no-gdid

no-gdid Read, understand, and silence the Windows Global Device Identifier GDID — the hidden per-account device ID that helped the FBI locate a suspect who was using a VPN. ⚠️ Honest disclaimer up front: this tool does not erase your GDID and does not make you anonymous. The GDID lives on...

auto_re

AutoRE Features 1. Auto-renaming dummy-named functions, which have one API call or jump to the imported API Before After 2. Assigning TAGS to functions accordingly to called API-indicators inside Sets tags as repeatable function comments and displays TAG tree in the separate view Some screenshots...

auto-re-agent

re-agent Agente autónomo de ingeniería inversa: bucle reversor/verificador consciente del código fuente, verificador de objetivos, motor de paridad y backend Ghidra. Descripción general Demo: YouTube re-agent automatiza un flujo de trabajo de ingeniería inversa combinando un bucle...

POC-CVE-2018-0114

POC-CVE-2018-0114 This repository contains the POC of an exploit for node-jose Stating from the last merge root@kitploit: python lib: base64,urllib,rsa,sys...

smt878u-ionstack-poc

smt878u-ionstack-poc Pure-C, host-assisted re-root proof of concept for Samsung Galaxy Tab S7 SM-T878U / gts7l against CVE-2026-43499 IonStack / GhostLock. The runtime chain uses native C/ELF components only. It does not require Python, Java, DEX, appprocess, or a JVM on the Android target. ADB i...

LLM4Decompile

📊 Results | 🤗 Models | 🚀 Quick Start | 📚 HumanEval-Decompile | 📎 Citation | 📝 Paper | 🖥️ Colab | ▶️ YouTube Reverse Engineering: Decompiling Binary Code with Large Language Models Updates 2025-10-04: Release SK²Decompile: LLM-based Two-Phase Binary Decompilation from Skeleton to Skin. Phase 1...

CVE-2018-0114

CVE-2018-0114 python2.7 script for JWT generation CVE-2018-0114 A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following...

usbsnoop

usbsnoop — live USB transfer sniffer from two fentry hooks A real-time, colorized feed of USB traffic system-wide — built on the two universal URB chokepoints every host-controller driver funnels through, so it works on xHCI/EHCI/OHCI/dwc alike with no per-controller tracepoints and no usbmon...

DarkAgent

This is an opensource Remote Administration Tool originally started/written by DragonHunter at http://www.hackforums.net/showthread.php?tid=708624 He has since moved on and the source and hosting for the project have disappeared, so being that it is opensource, I thought I would post it here for...

krie

KRIe KRIe es un proyecto de investigación que tiene como objetivo detectar exploits del kernel de Linux con eBPF. KRIe está lejos de ser una estrategia a prueba de balas: desde limitaciones relacionadas con eBPF hasta detecciones posteriores a la explotación que podrían depender de un kernel...

cerberus-re-skill

Cerberus RE cerberus-re es un banco de trabajo local de ingeniería inversa centrado en Apple, diseñado para construir un bucle repetible de tres cabezas estático/dinámico/instrumentación alrededor de Ghidra, LLDB y Frida. Está pensado para analistas y agentes de codificación que necesitan...

CVE-2018-0114

CVE-2018-0114 before 0.11.0 unathenticated remote attacker can re-sign using a key embeded in token. https://www.cvedetails.com/cve/CVE-2018-0114/...

powersap

PowerSAP PowerSAP is a simple powershell re-implementation of popular & effective techniques of all public tools such as Bizploit, Metasploit auxiliary modules, or python scripts available on the Internet. This re-implementation does not contain any new or undisclosed vulnerability. PowerSAP allo...

POC-CVE-2018-0114

CVE-2018-0114 POC A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature JWS standard for JSON...

CVE-2018-0114

CVE-2018-0114 Exploit for Node-jose 0.11.0 written in Ruby Usage just input victim name into code and run the file via ruby ./exploit.rb A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is...

CVE-2018-0114-Exploit

CVE-2018-0114-Exploit A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature JWS standard for...

TwoMillion-Machine-Writeup

About Machine TwoMillion is an Easy difficulty Linux box that was released to celebrate reaching 2 million users on HackTheBox. The box features an old version of the HackTheBox platform that includes the old hackable invite code. After hacking the invite code an account can be created on the...

CVE-2026-47423-dompurify-xss-detector

DOMPurify re-clone logic flaw. Instead of relying on easily stripped source comments or version variables, this tool performs logic fingerprinting on minified production JavaScript bundles to identify unpatched allowed-tag layouts. Vulnerability Summary In DOMPurify versions up to 3.4.4, the...

Cmulator

Cmulator - Emulador de Sandbox de Ingeniería Inversa x86 Programable v0.3 Beta Cmulator es x86 - x64 Emulador de Sandbox de Ingeniería Inversa Programable para shellcode y binarios PE Basado en Unicorn, Capstone Engine y JavaScript. 💬 Esta es la última versión compatible con Pascal y la nueva bas...

SoliditySecurity

What's this Esta publicación pretende ser una introducción relativamente profunda y actualizada que detalla los errores pasados cometidos por desarrolladores de Solidity, con el fin de evitar que los futuros desarrolladores repitan la historia. Table of Contents 1. Reentrancia La Vulnerabilidad...