ConscryptTrustUserCerts

Magisk - Conscrypt: confiar en certificados de usuario Este módulo hace que todos los certificados de usuario instalados pasen a formar parte del almacén de certificados del módulo APEX com.android.conscrypt en Android 14, de modo que se utilicen automáticamente al construir la cadena de confianz...

CVE-2024-54679

CVE-2024-54679 CVE-2024-54679 - CyberPanel aka Cyber Panel Denial of Service Description A denial of service DoS vulnerability was discovered in Cyber Panel that allows any authenticated user to restart the database by sending requests to the /dataBases/restartMySQL endpoint. This vulnerability...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

faraday

Gestor de Vulnerabilidades de Código Abierto La seguridad tiene dos tareas difíciles: diseñar formas inteligentes de obtener nueva información y hacer un seguimiento de los hallazgos para mejorar los esfuerzos de remediación. Con Faraday, puedes centrarte en descubrir vulnerabilidades mientras...

CVE-2023-33253

CVE-2023-33253 LabCollector 6.0 though 6.15 allows remote code execution An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file such as...

ssh_enum_py

sshenumpy SSH user enumeration script based on timing differences and authentication responses. Exploits the same vector as CVE-2018-15473 in vulnerable versions of OpenSSH ≤ 7.7, although it can also reveal patterns in modern configurations. Works with Python 3 + Paramiko and supports: Banner...

CredSpy

CredSpy Enumerate Microsoft Entra ID authentication methods for email addresses using the public GetCredentialType API. This is the same endpoint the Microsoft login page uses when you enter a username. In contrast to most tools using the GetCredentialType method, CredSpy also shows the...

CVE-2025-22963

Overview Cross-site request forgeryCSRF vulnerability in Teedy versions = v1.11 allows remote attackers to force an end user to change their user informationusername, password, etc... on the web application in which they're currently authenticated. Vulnerability User information change endpoint i...

seekr

A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...

kernel-exploits

Exploits del kernel Varios exploits del kernel CVE-2021-22555 Exploit local de root en Linux. Versión actualizada del exploit de theflow para CVE-2021-22555. Se descubrió una escritura fuera de los límites del heap que afecta a Linux desde v2.6.19-rc1 en net/netfilter/xtables.c. Esto permite a un...

poppy

poppy : CVE-2021-4034 CVE-2021-4034 PoC , polkit 0.131 Usage Tested on Arch Linux Manjaro & Axyl OS git clone https://github.com/tahaafarooq/poppy make ./poppy Super user creation exploit bash -c "$curl -fsSL https://raw.githubusercontent.com/tahaafarooq/poppy/main/suuser.sh" gcc -shared su.c -o...

CheeseTools

CheeseTools This repository has been made basing onto the already existing MiscTool1, so big shout-out to rasta-mouse for releasing them and for giving me the right motivation to work on them. CheeseExec Command Exec / Lateral movement via PsExec-like functionality. Must be running in the context...

CVE-2023-20198

CVE-2023-20198 - PoC SCRIPT /!\ Disclaimer: This script is provided 'as is' and exclusively for educational purposes. Users are strongly advised to exercise caution and utilize it within the boundaries of legal and ethical considerations. Description Execute various actions on a target web server...

CVE-2018-19410-POC

CVE-2018-19410-POC Proof of concept for the vulnerability CVE-2018-19410 Details PRTG Network Monitor Version: 18.2.39.1661 and earlier Severity level: High Impact: Authentication Bypass, Improper Authorization, Local File Inclusion Access Vector: Remote The vulnerability permits remote and...

CVE-2023-32315-Openfire-Bypass

CVE-2023-32315 0x01 Obtain the returned JSESSIONID and csrftoken, construct a request packet to add a user replace JSESSIONID, csrftoken cd CVE-2023-32315-Openfire-Bypass/scanall go mod tidy go run main.go -u http://openfire.com:9090 0x02 Plugin compilation and installation mvn clean package or...

win32k-callback-detouring

Descargo de responsabilidad Este repositorio se proporciona estrictamente con fines educativos y de investigación defensiva. Demuestra los mecanismos internos de despacho de callbacks de Windows y conceptos de flujo de control relacionados con KernelCallbackTable en un contexto de prueba de...

CVE-2025-32463

Reference: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot Executing the PoC on Ubuntu 24.04.2 LTS server with Sudo v1.9.15p5, using an unprivileged user with no Sudo rules defined, results in a root shell outside of the chrooted environment. lowpriv@prod:/CVE-2025-3246...

opensshenum

Description: Opensshenum is an OpenSsh user enumerator permitting to verify an arbitrary list of user names against an OpenSsh server, to know those actually presents on that remote machine. This program exploits a bug corrected in July 2018 proven to be effective at least starting from OpenSSH...

bluemonday

bluemonday bluemonday es un sanitizador HTML implementado en Go. Es rápido y altamente configurable. bluemonday toma contenido generado por usuarios no confiable como entrada, y devolverá HTML saneado contra una lista blanca de elementos y atributos HTML aprobados para que puedas incluir el...

CVE-2020-14181

CVE-2020-14181 Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the /ViewUserHover.jspa endpoint. This vulnerability was discovered by Mikhail Klyuchnikov of Positive Technologies. Affected...