metasploit-framework-nu11secur1ty

Metasploit Framework The Metasploit Framework is an open-source tool released under a BSD-style license. For detailed licensing information, refer to the COPYING file. Latest Version Access the latest version of Metasploit from the Nightly Installers page. Documentation Comprehensive documentatio...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

CLEANSTART-2023-RF89232 Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualifie...

CVE-2020-12695 affects multiple packages. The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue...

TekDefense

TekDefense Open Development projects for TekDefense All projects use the MIT License model, which basically means, use any of this as you see fit, but don't hold me responsible for any loss or damage that occurs from using or modifying any of these projects. Please visit www.TekDefense.com for...

ncccodenavi

ncccodenavi NCC Code Navi the Text Viewer and Searcher for Code Reviewers Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com http://www.github.com/nccgroup/ncccodenavi Released under AGPL see LICENSE for more...

irdoc-app

IRDoc - Incident Response Documentation Platform Timeline-first IR documentation with visual report builder, SharePoint auto-sync, and AI-assisted summaries. What is IRDoc? IRDoc is a self-hostable, open-core incident response documentation platform for SOC analysts, IR engineers, and MSSPs. It...

ransomware-simulator

Ransomware Simulator NCC Ransomware Simulator Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Donato Ferrante, donato dot ferrante at nccgroup dot trust https://www.github.com/nccgroup/ransomware-simulator Released under AGPL see LICENSE for more information To...

ProxyListReliabilityCheck

ProxyListReliabilityCheck Perl script to test the reliability of a list of open web proxies. The script takes in a text file list of IPAddress:Port of open web proxies to test 1 per line. It then attempts to crawl to the following URL through each target proxy:...

IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133

IBM Security Verify Access - Open Redirect during OAuth Flow CVE-2024-35133 Table of Contents 1. Overview 2. Detailed Description 3. Proof of Concept 4. Solution 5. Disclosure Timeline 6. References 7. Credits 8. Legal Notices Overview Revision : 1.0 Impact : By persuading a victim to visit a...

CVE-2021-43657

CVE-2021-43657 This is a reference/POC for CVE-2021-43657 This vulnerability was found when i was playing with the open source software which is responsible for Employee Task Management System...

CVE-2024-22891

Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerability. nteract 0.28.0 allows Electron webview via Markdown link, with resultant remote code execution. In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file th...

Awesome-RCE-techniques

Awesome RCE techniques Awesome list of techniques to achieve Remote Code Execution RCE on various apps! Goal of this project The goal of this project is to provide an OpenSource knowledge database of all the techniques to achieve Remote Code Execution RCE on various applications. All of these...

CVE-2023-38646-Poc

CVE-2023-38646-Poc usage python check.py ip port Vulnerable version Metabase Enterprise 1.46 1.46.6.1 Metabase Enterprise 1.45 1.45.4.1 Metabase Enterprise 1.44 1.44.7.1 Metabase Enterprise 1.43 1.43.7.2 Metabase open source 0.46 0.46.6.1 Metabase open source 0.45 v0.45.4.1 Metabase open source...

CVE-2020-12078

CVE-2020-12078 The official exploit for Open-AudIT v3.3.1 Remote Code Execution CVE-2020-12078...

CVE-2024-25291

DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerability. deskfiler - 1.2.3 allows Electron webview in application, with resultant remote code In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file that...

Sourcetrail

Sourcetrail Important Note: This project was archived by the original autors and maintainers of Sourcetrail by the end of 2021. If you want to know more about this decision, read more on our blog. Sourcetrail is a free and open-source cross-platform source explorer that helps you get productive o...

blind-ssrf-chains

Introduction What is Server Side Request Forgery SSRF? Server Side Request Forgery occurs when you can coerce a server to make arbitrary requests on your behalf. As the requests are being made by the server, it may be possible to access internal resources due to where the server is positioned in...

OFFENSIVE-SECURITY

This repository does not have a README...

Detection-and-Mitigation-for-CVE-2022-2639

Detection-and-Mitigation-for-CVE-2022-2639 Description The Open vSwitch kernel module allows flexible userspace control over flow-level packet processing on selected network devices. It can be used to implement a plain Ethernet switch, network device bonding, VLAN processing, network access...

Perturbed-Embedding-Vectors

Jailbreaking Open-Weight LLMs via Random Embedding Perturbations: runs, labels and code Code and data for the paper Jailbreaking Open-Weight LLMs via Random Embedding Perturbations. Link to the pre-print of the paper- https://arxiv.org/abs/2610.07125 Authored by the amazing people of the...