Steganography

Steganography Table of Contents Installation Byte Sequence Manipulation WavSteg LSBSteg StegDetect If you are unfamiliar with steganography techniques, I have also written a basic overview of the field in Steganography: Hiding Data Inside Data. Installation This project is on PyPI and can be...

CVE-2021-41773

CVE-2021-41773 Apache httpd only 2.4.49 For educational purposes only. See Reference for the details. Run $ git clone https://github.com/masahiro331/CVE-2021-41773.git $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run -d -p 8080:80 cve-2021-41773 Exploit This vulnerability affec...

purrcrypt

🐱 PurrCrypt 🐶 Fur-ociously Secure, Paw-sitively Adorable! The purr -fect way to keep your secrets fur -ever safe, straight from the meow -th of your computer to your fur -ends' paws! !IMPORTANT PurrCrypt is real cryptography in a fuzzy disguise! Your messages are protected by the same elliptic...

nginx-1.4.0

nginx-1.4.0 For the analysis of CVE-2013-2028 exploit: exp-nginx.rb binary for rop build: nginx...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

python-codext

CodExt Encode/decode anything. CodExt is a Python2-3 compatible library that extends the native codecs library namely for adding new custom encodings and character mappings and provides 120+ new codecs , hence its name combining CODecs EXTension. It also features a guess mode for decoding multipl...

ToolsFx

ToolsFx English|中文 Visitors :eyes: Function Encoding wiki base64 urlBase64 base16/32/36/45/58/62/85/91/92/100 base58check UrlEncode Unicode js hex\x61/js octal\140 binary/octal/decimal/hex custom base serial dict puny code quote printable uuEncode xxEncode escape/escapeAll auto decodecrack...

PHP-REVERSE-SHELL

PHP Reverse Shell Powerful & Stealthy This is a powerful and stealthy PHP reverse shell designed for ethical hacking and penetration testing. It establishes a reliable and quiet connection back to your machine. ⚠️ Disclaimer This PHP reverse shell is developed strictly for educational and...

cve-2022-21907-http.sys

cve-2022-21907-http.sys by 1vere$k CVE-2022-21907 - Double Free in http.sys driver. Summary An unauthenticated attacker can send an HTTP request with an "Accept-Encoding" HTTP request header triggering a double free in the unknown coding-list inside the HTTP Protocol Stack http.sys to process...

CVE-2026-12243-NLTK-PoC

CVE-2026-12243 — NLTK パストラバーサルラボ NLTK 3.9.4 のパーセントエンコードされたパストラバーサル動作と、NLTK 3.10.0 で修正された動作を対比する、小さく再現可能な Docker ラボです。 脆弱なバージョンは、URL デコード前にリソース名を検証します。固定ペイロード %2e%2e/%2e%2e/outside/lab-secret.txt はチェックを通過し、後で ../../outside/lab-secret.txt にデコードされ、設定された NLTK...

Slink

Slink는 7f를 초과하는 문자를 다시 포맷하기 위해 간단한 수학 연산을 사용하는 영숫자alphanumeric 셸코드x86 인코더입니다. 이 도구는 다음 스플로잇 EDB-ID: 44455에서 영감을 받아 만들어졌습니다. 현재 기능 목록은 다음과 같습니다: 01-7f 문자 집합을 사용하여 인코딩합니다. 기본적으로 \x00\x10\x0a\x0d\x20 같은 일반적인 배드 문자를 제외합니다. \x90으로 패딩하여 셸코드가 4로 나누어떨어지도록 합니다. 입력으로 여러 셸코드 형식을 허용합니다. 셸코드 변수 이름을 지정합니다. 인코딩...

json-sanitizer

json-sanitizer JSON과 유사한 콘텐츠가 주어지면 JSON Sanitizer는 이를 유효한 JSON으로 변환합니다. 시작하기 - 연락처 이는 데이터 파이프라인의 양쪽 끝에 연결하여 Postel의 원칙을 충족시키는 데 도움이 될 수 있습니다. 자신이 하는 일에는 보수적으로, 다른 사람에게서 받아들일 때는 관대하게 다른 사람에게서 받은 JSON과 유사한 콘텐츠에 적용하면, 사용 중인 모든 파서를 만족시킬 수 있는 잘 구성된 JSON을 생성합니다. 보내기 전에 출력에 적용하면, 인코딩의 사소한 오류를 강제로 수정하고...

powerglot

Powerglot Powerglot는 폴리글롯을 사용하여 여러 종류의 스크립트예: 공격용 PowerShell 스크립트를 인코딩합니다. 페이로드를 실행하기 위해 로더가 필요하지 않습니다. 레드팀 연습이나 공격 작업에서 페이로드 은닉은 일반적으로 스테가노그래피를 사용하여 수행되며, 특히 네트워크 수준 보호를 우회하기 위해 사용됩니다. 가장 일반적인 페이로드 중 하나는 PowerShell로 개발된 스크립트입니다. 최근의 맬웨어 및 APT는 이러한 기능 중 일부를 활용합니다: APT32, APT37, Ursnif, Powload,...

CVE-2020-14882

CVE-2020-14882 Deployment of Behinder Memory Shell As we all know, CVE-2020-14882 is an unauthenticated vulnerability that allows an attacker to execute arbitrary code on affected WebLogic Server instances. The publicly available PoCs bypass access using illegal characters and then execute comman...

PoC-CVE-2025-12097

CVE-2025-12097 Description NI modification of Appweb server contains a directory traversal vulnerability that allows an attacker to read arbitrary files on the server. URI path /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/windows/win.ini will be converted to: pathInfo cchar...

PacketWhisper

PacketWhisper PacketWhisper - Stealthily Transfer Data & Defeat Attribution Using DNS Queries & Text-Based Steganography, without the need for attacker-controlled Name Servers or domains; Evade DLP/MLS Devices; Defeat Data- & DNS Name Server Whitelisting Controls. Convert any file type e.g...

PixelCode-Attack

Malicious PixelCode Delivery Technique Malicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing them inside images or videos. A lightweight loader retrieves the media file, reconstructs the original binary, a...

ZipExec

ZipExec ZipExec is a Proof-of-Concept POC tool to wrap binary-based tools into a password-protected zip file. This zip file is then base64 encoded into a string that is rebuilt on disk. This encoded string is then loaded into a JScript file that when executed, would rebuild the password-protected...

amber

Inroduction Amber is a position-independentreflective PE loader that enables in-memory execution of native PE filesEXE, DLL, SYS.... It enables stealthy in-memory payload deployment that can be used to bypass anti-virus, firewall, IDS, IPS products, and application white-listing mitigations...

llvm-jutsu

llvm-jutsu: anti-LLM obfuscation This is a 32-bit integer The Problem It's 2025. You've spent weeks crafting the perfect license check. You've used every trick in the book: opaque predicates, control flow flattening, MBA expressions. You deploy. Within hours, some guy pastes your binary into Clau...