RESim

RESim Reverse engineering using a full system simulator. Dynamic analysis by instrumenting simulated hardware using Simics1 Trace process trees, system calls and individual programs Reverse execution to selected breakpoints and events Integrated with IDA Protm debugging client Ghidra plugins for...

CVE-2025-3054-Exploit

CVE-2025-3054 Exploit: Download here Details CVE ID : CVE-2025-3054 Published : June 5, 2025 CVSS : 8.8 Patch Available: No official patch yet Impact The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadfiles functi...

Drag-and-Drop-Multiple-File-Uploader-PRO-Path-Traversal

CVE-2023-1112 - Drag and Drop Multiple File Uploader PRO - Contact Form 7 v5.0.6.1 Path Traversal Info Path Traversal in Drag and Drop Multiple File Uploader PRO - Contact Form 7 version 5.0.6.1 allows unauthenticated remote attacker to upload files anywhere writable on the remote server...

CVE-2022-35501

CVE-2022-35501 Stored Cross-site Scripting XSS in blog-post creation functionality in Amasty Blog Pro for Magento 2 Description The post creation functionality in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 allows injection of JavaScript code in the title field, leading to XSS...

deREferencing

deREferencing deReferencing is an IDA Pro plugin that implements new registers and stack views. Adds dereferenced pointers, colors and other useful information, similar to some GDB plugins e.g: PEDA, GEF, pwndbg, etc. Supports following architectures: x86, x86-64, ARM, ARM64, MIPS32 and MIPS64...

spectrIDA-Reverse_Engineering_Stack

👻 spectrIDA Ghost through binaries. A local, AI-powered reverse engineering assistant: parallel IDA Pro analysis, AI function naming, a terminal that doesn't suck, a Neo4j knowledge graph of everything it's ever figured out, and an MCP server so Claude can search and chain through that graph...

CVE-2026-84395

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2020-12077

CVE-2020-12077 MapPress Maps Pro 2.53.9 - Remote Code Execution RCE due to Incorrect Access Control in AJAX Actions Description The pro version of this plugin registers several AJAX actions that call functions which lack capability checks and nonce checks, specifically the ‘ajaxget’, ‘ajaxsave’,...

CVE-2026-84395 Premiere Pro | Server-Side Request Forgery (SSRF) (CWE-918)

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

EUVD-2026-84799

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2026-84395

Adobe Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that could lead to privilege escalation and potentially result in unauthorized write access . Exploitation of this issue does not require user interaction. The CVSS 3.1 score is 7.1 (High) . No specific...

PhoneSploit-Pro

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Installing dependencies Getting started Device setup...

FindFunc

FindFunc: Advanced Filtering/Finding of Functions in IDA Pro FindFunc is an IDA Pro plugin to find code functions that contain a certain assembly or byte pattern, reference a certain name or string, or conform to various other constraints. FindFunc won third place in the 2022 HexRays IDA Pro Plug...

Uchihash

Uchihash Uchihash is a small tool that can save malware analysts the time of dealing with embedded hash values used for various things such as: Dynamically importing APIs especially in shellcode Checking running process used by analysts Anti-Analysis Checking VM or Antivirus artifacts Anti-Analys...

Kam1n0-Community

Что такое Kam1n0 v2?...

flare-floss

Скрипты FLOSS FLOSS поддерживает преобразование своего вывода в скрипты для различных инструментов. Пожалуйста, обратитесь к скриптам отрисовки в этом каталоге. Кроме того, существует ещё один плагин для IDA, который позволяет FLOSS автоматически извлекать обфусцированные строки и применять их к...

ida_kernelcache

idakernelcache: инструментарий IDA для анализа ядерных кешей iOS Форк Cellebrite Этот форк обновлён для работы с IDA 9.x / Python 3 / iOS 27.0 beta 1 Исходный README idakernelcache — это модуль IDAPython для IDA Pro, упрощающий работу с ядерными кешами iOS. Модуль предоставляет функции для:...

CVE-2022-36433

CVE-2022-36433 Cross-site Scripting XSS in blog-post creation functionality in Amasty Blog Pro for Magento 2 Description The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading ...

IDAssistMCP

IDAssistMCP Standalone MCP Model Context Protocol server plugin for IDA Pro 9.x that exposes IDA's analysis capabilities to LLM clients like Claude Desktop. Features 41 MCP tools covering binary analysis, decompilation, cross-references, symbol management, type system, navigation, patching, expor...

ghostlock-emerald

GhostLock for POCO M6 Pro emerald GhostLock CVE-2026-43499 — это 15-летняя уязвимость use-after-free в ядре Linux, в коде наследования приоритетов futex, которая позволяет любому локальному пользователю получить root. Этот проект использует её для получения root на POCO M6 Pro MediaTek Helio G99...