POC_CVE-2024-12537

CVE-2024-12537 معمل اختبار رفض الخدمة لتنسيق الكود في Open WebUI يحتوي هذا المستودع على معمل عزل محلي لإعادة إنتاج الثغرة ونموذج أولي لأداة Nuclei لـ CVE-2024-12537، وهي ثغرة رفض خدمة غير موثقة في نقطة نهاية تنسيق الكود في Open WebUI. لا يرسل المعمل حمولات كبيرة لرفض الخدمة. بل يتحقق من منطق الكش...

scour

Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework...

CVE-2025-8671-vulnerability-POC-

CVE-2025-8671-POC-de-vulnérabilité- CVE-2025-8671 - POC de vulnérabilité Scanner de vulnérabilité CVE-2025-8671 Un outil professionnel de recherche en sécurité pour détecter la vulnérabilité MadeYouReset CVE-2025-8671 dans les serveurs HTTP/2. Ce scanner utilise plusieurs heuristiques de détectio...

Resources-for-Beginner-Bug-Bounty-Hunters

Ресурсы для начинающих охотников за баг-баунти Введение Текущая версия: 2023.01 Добро пожаловать в наш репозиторий ресурсов по веб-хакингу и охоте за баг-баунти! Здесь представлена подборка инструментов, советов и ресурсов для веб-хакинга. Мы надеемся, что этот репозиторий станет для вас ценным...

CVE-2025-61303

CVE-2025-61303 - RecordedFuture Triage: Отказ в анализе через рекурсивное порождение процессов Описание Песочница RecordedFuture Triage для Windows 10 сборки 2004 и Windows 10 LTSC 2021 содержит критическую уязвимость в своём движке поведенческого анализа Windows, которая позволяет отправленному...

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide This project is intended to serve as reference when designing Cobalt Strike Malleable C2 profiles. Always verify your profile with ./c2lint /path/to/my.profile prior to use! Malleable C2 Profile Guidance The following dive deeper into the...

EUVD-2026-63471

Plate: SSRF with response disclosure in DOCX image embedding...

osx-re-101

osx & ios re 101 Work in progress as I am actively collecting these. À lire absolument https://reverse.put.as/ https://blog.paloaltonetworks.com/tag/mac-os-x/ https://www.synack.com/blog/r-d-projects/os-x-security-research/ https://pewpewthespells.com/re.html https://github.com/bx/machO-tools...

malware_training_vol1

malwaretrainingvol1 Materials for Windows Malware Analysis training volume 1 🚧 WARNING: work in progress! More material will be added gradually. Content The goal of this training it to build understanding of various common techniques used by malware. It contains elements of programming as well as...

CVE-2026-84886

A resource consumption vulnerability affects the OCR HTTP API component of simular-ai Agent-S versions up to 0.3.2. The flaw resides in the ImageData function within the file gui_agents/s1/utils/ocr_server.py, where manipulation of the img_bytes argument can exhaust system resources. The attack i...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

awesome-shodan-queries

Awesome Shodan Search Queries Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the literal internet search engine. Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild. Most...

pentest_lab

Pentest Lab I'm not actively developing on this anymore, but will fix bugs and look at issues and pull requests. Help is appreciated : This local pentest lab leverages docker compose to spin up multiple victim services and an attacker service running Kali Linux. If you run this lab for the first...

CVE-2026-84833

A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulnerability is an unknown functionality of the file packages/core/src/agent/agent.ts of the component Browser Agent Message Construction. Performing a manipulation results in...

morty

Morty Web content sanitizer proxy as a service Morty rewrites web pages to exclude malicious HTML tags and attributes. It also replaces external resource references to prevent third party information leaks. The main goal of morty is to provide a result proxy for searx, but it can be used as a...

CVE-2026-20274

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...