authcov

AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...

PentestingEverything

PentestingEverything Una base de conocimiento completa y buscable sobre pruebas de penetración en 23 dominios de seguridad. Sitio web en vivo: pentesting.m14r41.in Sitio web en vivo · PentestingChecklist · Contribuir · Reportar un problema Léelo en línea en pentesting.m14r41.in : completamente...

moonwalk

moonwalk: DLL Base Address Finder This Rust library and CLI tool demonstrates an alternative method to find the base address of loaded DLLs without using a Process Environment Block PEB walk. This technique is particularly useful in scenarios where PEB walking might be detected or blocked. Branch...

Red-Teaming-TTPs

!CAUTION Este repositorio contiene chuletas, notas y scripts relacionados con mi aprendizaje en ciberseguridad, particularmente Red Teaming. Encontrarás una variedad de recursos que he recopilado a lo largo de los años, incluyendo: Cheatsheets : Guías de referencia rápida para herramientas y...

detect-secrets

detect-secrets Acerca de detect-secrets es un módulo con un nombre muy adecuado para sorpresa, sorpresa detectar secretos dentro de una base de código. Sin embargo, a diferencia de otros paquetes similares que se centran únicamente en encontrar secretos, este paquete está diseñado pensando en el...

WP BASE Booking - Reflected XSS

WP BASE Booking of Appointments, Services and Events WordPress plugin 5.0.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before output, letting attackers execute malicious scripts in high privilege users' browsers, exploit requires victim to...

Appium base-driver <=10.6.0 - Reflected Cross-Site Scripting

Appium = 10.7.0 contains a reflected XSS caused by unescaped reflection of throwError query parameter, comments POST field, and User-Agent header in base-driver routes, letting remote attackers execute arbitrary JavaScript, exploit requires crafted HTTP requests. id: CVE-2026-58191 info: name:...

process_overwriting

Process Overwriting Process Overwriting is a PE injection technique, closely related to Process Hollowing and Module Overloading. With its help, you can replace the main executable not a DLL of the target process. It works only for a newly created process - injection to existing processes is not...

frameworks_base_AOSP10_r33_CVE-2021-20138

This repository does not have a README...

kali-docker

Official Kali Linux Docker This Kali Linux Docker image provides a minimal base install of the latest version of the Kali Linux Rolling Distribution. There are no tools added to this image, so you will need to install them yourself. For details about Kali Linux metapackages, check...

CVE-2026-97911

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM region size matches job It is possible for userspace to set the job SRAM size to 0, but then still have SRAM accesses in the command stream. When the job SRAM size is 0, setting the region base register...

WindowsPatchDetector

Experimental Windows .text section Patch Detector ====================== Experimental: Windows .text section compare - disk versus memory Original Idea After reading about the Skeleton Key malware http://www.secureworks.com/cyber-threat-intelligence/threats/skeleton-key-malware-analysis/ develop ...

kasld

KASLD recovers the Linux kernel's virtual and physical memory layout — primarily the kernel text base — from a local process. What it can recover is a function of that process's vantage: its privileges and capabilities, the system's configuration, and any container confinement. It recovers the ba...

racketeer

Proyecto Racketeer - Toolkit de simulación de ransomware El objetivo de este proyecto es proporcionar una forma para que los equipos simulen y prueben la detección de operaciones comunes de ransomware, de manera controlada, contra un conjunto de activos de la empresa y puntos finales de red. Mode...

framework_base_AOSP10_r33_CVE-2021-0683_CVE-2021-0708

This repository does not have a README...

framework_base_AOSP10_r33_CVE-2021-0306_CVE-2021-0317

This repository does not have a README...

CVE-2026-76578

CVE-2026-76578 — FreeIPA Anonymous Admin Takeover Product: FreeIPA 4.9.x – 4.13.3 Severity: Critical CVSS 9.8 Fixed: FreeIPA 4.13.4 / 389-ds-base 3.2.0-10.el102 RHSA-2026:64785 Legal Notice This proof-of-concept was developed and executed exclusively within an isolated, privately owned lab...

basecrack

BaseCrack Decodificador para esquemas de codificación Base BaseCrack es una herramienta escrita en Python que puede decodificar todos los esquemas de codificación base alfanuméricos. Esta herramienta puede aceptar entrada de un solo usuario, múltiples entradas desde un archivo, entrada desde...

frameworks_base_AOSP10_r33_CVE-2021-0433

This repository does not have a README...

elfloader

Summary elfloader is a super simple loader for ELF files that generates a flat in-memory representation of the ELF. Pair this with Rust and now you can write your shellcode in a proper, safe, high-level language. Any target that LLVM can target can be used, including custom target specifications...