025-8088. It is intended for educational purposes, research, and lab environments only. Do not use this...

wa-tunnel

wa-tunnel - TCP Tunneling through Whatsapp This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts. This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits A collection of exploits and documentation for penetration testers and red teamers that can be used to aid the exploitation of the Linux Dirty Pipe vulnerability. About The Vulnerability Dirty Pipe CVE-2022-0847 is a local privilege escalation vulnerability in the...

CVE-2024-20338

CVE-2024-20338 advisory This repository contains demo files for my talk at Behind The Code conference in Limassol. Disclaimer All these materials are provided as is and are intended only for educational purporses. Author have no responsibility for any malicious actions made by someone else. Autho...

Manalyze

Manalyze Introduction Manalyze is a static analysis tool for PE files that you can use to conduct primary assessment on an executable or set of executables. It collects weak signals that could indicate malicious behavior and displays information that can help a subsequent manual analysis. If you...

CVE-2023-49545

CVE-2023-49545 Customer Support System 1.0 - Directory Listing Description : A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authentication/authorization. Vulnerable Product Version :...

fernflower

fernflower Quickly decompile class files in the terminal Usage: Usage: java -jar fernflower.jar -= + Example: java -jar fernflower.jar -dgs=true c:\my\source\ c:\my.jar d:\decompiled\ Ps: No more need for jd-gui, it is more powerful than jd-gui...

CVE-2020-29666

CVE-2020-29666 Directory Listing Suggested description In Lan ATMService M3 ATM Monitoring System 6.1.0, due to a directory listing vulnerability, a remote attacker can view log files, located in /websocket/logs/, that contain a user's cookie values and the predefined developer's cookie value...

PrivKit

PrivKit A collection of Beacon Object Files BOFs for Windows Local Privilege Escalation Checks. Description PrivKit is an open-source tool that empowers red teamers and penetration testers to quickly identify common Windows local privilege escalation vectors using Cobalt Strike Beacon Object File...

CVE-2024-24576-PoC

CVE-2024-24576 PoC The Command::arg and Command::args APIs state in their documentation that the arguments will be passed to the spawned process as-is, regardless of the content of the arguments, and will not be evaluated by a shell. This means it should be safe to pass untrusted input as an...

BRC4-BOF-Artillery

Generic This repository includes a collection of generic BOFs I wrote over a period of time. This repository solely focuses on porting and execution, without modifying the original source for stability. While I may conduct further testing in the future, this is not officially supported. Contact...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

sniffles

Sniffles--Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or...

CVE-2011-2461_Magento_Patch

CVE-2011-2461MagentoPatch By Edmonds Commerce This CVE relates to a CSRF vulnerability in the Adobe Flex .swf files used by Magento. You can find more information regarding the CVE here: Peter O'Callaghan - Magento CSRF vulnerability via Adobe Flex Minded Security - The old is new, again...

CVE-2019-3396-confluence-poc

CVE-2019-3396-confluence-poc Vulnerability verification txt and template files...

kali-preseed-examples

Kali Preseed Examples Debian preseed files are useful tools to automate installation and configuration of a Debian-based distribution. Kali is able to utilize these to speedup installations with a hands-off, customized, consistent installation. For much more info on preseed files, please consult...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

CVE-2022-24442

CVE-2022-24442: FreeMarker Server-Side Template Injection in JetBrains YouTrack By inserting malicious content in the Notification FTL files, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE...

SysWhispers3

SysWhispers3 SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. Official Discord Channel Come hang out on Discord! Why on earth didn't I create a PR to SysWhispers2? The reason for SysWhispers3 to be a standalone version are many, but the...

CVE-2023-42326

pfSense 2.7.0 Command Injection Exploit CVE-2023-42326 This Python script is a Proof-of-Concept PoC exploit for the command injection vulnerability CVE-2023-42326 in pfSense 2.7.0. The vulnerability allows authenticated attackers to inject and execute arbitrary commands via the...