smbexec

smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage who's blog...

CVE-2026-41089-Detector

CVE-2026-41089 Detection Tool This is a CVE-2026-41089 detection script for defense audits. The vulnerability is a Windows Netlogon remote code execution vulnerability disclosed by Microsoft in the May 2026 security update. The script does not send exploit packets or attempt to trigger Netlogon...

CVE-2026-41940-Security-Patch

CVE-2026-41940-Security-Patch Unofficial temporary patch for the CVE-2026-41940 vulnerability Can be used for temporary defense Please upgrade to the official release as soon as conditions permit cPanel Security Announcement:...

sudowp-clickfunnels-zurich

SudoWP Zurich for ClickFunnels Contributors: SudoWP, WP Republic Original Authors: Etison, LLC Tags: clickfunnels, security-patch, legacy, landing pages, funnels, sudowp Requires at least: 4.3 Tested up to: 6.7 Stable tag: 0.1.1 License: GPLv2 or later Security Notice This is a community-maintain...

CVE-2024-0044

CVE-2024-0044/A-307532206 is a High severity vulnerability in the Android framework that allows attackers with adb access to run arbitrary code under the UID of arbitrary app. It was originally found by Tom Hebb from Meta Red Team X. You can found many articles on exploit this vulnerability on th...

CVE-2023-23397

CVE-2023-23397 Patch for MS Outlook Critical Vulnerability - CVSS 9.8 3 PowerShell scripts are included in the Patch folder. If your patch management software uses an evaluation and a remediation script, use the respective files/scripts. The All In One script will evaluate the current version of...

chef_tissues

Tissues Install patch for CVE-2017-0145 AKA WannaCry. More Info: https://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Ransom:Win32/WannaCrypt Usage: "name":"mynode", "runlist": "recipetissues"...

rdpscan

rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 900,000 machines on the public Internet vulnerable to this vulnerability, so many are to expect a worm soon like WannaCry and...

CVE-2026-3030-Prototype-Pollution-in-JSON-Merge-Patch

CVE-2026-3030 – Prototype Pollution in JSON Merge Patch Program Code Node.js // server.js - Vulnerable REST API with deep merge const express = require'express'; const app = express; app.useexpress.json; let config = role: 'user', settings: ; // Insecure deep merge function pollutable via proto...

patchy

Patchy Automated lateral movement and persistence by abusing GCP OS patch management based on my blog post. Patchy is made up of two main modes, lateral movement, and persistence. Persistence uses valid service account credentials to create a patch job or deployment. Lateral movement attempts to...

SpringBreakVulnerableApp

Spring Break Vulnerable Application This is a vulnerable application to test the exploit for the Spring Break vulnerability CVE-2017-8046. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended using a backed-up and sheltered environment su...

ROOT-APP-PYPI-CVE-2024-6345 CVE-2024-6345 in setuptools - Patched by Root

Root has patched CVE-2024-6345 in the setuptools package for Root:PyPI. Multiple fixed versions available...

meltdown-aws-scanner

meltdown-aws-scanner Naive shell script to verify Meltdown CVE-2017-5754 patch status of EC2 instances Requirements aws cli with working configuration Using the script Scan all EC2 instances in default account and region $ ./checkmeltdown.sh | tee $date '+%Y-%m-%d'.csv Scan a subset of EC2...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

CVE-2024-38063-Remediation

CVE-2024-38063-Remediation Audit script Download script using powershell one-liner $downloadURI = 'https://raw.githubusercontent.com/dweger-scripts/CVE-2024-38063-Remediation/main/Audit-PatchInstalled-ipv6Vuln.ps1'; $script = 'C:\temp\Audit-PatchInstalled-ipv6Vuln.ps1'; Invoke-WebRequest -URI...

ROOT-APP-PYPI-CVE-2026-54060 CVE-2026-54060 in pillow - Patched by Root

Root has patched CVE-2026-54060 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-55380 CVE-2026-55380 in pillow - Patched by Root

Root has patched CVE-2026-55380 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59198 CVE-2026-59198 in pillow - Patched by Root

Root has patched CVE-2026-59198 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59205 CVE-2026-59205 in pillow - Patched by Root

Root has patched CVE-2026-59205 in the pillow package for Root:PyPI. Multiple fixed versions available...

CVE-2023-52251-POC

CVE-2023-52251-POC There is a Remote Code Execution vulnerability provectus/kafka-ui. There is no patch as of writing this, but the vendor is notified by us and the team over at VINCE without any response. Report was sent Sep 27, 2023 to provectus both via email and github security. Remediation W...