androidReverse

Android Reverse A reverse engineering suite that runs entirely on Android. No PC, no ADB, no desktop tools — everything from APK extraction to native binary analysis, editing, and rebuilding happens on-device. MCP Server androidReverse includes a built-in Model Context Protocol server, allowing...

process-enumeration-stealth

🚴 process-enumeration-stealth What is this? This is a simple PoC which allows you to return a list of PIDs currently using NTFS, by querying the \ntfs\ base device the Windows filesystem base object. Using this method circumvents the need to use typical APIs, such as NtQuerySystemInformation or t...

zephyr_cve-2021-3625

CVE-2021-3625 This repository contains a few example exploits for CVE-2021-3625. All Zephyr-based usb devices up to and including version 2.5.0 suffer from a buffer overflow allowing readout of up to 65kB. Depending on the actual device this may result of leakage of sensitive data like encryption...

zafrida-ui

中文 | English ZAFrida UI - PyCharm Frida Plugin Current Version: 0.3.6 Project Introduction Frida GUI Tool for PyCharm/IntelliJ ZAFrida UI is a Frida graphical interface plugin integrated into PyCharm and JetBrains IDEs. It aims to solve the complexity of Frida command-line operations and script...

Best-Practices-Cybersecurity-Otanata-Project

CP3418BestPracticesCybersecurityOTANATAProject CVE-2024-3273 — Authorized Penetration Test Report D-Link DNS-320L NAS | Client: Otonata Overview This repository contains the full security assessment report for an authorized penetration test conducted on a D-Link DNS-320L NAS device for client...

CVE-2023-7261

CVE-2023-7261 Google Chrome Updater DosDevices Local Privilege Escalation Vulnerability Details: This vulnerability allows local attackers to escalate privileges on affected installations of Google Chrome. An attacker must first obtain the ability to execute low-privileged code on the target syst...

IoT_vuln

POC for TOTOLINK devices: TOTOLINK LR350: CVE-2024-10654 login bypass TOTOLINK T6: CVE-2025-6916 login bypass - for a deeper dive into this CVE, read more at: https://anduinbrian.github.io/posts/blogs/totolink-t6-v3/...

cve-2023-40429-ez-device-name

HostName Overview HostName is a sample application demonstrating how a third-party app can access a user's device name without the com.apple.developer.device-information.user-assigned-device-name entitlement. Details In iOS 16, Apple added the...

prey-android-client

Here you will find all the source code for the current and in development releases of the Prey client for Android devices. Prey is a SaaS platform for device tracking, monitoring, data protection, and device management. Its open-source agent runs on endpoints and connects to a centralized control...

DIY_WhisperPair

DIY-WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkit OFFICIAL IMPLEMENTATION NOW LIVE , thanks to the team at KU Leuven Thanks for the shoutout LEGAL NOTICE : This is a security research tool. ReadLEGAL.md before use. Unauthorized access to computer systems...

Device-Reversing

Device-Reversing This repo contains device reversing write-ups. Available in the Wiki!...

COMahawk

COMahawk Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322 Video Demo https://vimeo.com/373051209 Usage Compile or Download from Release https://github.com/apt69/COMahawk/releases 1. Run COMahawk.exe 2. ??? 3. Hopefully profit or 1. COMahawk.exe "custom command to run" ie...

AdbNet

adb - An exploitation tool for android devices. A tool that allows you to search for vulnerable android devices across the world and exploit them. Features Features: - Post-Exploitation modules to control and tinker with the device you are connected to. - Scanners to search for vulnerable android...

CVE-2020-25749

CVE-2020-25749 Suggested description The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a...

Hardware Hacking Cheatsheet

Hardware Hacking Cheatsheet TOC Disclaimer I'm a noob who's trying to learn this type of things so maybe something could be not 100% correct Sorry for bad english Notes Follow the easyest path first methodology Sometimes you will need to solder stuff; here a quick and simple how to You could have...

CVE-2025-25257

Fortinet FortiWeb CVE-2025-25257 Vulnerability Tester Description This PowerShell script is designed for authorized penetration testing purposes only. It tests Fortinet FortiWeb appliances for CVE-2025-25257, an unauthenticated SQL injection vulnerability in the /api/fabric/device/status endpoint...

killcast

Manipulate Chromecast Devices in your Network Available in Inspiration - Thousands of Google Chromecast Devices Hijacked to Promote PewDiePie This tool is a Proof of Concept and is for Research Purposes Only, killcast shows how Chromecast devices can be easily manipulated and hijacked by anyone...

CVE-2020-35575-TP-LINK-TL-WR841ND-password-disclosure

CVE-2020-35575-password-disclosure-issue-in-the-web-interface A password-disclosure issue in the web interface on certain TP-Link devices allows a remote malicious user to get full administrative access to the web panel. This affects WA901ND devices prior to 3.16.9201211 beta, and Archer C5, Arch...

device-pharmer

device-pharmer Concurrently open either Shodan search results, a specified IP, IP range, domain, or list of IPs from a text file and print the status and title of the page if applicable. Add the -u and -p options to attempt to login to the page first looking for a form login and failing that,...

WhisperPair

WhisperPair: Testing Harness for Google Fast Pair A practical tool to test whether Google Fast Pair devices are vulnerable to pairing, account-binding, and protocol-level attacks. This repository provides the WhisperPair testing harness, a tool for evaluating the security of Google Fast Pair...