Exploit for Unchecked Return Value in Google Brotli

Detect · Prove reachability · Understand CVE-2026-111497 — the B...

CVE-2019-12949

CVE-2019-12949 From Cross Site Scripting Vulnerability to Remote Code Execution in pfSense 2.4.4-p2 and 2.4.4-p3 Information Description: In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trich the authenticated administrator into clicking on a button on a phishing page, an attacker can uplo...

FOISted

| / \ |/ | | | | | | | | | || | | | | | | | || | | || | \ | / / | | | | || || | | || / | | || /|/ \|,| FOISted: a MikroTik remote jailbreak Description FOISted is an exploit for two post-authentication vulnerabilities in MikroTik's RouterOS. It can be used to remotely jailbreak RouterOS...

CVE-2025-55182

CVE-2025-55182 React2Shell Analysis Report Sections required by the assignment guidelines are marked with “Required”. 1. Environment Required 1.1. Dockerfile Required This environment uses a custom Dockerfile based on the official Node.js Alpine image. FROM node:20-alpine WORKDIR /app COPY...

pig_CS4.4

Note: For security research and learning purposes only. If the tool is used for any other purpose, the user shall bear all legal and joint liabilities. The author and publisher assume no legal or joint liability. Cobalt Strike 4.4 Zhuzhu Edition This version is a pre-release beta version; the...

httptoolkit

HTTP Toolkit !HTTP Toolkit has received funding from NLnet as part of NGI Zero...

OptixGate

Optix Gate is a multi-purpose secure remote administration tool for Microsoft Windows. It provides remote access to multiple Windows sessions and/or machines simultaneously. History Optix Gate was created, among other things, to maintain and further develop my Windows application programming...

wp2shell

CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core REST API batch route confusion CVE-2026-63030 chained with a WPQuery authornotin SQL injection CVE-2026-60137 → pre-auth remote code execution against a default WordPress install. Discovered by Adam Kues Assetnote...

CVE-2023-38646

CVE-2023-38646 - Metabase RCE Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1, 1.45.4.1...

BlackLotus-Z2A-Challenge

BlackLotus-Z2A-Challenge BlackLotus-Z2A-Challenge, Nothing to see here 4 now , please move along First things first For aesthetic purposes soley, I will shamesly borrowsteal : from @darthmaulwareRyan “DM” Smith solution the yara detection rules just to make it look proffesional. Go check his...

DirtyPipe-Android

DirtyPipe for Android Dirty Pipe CVE-2022-0847 temporary root PoC for Android. Targets Currently only run on Pixel 6 with security patch level from 2022-02-05 to 2022-04-05. Don't use on other devices or other versions. It must crash reboot. Dirty Pipe is finally patched on 2022 May security upda...

PacketWhisper

PacketWhisper PacketWhisper - Stealthily Transfer Data & Defeat Attribution Using DNS Queries & Text-Based Steganography, without the need for attacker-controlled Name Servers or domains; Evade DLP/MLS Devices; Defeat Data- & DNS Name Server Whitelisting Controls. Convert any file type e.g...

C-Game-Modding-Utility

C/C++ Game Modding Utility This utility aims to make writing mods for 5th/6th generation console games in C/C++ easier. It handles all the tedious setup, letting you focus on actually writing code. No manual cross-compiler setup. No manual ISO rebuilding. No complicated testing workflows. Feature...

ARTAXERXES

ARTAXERXES 🚀 Advanced Multi-Technology Stress Testing Framework Educational Cybersecurity Tool for High-Performance Network Testing 📋 Table of Contents 🎯 Overview ⚡ Performance Comparison 🛠️ Technology Stack 📊 Architecture 🚀 Quick Start ⚙️ Installation 💡 Usage Examples 🔧 Advanced Configuration 📈...

OpenAttack

Documentation • Features & Uses • Usage Examples • Attack Models • Toolkit Design OpenAttack is an open-source Python-based textual adversarial attack toolkit, which handles the whole process of textual adversarial attacking, including preprocessing text, accessing the victim model, generating...

uBlock

!Badge CommitsCommit Rate !Badge IssuesIssues !Badge LocalizationCrowdin !Badge LicenseLicense !Badge NPMNPM !Badge MozillaMozilla !Badge ChromeChrome !Badge EdgeEdge uBlock Origin uBO Browser| Install from ...| Status ---|---|--- | Firefox Add-ons| uBO works best on Firefox | Edge Add-ons| "Movi...

Invoke-TheHash

Invoke-TheHash Invoke-TheHash contains PowerShell functions for performing pass the hash WMI and SMB tasks. WMI and SMB connections are accessed through the .NET TCPClient. Authentication is performed by passing an NTLM hash into the NTLMv2 authentication protocol. Local administrator privilege i...

ghidra

Dockerized Ghidra Build From the root directory of your Ghidra release, run the following command. ./docker/build-docker-image.sh This will build the ghidra docker image with a tag corresponding to the release version of Ghidra. The MODE environment variable The Ghidra Docker Container supports t...

dotclaude-security

dotclaude-security Scan a repo's local .claude/ config — settings.json hooks, MCP server defs, env blocks, permissions.allow — for the RCE and API-key-exfiltration footguns that fire the moment you git clone and open an untrusted repository in Claude Code. It points at the exact dangerous line so...

goWAPT

GOWAPT - Go Web Application Penetration Test GOWAPT is the younger brother of wfuzz a swiss army knife of WAPT, it allow pentester to perform huge activity with no stress at all, just configure it and it's just a matter of clicks. How to install To install gowapt just type: make sudo make install...