ShredHound

ShredHound Overview Split a large BloodHound JSON file into a bunch of smaller files for faster importing. Follow me on Twitter Mike Felch - @ustayready Basic Usage usage: shred.py -h --output OUTPUT --filename FILENAME --chunks CHUNKS optional arguments: -h, --help show this help message and exi...

BlackHat-Europe-2022

BlackHat-Europe-2022 Select Bugs From Binary Where Pattern Like CVE-1337-Days Abstract Static code review is an effective way to discover vulnerability variants and exploitation primitives, but two of the most challenging tasks for static analysis are the effective code pattern extraction from hu...

CVE-2022-29464

CVE-2022-29464 CVE-2022-29464 is a critical vulnerability in WSO2 Identity Server, an open-source identity and access management platform. The vulnerability allows remote attackers to upload malicious JSP files that can execute arbitrary commands on the target system with administrative privilege...

CVE-2026-1357

CVE-2026-1357 — WPvivid Backup & Migration RCE Unauthenticated Arbitrary File Upload → Remote Code Execution Field| Value ---|--- CVE| CVE-2026-1357 CVSS| 9.8 Critical Plugin| WPvivid Backup & Migration Affected| ≤ 0.9.123 Patched| 0.9.124 Discovered by| Lucas Montes NiRoX PoC by| halilkirazkaya...

TABPE

TABPE What is TABPE? TABPE a combination of TABriz + PE - Tabriz is my hometown, and I named this project after my love for my city is an open, structured dataset containing information about all PE files Windows executables including .exe, .dll, .sys, etc., on clean, fully updated versions of...

CVE-2022-29464

CVE-2022-29464 A preauth arbitrary file upload that leads to RCE in WSO2 Summary of the CVE CVE-2022-29464 is a RCE vulnerability for WSO2 discovered by Orange Tsai. A unauthenticated arbitrary file upload allows an attacker to execute code by uploading a malicious JSP file. Affected Versions WSO...

CVE-2023-46818

CVE-2023-46818 An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. Usage ❯ python3 CVE-2023-46818.py Usage: python3 CVE-2023-46818.py Poc of CVE-2023-46818 ISPConfig = 3.2.11 - Code...

CVE-2025-49132

CVE-2025-49132 - Pterodactyl Panel Unauthenticated RCE / |\ \ / /| | | / | | | | || | / | || / | | \ V / | || / / | |/ / | | | | , /| || \ / / | / || /| //||/ || // ||/ /| Exploit for Pterodactyl Panel ≤ 1.11.10 - unauthenticated LFI to RCE. The Vulnerability The /locales/locale.json...

ApacheSolrRCE

Project Statement For information security teaching and communication only. Do not use for illegal testing or attacks. ApacheSolrRCE ApacheSolrRCE CVE-2019-0193 one-click write shell, the principle is to write a web shell through code execution of Java file stream. Note: The author is not very...

CVE-2025-2005

CVE-2025-2005 WordPress Front End Users Plugin = 3.2.32 is vulnerable to Arbitrary File Upload WordPress Front-End Users Plugin Exploit Vulnerability Information Plugin Name : Front-End Users Plugin Version Affected : = 3.2.32 Vulnerability Type : Arbitrary File Upload CVSS Score : 10 Critical Ri...

Laravel-CVE-2018-15133

Laravel-CVE-2018-15133 This Python script will allow you to create lists of sites and exploit them quickly. Prerequisites: python curl Usage: $ python cve.py Execute the script $ "Which site do you want to attack =" http:victime.com/ Add the site to the list $ chmod +x nikmok.txt gives 777...

vbox-vmdk-sparse-extent

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-vmdk-sparse-extent vbox-vmdk-sparse-extent Class: File read Reach: Local host UI:R Oracle VM VirtualBox OSS 7.2.20 f2792cf44 - Oracle A host user who imports an OVF directory or OVA whose disk is a sparse VMDK...

interactive-binary-structures

Interactive Binary Structures An interactive web-based toolkit designed to bridge the gap between theoretical documentation and practical analysis of binary formats and system memory layouts. Portable Executable PE Format Documentation This tool serves as an interactive visual map of a Windows PE...

CVE-2020-25540

CVE-2020-25540 ThinkAdmin CVE-2020-25540 poc Since the directory traversal vulnerability is too limited, only the file reading function has been implemented. Please go easy on the criticism, and I appreciate your guidance. The logic is based on the PHP source code; the key is the encryption metho...

parallels-file-move-privesc

parallels-file-move-privesc This repository contains an exploit for CVE-2023-50226 / ZDI-CAN-21227, which can be used to escalate privileges to root using Parallels Desktop on versions before 18.3.2...

CVE-2025-9491_POC

CVE-2025-9491 LNK Obfuscation PoC A proof-of-concept tool for demonstrating the Windows Shortcut LNK file vulnerability ZDI-CAN-25373/CVE-2025-9491. This tool showcases how malicious command-line arguments can be hidden within .lnk files by leveraging whitespace character padding. This tool is...

tgt-monitor-bof

Kerberos TGT Monitoring & Auto-Renewal This repository contains two Async Beacon Object Files BOF. The first, tgt-monitor, monitors the system for Kerberos logon events and wakes up the agent whenever a new Kerberos TGT is captured. Similar to Rubeus' monitor command, this BOF is running...

CVE-2018-19422-SubrionCMS-RCE

CVE-2018-19422-SubrionCMS-RCE SubrionCMS 4.2.1 Authenticated Remote Code Execution /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these. Exploit Usage Commands: Windows/Linux: $ sudo python3...

pmotadeee

🧠 FLATLINE - Consciousness Injection Protocol WARNING: This is not a game. It's a cognitive interface for reality hacking. 🎮 HOW TO PLAY Basic Gameplay 1. Download consciousness modules CSV files from this repository 2. Inject directly into AI interfaces as file uploads 3. Experience accelerated...

Risk-Analysis-Editor

Risk Analysis Editor RAE English · Français Standalone tool for building and visualizing risk matrices — inherent gross risk and residual net risk — with an open, documented file format, .rae.json. ▶️ Open the app · 📖 User guide · 🎬 Video tutorials · ⬇️ Download No installation: the tool runs...