dump1090

Dump1090 README Dump 1090 is a Mode S decoder specifically designed for RTLSDR devices. The main features are: Robust decoding of weak messages, with mode1090 many users observed improved range compared to other popular decoders. Network support: TCP30003 stream MSG5..., Raw packets, HTTP. Embedd...

whoc

whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...

CVE-2020-14883EXP

CVE-2020-14883EXP Used for verifying and exploiting WebLogic 10.3.6.0.0 ;12.1.3.0.0 ;12.2.1.3.0; 12.2.1.4.0 ;14.1.1.0.0. Do not use for illegal purposes. Enter IP+port to start verification e.g. 127.0.0.1:7001 Supports remote XML command execution Versions other than 10.3.6.0.0 provide two...

CVE-2026-98143

A flaw was found in the Linux kernel's Arm Ethos-U neural processing unit NPU accelerator driver. The command stream parser incorrectly interprets hardware rounding mode fields as storage mode parameters on certain device models. A local user can exploit this vulnerability by submitting specific...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

evilTrust

evilTrust Herramienta ideal para el despliegue automatizado de un Rogue AP con capacidad de selección de plantilla + 2FA. Esta herramienta dispone de varias plantillas a utilizar, incluyendo una opción de plantilla personalizada, donde el atacante es capaz de desplegar su propia plantilla...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

rustcat

rustcat - El moderno listener de puertos y shell reverso ¿Qué es Rustcat? Rustcat es un listener de puertos y shell reverso fácil de usar para Linux, MacOS y Windows, diseñado para ser accesible y sencillo. Modos Modo escucha listen; Modo shell reverso connect; Características Historial de comand...

CVE-2019-5420

CVE-2019-5420 A vulnerability can allow an attacker to guess the automatically generated development mode secret token. Ruby-on-Rails when it is running in development mode. In development mode, it is possible for an attacker to guess the key used to secure the sessions. Decryption: Key Generate:...

Zygotroller

Zygotroller Remove profile owners/Family Link on ANY pre June 2024 Developer Mode device Android 12+ Zygotroller is a proof-of-concept that can remove a profile owner and associated restrictions with CVE-2024-31317's Zygote injection bug. It requires developer mode and the latest security patch t...

debian-ssh

Debian OpenSSL Predictable PRNG Links Original URL: http://metasploit.com/users/hdm/tools/debian-openssl/ Mirror Exploit: https://www.exploit-db.com/exploits/5622/ Perl https://www.exploit-db.com/exploits/5720/ Python https://www.exploit-db.com/exploits/5632/ Ruby Recommend Tool: Crowbar able to...

Fireaway

FireAway-Next Generation Firewall Bypass Tool v0.2 Fireaway is a tool for auditing, bypassing, and exfiltrating data against layer 7/AppID inspection rules on next generation firewalls, as well as other deep packet inspection defense mechanisms, such as data loss prevention DLP and application...

CVE-2024-37742

CVE-2024-37742: Clipboard Exploit in SEB ≤ 3.5.0 Windows This repository contains a proof-of-concept PoC for exploiting CVE-2024-37742, a vulnerability in Safe Exam Browser SEB ≤ 3.5.0 on Windows. The vulnerability allows an attacker to share clipboard data between the SEB kiosk mode and the...

ring3-kit

ring3-kit Oculta procesos del Administrador de tareas mediante el enganche NT NtQuerySystemInformation. Un rootkit simple en anillo 3 modo de usuario. Cómo Enganchar la función API NtQuerySystemInformation con nuestra propia función que oculta un proceso del administrador de tareas. La función...

m4ngl3m3

m4ngl3m3! Quick Installation: root@kitploit: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py Basic Help: root@kitploit: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE...

padre

padre padre is an advanced exploiter for Padding Oracle attacks against CBC mode encryption Features: blazing fast, concurrent implementation decryption of tokens encryption of arbitrary data automatic fingerprinting of padding oracles automatic detection of cipher block length HINTS! if failure...

notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

r0ak

r0ak r0ak es una utilidad de línea de comandos de Windows que permite leer, escribir y ejecutar código en modo kernel con algunas limitaciones desde el símbolo del sistema, sin necesidad de nada más que privilegios de Administrador. Primer vistazo root@kitploit: r0ak v1.0.0 -- Ring 0 Army Knife...

CVE-2026-100694

A flaw was found in Hugo. When processing content files mapped to the Org Mode media type, Hugo renders raw HTML export blocks and snippets without proper escaping. An attacker who can influence or supply content files can exploit this vulnerability to conduct cross-site scripting XSS, executing...