forbidden

Forbidden Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client. Tested on Kali Linux v2024.2 64-bit. Made for educational purposes. I hope it will help! Future plans: Add the silent option to suppress console output. Add the no color option...

ExtensionSpoofer

ExtensionSpoofer ExtensionSpoofer is a Visual Basic .NET desktop app that demonstrates how file names and icons can be visually manipulated on Windows while the underlying executable file type remains unchanged. It uses the Unicode Right-to-Left Override character U+202E to reverse displayed...

CVE-2019-14811-in-pdf-exploit

CVE-2019-14811 GhostScript PDF preview Exploit PoC This exploit targets CVE-2019-14811 in GS environments where PostScript output is not reflected, but is executed such as PDF previews via png images. Exploit renders commands directly in pngXXm preview, it is based on...

log4shell-example

Log4Shell Exploit Test The goal of this project is to demonstrate the log4j cve-2021-44228 exploit vulnerability in a spring-boot setup, and to show how to fix it. This project contains three submodules. One of these has vulnerable code, the other two are patched. How to use this project Run ./mv...

cve-tarmageddon

CVE-2025-62518: TARmageddon This repository demonstrates a critical bug in tokio-tar and related async Rust tar libraries where PAX extended header size overrides are not applied before calculating the next header position. Bug Summary Root Cause: When processing tar files with PAX extended heade...

LOLSpoof

LOLSpoof LOLSpoof is a an interactive shell program that automatically spoof the command line arguments of the spawned process. Just call your incriminate-looking command line LOLBin e.g. powershell -w hidden -enc ZwBlAHQALQBwAHIAbwBjAGUA.... and LOLSpoof will ensure that the process creation...

CVE-2025-32432

CVE-2025-32432 Craft CMS 사전 인증 RCE PoC Craft CMS의 치명적인 사전 인증 원격 코드 실행 영향: Craft CMS 3.x, 4.x 및 5.x 5.6.16까지 정보: 이 익스플로잇은 HackTheBox Orion 머신에서 테스트되었습니다. 개요 이 저장소는 CVE-2025-32432 에 대한 개념 증명 익스플로잇을 포함하고 있습니다. 이는 Craft CMS의 치명적인 사전 인증 원격 코드 실행 취약점입니다. 이 취약점은 인증되지 않은 공격자가 Yii2의 동작 첨부 메커니즘과 class 오버라이...

macstealer

MacStealer: Wi-Fi 클라이언트 격리 우회 1. 소개 이 저장소에는 MacStealer가 포함되어 있습니다. 이 도구는 Wi-Fi 네트워크에서 클라이언트 격리 우회client isolation bypass 를 테스트할 수 있습니다 CVE-2022-47522. 이 공격은 클라이언트들이 서로 통신하지 못하도록 차단된 경우에도 MAC 계층에서 다른 클라이언트로 향하는 트래픽을 가로챌스틸 수 있습니다. 이 취약점은 악의적인 내부자가 존재하는 Wi-Fi 네트워크에 영향을 미치며, 이 공격은 AP 격리라고도 불리는 클라이언트...

OverRide

OverRide Explore disassembly, binary exploitation & reverse-engineering through 10 little challenges. In the folder for each level you will find: flag - password for next level README.md - how to find password source.c - the reverse engineered binary dissasemblynotes.md - notes on asm See the...

CVE-2024-0710

CVE-2024-0710 Vulnerability: CVE-2024-0710 Unauthenticated Form Submission Unique ID Modification CVSS: 5.3 Medium Software: GP Unique ID gp-unique-id Affected versions: = 1.5.5 Patched version: 1.5.6 Developer: Gravity Wiz Researcher: Karl Emil Nikka, Nikka Systems Publicly published: 2024-04-10...

CVE-2026-89762 apparmor: fix cred UAF caused by begin_current_label_crit_section()

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begincurrentlabelcritsection AppArmor's begincurrentlabelcritsection is a scary function called from lots of LSM hooks in particular VFS/socket-related ones that checks if the label referenced by...

ARTful

설명 ARTful은 개발자가 Android 13 + 14에서 Android 런타임ART을 수정할 수 있게 해주는 네이티브 Android 라이브러리입니다. 이 도구를 사용하면 애플리케이션 또는 Android 프레임워크 내의 모든 정적 메서드 구현을 동적으로 변경하여 애플리케이션 내부에서 호출되는 메서드에 영향을 줄 수 있습니다. 이를 통해 예기치 않은 코드를 실행하기 위해 Android ClassLoader에 대한 일반 텍스트 참조를 사용할 필요가 없어지며, 메서드 상호 참조를 완전히 제거하여 리버스 엔지니어링을 방해합니다...

CVE-2026-0257

🚨 CVE-2026-0257 – PAN-OS GlobalProtect Authentication Bypass Security research, technical analysis, detection guidance, IOC collection, and defensive validation resources for CVE-2026-0257. 📌 Overview CVE-2026-0257 is an authentication bypass vulnerability affecting Palo Alto Networks GlobalProte...

CVE-2026-9018

CVE-2026-9018 CVE-2026-9018 — Easy Elements for Elementor ≤ 1.4.5 | Эскалация привилегий без аутентификации Исследование: Atomic Edge Серьезность: Высокая | CVSS: 8.8 | Требуется аутентификация: Нет Обзор Уязвимость эскалации привилегий без аутентификации существует в плагине WordPress Easy...

CVE-2026-0257-PoC

CVE-2026-0257 — PAN-OS GlobalProtect Authentication Bypass Remote Detection PoC Detection only. No exploitation. No credentials submitted. No cookies forged. Overview CVE-2026-0257 is an authentication bypass vulnerability CWE-565 — Reliance on Cookies without Validation and Integrity Checking in...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:21801-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21801-1 advisory. - CVE-2026-24122: github.com/sigstore/cosign/v2/pkg/cosign: improper validation of certificates that outlive expired CA certificates bsc1258543....

form-data: form-data: Form field override via CRLF injection

A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return CR, line feed LF, or double-quote " characters into the field argument of FormDataappend or the filename option. This allows th...

form-data: form-data: Form field override via CRLF injection

A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return CR, line feed LF, or double-quote " characters into the field argument of FormDataappend or the filename option. This allows th...

CVE-2026-88038

cookies is a Node.js library for reading and writing HTTP cookies, used by Koa via ctx.cookies. In versions before 0.9.2 the library validates the cookie name and value against character sets that reject the semicolon separator, but the domain and path options are checked only against a permissiv...

CVE-2026-88038 cookies vulnerable to Set-Cookie attribute injection via unvalidated domain and path options

cookies is a Node.js library for reading and writing HTTP cookies, used by Koa via ctx.cookies. In versions before 0.9.2 the library validates the cookie name and value against character sets that reject the semicolon separator, but the domain and path options are checked only against a permissiv...