nasm_linux_x86_64_pure_sharedlib

NASM Linux x8664 pure no deps shared library .so Tested with "Reflective SO injection". A library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process...

AutoPwn-Titanic.htb

Titanic AutoPWN - HTB Machine This is an automated exploitation script for the Hack The Box machine Titanic. A full exploitation automation script for the Titanic HTB Linux machine on Hack The Box. Full write Up - WriteUp.md 📋 Description It performs the following actions: Phase 1: Retrieve and...

jenkinsci__workflow-cps-global-lib-plugin_CVE-2022-25174_544-vff04fa68714d

Pipeline Shared Libraries When you have multiple Pipeline jobs, you often want to share some parts of the Pipeline scripts between them to keep Pipeline scripts DRY. A very common use case is that you have many projects that are built in the similar way. This plugin adds that functionality by...

CVE-2021-29447

CVE-2021-29447 PoC This repository contains a Proof of Concept PoC exploit for the CVE-2021-29447 vulnerability, affecting WordPress 5.6 and 5.7 using PHP 8. The exploit demonstrates how an attacker, with the ability to upload files, can exploit an XML parsing vulnerability in the Media Library,...

exploit-CVE-2017-7494

SambaCry RCE exploit for Samba 4.5.9 Samba is a free software re-implementation of the SMB/CIFS networking protocol. Samba provides file and print services for various Microsoft Windows clients and can integrate with a Microsoft Windows Server domain, either as a Domain Controller DC or as a doma...

CVE-2021-29447

WordPress XXE Vulnerability : CVE-2021-29447 A user with the ability to upload a malicious WAVE file like an Author can exploit an XML parsing issue in the Media Library in WordPress leading to XXE attacks and that could lead to file system disclosure Vulnerable code XML External Entity XXE...

CVE-2024-3094-analysis

CVE-2024-3094 – Real-World Supply Chain Threat What is CVE-2024-3094? CVE-2024-3094 is a major backdoor vulnerability discovered in the xz compression library. It allows attackers to potentially execute code remotely through SSH. The vulnerability was introduced intentionally and affects critical...

CVE-2023-4634-PoC

CVE-2023-4634 - RCE Vulnerability in WordPress Plugin Media Library Assistant 1. Build and launch environment cd Stand docker-compose up --build -d 2. Wait for services to start 60 seconds sleep 60 curl -I http://localhost:8080 3. Run vulnerability scan cd ../PoC/src python3 scanner.py...

awesome-websocket-security

Awesome WebSockets Security A collection of CVEs, research, and reference materials related to WebSocket security Contents WebSocket Library Vulnerabilities Conference Talks Common WebSocket Weaknesses WebSocket Security Tools Bug Bounty Writeups Useful blog posts WebSocket Library Vulnerabilitie...

Cybersecurity-Resources

Cybersecurity-Resources A Library of various cybersecurity resources...

drawio-threatmodeling

Draw.io libraries for threat modeling This is a collection of custom libraries to turn the free and cross-platform Draw.io diagramming application into the perfect tool for threat modeling. Data Flow Diagrams Data Flow Diagramming is a simple diagramming technique used to gain an understanding of...

CVE-2021-4034

Proof of Concept PoC: CVE-2021-4034 PwnKit Note: This repository and its content are part of a Final Degree Project FDP, created solely for educational purposes and academic research. Description This repository contains a proof of concept PoC for the CVE-2021-4034 vulnerability, also known as...

VX-API

管理元: vx-underground | Twitterでフォローする Twitter | VXUG/samplesページでマルウェアサンプルをダウンロード VXUG/samples VX-API バージョン: 2.01.015 開発者: smellyvx VX-APIは、マルウェア開発を支援する悪意のある機能のコレクションです。このリポジトリ全体をクローンまたはダウンロードし、Visual Studioソリューションファイルを開いて機能やコンセプトを簡単に探索することをお勧めします。...

tink

Tink NOTE : Tink moved to github.com/tink-crypto and this repo is no longer active! As planned, we have split Tink into multiple GitHub repositories that are hosted at github.com/tink-crypto. As a consequence, we made this repository read-only and it is not going to be maintained moving forward. ...

CVE-2021-3156

CVE-2021-3156 Introduction This repository was created for studying purpose. The project contains some tools for studying the sudo Baron Samedit vulnerability and the exploit for it. Thanks to Qualys Team for discovering such vulnerability, to Worawit and 0xdevil for the interesting writeups. Usa...

POC-IngressNightmare-CVE-2025-1974

POC of IngressNightmare CVE-2025-1974 Developed from: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Talk is cheap, just look at the code. Detailed can be found at https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Usage 1...

OpenSSL_1_1_1_g

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

openssl-1.1.1g_CVE-2021-23840

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

Openssl-1.1.1g_CVE-2022-4304

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

openssl-1.1.1g_CVE-2022-0778

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...