r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

CVE-2021-26084_Confluence

CVE-2021-26084 - Confluence Server Webwork OGNL injection An OGNL injection vulnerability exists that would allow an authenticated user and in some instances unauthenticated user to execute arbitrary code on a Confluence Server or Data Center instance. IMPORTANT This exploit is only intended to...

CVE-2026-24061

CVE-2026-24061 Telnet RCE Exploit - By SafeBreach Labs This script exploits the CVE-2026-24061 vulnerability in Telnet servers using a malformed USER environment variable. Usage Run the script with a target host: python telnetrce.py -p Arguments host: Target IP address or hostname required -p,...

zeek-asyncrat-detector

A Zeek Based AsyncRAT Malware Detector Malware often hides communications with its command and control C2 server over HTTPS. The encryption in HTTPS usually conceals the compromise long enough for the malware to accomplish its goal. This makes detecting malware that uses HTTPS challenging, but on...

CVE-2026-110838

A flaw was found in FreeRDP. A remote, unauthenticated attacker can exploit this issue by connecting to the shadow server and transmitting input data before authentication is completed. This allows the attacker to inject synthetic keystrokes directly into the host user's active session, potential...

cve-2021-22005-exp

cve-2021-22005-exp 0x01 Vulnerability Overview On September 21, 2021, VMware released a security advisory disclosing 19 security vulnerabilities in vCenter Server, with CVSSv3 scores ranging from 4.3 to 9.8. Among them, the most critical vulnerability is an arbitrary file upload vulnerability in...

dump1090

Dump1090 README Dump 1090 is a Mode S decoder specifically designed for RTLSDR devices. The main features are: Robust decoding of weak messages, with Dump1090 many users observed improved range compared to other popular decoders. Network support: TCP30003 stream MSG5..., Raw packets, HTTP. Embedd...

BotCon

BotCon Attlasian Confluence Un-Authenticated Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severity unauthenticated remote code execution...

RATel

RATel Please do not upload to virustotal ! To prevent RATel from being detected by antivirus, please do not upload the payload to TOTAL VIRUS. Each month I will test myself if the payload gets detected by antivirus. So you’ll have a photo every month to prove RAtel discretion. Description RAT-el ...

shepard

SHEPARD BITS This is a persistance tool using Windows Background Intelligent Transfer Service BITS. Functionality File Download, File Exfiltration, File Download + Persistent Execution Usage Run shepard.exe as Administrator with the following command line arguments: -d : regular file download to ...

httpx-action

httpx Action makes it easy to orchestrate httpx with GitHub Action. Example Usage GitHub Action running httpx on list of hosts - name: 💥 httpx - HTTP Web Server probing uses: projectdiscovery/httpx-action@main with: list: hosts.txt Example workflow : .github/workflows/httpx.yml name: 💥 httpx - HT...

openvpn-install

openvpn-install OpenVPN installer for Debian, Ubuntu, Fedora, openSUSE, CentOS, Amazon Linux, Arch Linux, Oracle Linux, Rocky Linux and AlmaLinux. This script will let you setup and manage your own secure VPN server in just a few seconds. What is this? This script is meant to be run on your own...

CVE-2025-55182-react2shell

react2shell CVE-2025-55182 toolkit. Scanner + exploit for unauthenticated RCE in Next.js via RSC payload injection. Node.js exploit: zero dependencies. Bash scanner: checks single URLs or bulk lists. Exploit Single command with output ./react2shell.mjs -t http://target:3000 -c "id" Interactive...

SQLRecon

SQLRecon SQLRecon is a Microsoft SQL Server toolkit that is designed for offensive reconnaissance and post-exploitation. For detailed information on how to use each technique, refer to the wiki. You can download a copy of SQLRecon from the releases page. Alternatively, feel free to compile the...

CVE-2018-3191

Weblogic-CVE-2018-3191 Remote Code Execution Vulnerability weblogic For Docker Environment 0x00 Introduction On October 17, Beijing time, Oracle's Critical Patch Update CPU for October fixed a high-risk WebLogic remote code execution vulnerability CVE-2018-3191. This vulnerability allows an...

firefox-devtools-mcp

Firefox DevTools MCP Model Context Protocol server that lets AI agents use Firefox. It has two main use cases: Agentic browsing : the agent uses the browser for regular tasks, such as reading pages, filling forms and going through multi-step flows on websites. Agent-assisted web development : the...

RemoteAssistance-Cpp

RemoteAssistance-Cpp RemoteAssistance like TeamViewer C++ version https://dydtjr1128.github.io/RemoteAssistance-Cpp/ It also made java swing version = Link This version is only implemented up to local mirroring, which has not yet used network. ToDo - x Screen capture - x Double buffering - Add...

Tyr

Tyr Peer-to-peer email on the Yggdrasil network. English | Русский Screenshots | | | ---|---|---|--- | | | What is Tyr? Tyr runs a complete mail server o...

monkey

Monkey documentation This folder contains the Monkey Documentation site. For more information see content/development/contribute-documentation.md...

CVE-2025-53770

SharePoint ToolPane RCE Exploit Security research toolkit for testing SharePoint ToolPane vulnerabilities Overview • Features • Getting started • Usage • Project structure This repository contains proof-of-concept exploits and analysis tools for the SharePoint ToolPane vulnerability CVE-2025-5377...