pwnage24mtk

pwnage24mtk Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696. Patched. CVE-2023-20696 CVE-2025-20730 There are some issues about architecture detect.Need to be fixed when I am free.Or anyone can make a pull request. This is a vibe-coded...

heimdal

Heimdal Heimdal is an implementation of: ASN.1/DER, PKIX, and Kerberos. For information how to install see here. There are man pages for most of the commands. Bug reports and bugs are appreciated. Use GitHub issues. For more information see the project homepage https://heimdal.software/heimdal/ o...

killerbee

KillerBee KillerBee is a Framework and Tools for Testing & Auditing ZigBee and IEEE 802.15.4 Networks Notice usb0.x support is being deprecated/removed Apimote v1 support is being deprected/removed If you require these features please create an issue to explain your usecase and requirements...

pmkidcracker

Crackeador de PMKID WPA2 Este programa es una herramienta escrita en Python para recuperar la clave precompartida de una red WiFi WPA2 sin necesidad de desautenticación ni requerir que haya clientes en la red. Aprovecha la debilidad de ciertos puntos de acceso que anuncian el valor PMKID en el...

CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-

CVE-2025-24201 Detector de Vulnerabilidad WebKit PoC Esta prueba de concepto detecta si un navegador basado en WebKit es vulnerable a CVE‑2025‑24201 , una vulnerabilidad de escritura fuera de los límites de alta gravedad causada por una validación incorrecta de capacidades en la implementación de...

kekeo

kekeo kekeo es un pequeño conjunto de herramientas que he comenzado para manipular Microsoft Kerberos en C y por diversión Biblioteca ASN.1 En kekeo, utilizo una biblioteca comercial externa para manejar las estructuras ASN.1 de Kerberos: OSS ASN.1/C...

kekeo

kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...

weakpass

Weakpass Here, you can find the list of tools and example of API server from weakpass.com for password and hash cracking in one place. 📂 Folder Structure tools A collection of password and hash cracking tools. Check them out: Kraker-js Lookup Passcheck Passgen libs Links to the libraries used in...

xwiki__xwiki-commons_CVE-2023-29528_14-9-rc-1

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

pyFlipper

PyFlipper Flipper Zero Python CLI Wrapper Articles How to hack a restaurant Functions and characteristics: Flipper serial CLI wrapper Websocket client interface Plain TCP interface What's new firmware 1.x compatibility This release brings the wrapper in line with the current Flipper Zero CLI...

CVE-2024-38399

DISCLAIMER All content provided is for educational and research purposes only. All testing was conducted exclusively on an Samsung Snapdragon Gen 1 device, owned legally by the author, in a safe, isolated environment. No production systems or devices owned by others were involved or affected duri...

EUVD-2026-91988

In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path with no integrity check performed at all. RFC 9580 sec. 13.7 permits an implementation to release the cleartext of the fully authenticated chunks when...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

BOF-pack-1

BOF-pack-1 A care package of useful bofs for red team engagments GetAppLockerPolicy Prints the Effective AppLockerPolicy for the domain TokenElevate Creates a process with winlogon's tokenIncludes Tcb Privilege enabled by default and other winlogon specific privileges. Alternative way to elevate ...

VirtualBox-6.0.0-Exploit-1-day

VirtualBox 6.0.0 Exploit 1-day VBox bugs to be used CVE-2019-2525 : crUnpackExtendGetAttribLocation Information Disclosure CVE-2019-2548 : crServerDispatchReadPixels Integer overflow, leading to Heap overflow these bugs can be triggered when 3D Acceleration is enabled. First, before the...

cve-2017-7529

CVE-2017-7529 Esto es parte de Cved: una herramienta para gestionar contenedores Docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-2017-7529 Autor de la imagen: https://github.com/Medicean/VulApps/tree/master/n/nginx/1...

CVE-2026-24061-payload

Original source:https://github.com/K3ysTr0K3R/CVE-2026-24061 CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass GNU InetUtils versions 1.9.3 through 2.7 are vulnerable to a remote authentication bypass vulnerability in the telnetd server. The telnetd daemon fails to...

CVE-2024-21262

REGISTROS Solo para reproducción de CVEs. Recursos relacionados: LINK GITHUB1 GITHUB2 ISSUE Verificar Entornos Descargar docker-24.0.6.tgz desde https://download.docker.com/linux/static/stable/x8664/. sudo mkdir -p /usr/local/docker-24.0.6 sudo tar -xzf docker-24.0.6.tgz -C /usr/local/docker-24.0...

bandexploit

Band Exploit CVE-2018-11631 A Simple Python script Using Gatttool to exploit an Insecure Bluetooth Low Energy Smart Watch M1 Band 1. CVE-2018-11631 : https://nvd.nist.gov/vuln/detail/CVE-2018-11631 Usage: bandexploit.py options Address Options: -h, --help show this help message and exit -s, --sms...

HashCheck

PasswordHashCheck Este proyecto tiene como objetivo ayudar en la búsqueda de contraseñas filtradas manteniendo un alto nivel de privacidad utilizando el método de k-anonimato. Para lograrlo, se utilizan las API de diferentes servicios, enviando solo una parte del Hash de la contraseña que queremo...