cypher

🌹 CYPHER TOOLS 🌹 Written by TMRSWRR Version 1.0.0 All in one tools for CRYPTOLOGY. Instagram: Capture the Root 🖼️ Screenshots 🖼️ 📹 How to use 📹 Click on the image... 🧰 Features 🧰 This tool include: 📍 HASH 📍 RSA 📍 XOR 📍 AES ECC 📍 AES CBC 📍 DES ECB 📍 FERNET 📍 RC2 📍 RC4 📍 CHACHA20POLY1305 📍...

gapps

Gapps Gapps is an Security compliance platform that makes it easy to track your progress against various security frameworks. ❄️ View the Gapps site 🏠 Interested in contacting me? Please join our discord Table of Contents 1. Getting Started 2. FAQ New Features ❄️ SOC2, NIST CSF, NIST-800-53, CMMC,...

zenml-CVE-2024-2083-POC

CVE-2024-2083 – ZenML Arbitrary File Read PoC This repository demonstrates how to reproduce CVE-2024-2083 , an Arbitrary File Read vulnerability in ZenML. The issue allows an attacker to read files from the server filesystem by abusing the logs.uri field in the /api/v1/steps API request. By...

CVE-2025-34096

🐞 CVE-2025-34096: Easy File Sharing Web Server 7.2 - Stack-Based Buffer Overflow SEH SEH-based buffer overflow in Easy File Sharing Web Server 7.2, reachable through the password recovery endpoint. 📑 Table of Contents Why this repository exists Why this vulnerability is interesting Context and...

reproxy

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...

osTicketFileReadIntoRCE

CVE-2026-22200: osTicket Arbitrary File Read to RCE Full-chain exploit combining PHP filter chain injection with CVE-2024-2961 CNEXT for unauthenticated Remote Code Execution on vulnerable osTicket installations. Table of Contents Overview Vulnerability Details Attack Flow Features Installation...

iberyanbytes

Iberyanbytes AD enumeration tool, which allows taking information that is related to the network and gathering information about network interfaces, IP configuration, DNS, and routing tables. It enumerates network shares and analyses share permissions, gathers details about installed software,...

CVE-2024-23897

CVE-2024-23897 Nuclei Template For Exploit CVE-2024-23897 This template serves as a crucial warning to all users if the CVE-2024-23897 local file vulnerability is detected within your system, it is imperative to take. immediate action and patch your systems without delay. This vulnerability poses...

CVE-2020-9934

CVE-2020-9934 This Proof of Concept is a simple Swift program that will give itself and Terminal every kTCCService entitlement pulled from tccd and then do four things: Create a file named "" in the TCC-protected directory Read the data from said file from within the TCC-protected directory List...

Snaffler

Snaffler What is it for? Snaffler is a tool for pentesters and red teamers to help find delicious candy needles creds mostly, but it's flexible in a bunch of horrible boring haystacks a massive Windows/AD environment. It might also be useful for other people doing other stuff, but it is explicitl...

WordPress Tainacan plugin <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read vulnerability

Authenticated Subscriber+ Path Traversal to Arbitrary File Read vulnerability discovered by Wordfence PRISM in WordPress Plugin Tainacan versions = 1.3.0...

timesketch

Timesketch Table of Contents 1. About Timesketch 2. Getting started 3. Community 4. Contributing About Timesketch Timesketch is an open-source tool for collaborative forensic timeline analysis. Using sketches you and your collaborators can easily organize your timelines and analyze them all at th...

Thunderstorm

Thunderstorm Thunderstorm is a modular framework to exploit UPS devices. For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future. CVE Thunderstorm is currently capable of exploiting the following CVE: CVE-2022-47186 –...

Loki

I wrote a new Open Source YARA scanner called LOKI RS Rust. LOKI Python is now officially deprecated. Important Note This project is now in inactive maintenance mode. This means that while I merge pull requests for bug fixes and straightforward issues, I currently lack the time to add new feature...

CVE-2021-21123-PoC-Google-Chrome

📝 Description Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski Total Bug Bounty Reward: $5.000 This is Proof of Concept for: Google SecuritySeverity CVE HIGH CVE-2021-21123 MEDIUM CVE-2021-21129 MEDIUM CVE-2021-21130 MEDIUM CVE-2021-21131 MEDIUM CVE-2021-2117...

InfectPE

Using this tool you can inject x-code/shellcode into PE file. InjectPE works only with 32-bit executable files. Why you need InjectPE? You can test your security products. Use in a phishing campaign. Learn how PE injection works. ...and so on. In the project, there is hardcoded x-code of...

mig

MIG: Mozilla InvestiGator MIG is Mozilla's platform for investigative surgery of remote endpoints. ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the Mozilla InvestiGator MIG project. Mozilla is also no longer making use of this code internally. You are welcome to use this code as is...

azazel

Azazel V 0.1 The whole earth has been corrupted through the works that were taught by Azazel: to him ascribe all sin. -- 1 Enoch 2:8 Azazel is a userland rootkit based off of the original LDPRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily...

nanodump

NanoDump A flexible tool that creates a minidump of the LSASS process. Table of contents 1. Usage 2. Features 3. Combining Techniques 4. Examples 5. HTTPS Redirectors 1. Usage usage: Z:\nanodump.x64.exe --write C:\Windows\Temp\doc.docx --valid --duplicate --elevate-handle --duplicate-elevate...

CVE-2024-24919

CVE-2024-24919 Exploit Overview This repository contains a proof-of-concept PoC exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows for reading system files. CVE ID : CVE-2024-24919 Severity : Critical Table of Contents Vulnerability-detail...