CVE-2024-2876

CVE-2024-2876 POC for SQLi vulnerability in Icegram express Legal Disclaimer The Proof of Concept PoC script provided in this repository serves solely for educational and research objectives. Its purpose is to showcase a specific vulnerability and aid in comprehending associated security risks. A...

hetty

Hetty es un kit de herramientas HTTP para investigación en seguridad. Su objetivo es convertirse en una alternativa de código abierto a software comercial como Burp Suite Pro, con potentes funcionalidades adaptadas a las necesidades de la comunidad de infosec y bug bounty. Características Proxy...

uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...

local-llm-ctf

Local LLM CTF & Lab This repository is intended to be accompanied with the content at https://bishopfox.com/blog/large-language-models-llm-ctf-lab, which covers the goals of the research, explanations of the implementation, and a few results of the CTF...

exploits

Exploits Exploits and proof-of-concept code from the team at Hacker House. Filename| Description ---|--- AirWatchMDMJailbreakBypass.txt| Bypass jailbreak detection on mobile device management AirWatch for IOS adobe-psp.tgz| Adobe CoolType SING Table "uniqueName" Stack Buffer Overflow PSP bypass...

erica

Erica A neighbor for the GreatFET One targeting the 315/433/868/915MHz bands. This neighbour is not a design from GreatScottGadgets. So if it does not work, don't blame GSG but me. Name The arms of the plant erica remind me a bit to antennas. And that is what Erica shall be about. A neighbor with...

CTF-Write-ups

CTF-Write-ups Some CTF Write-ups Follow us on...

ctf-tools

ctf-tools Esta es una colección de scripts de configuración para crear una instalación de varias herramientas de investigación en seguridad. Por supuesto, esto no es un problema difícil, pero es realmente agradable tenerlas todas en un solo lugar que sea fácilmente desplegable en nuevas máquinas ...

CVE-PoC-Hub

🔬 CVE-PoC-Hub — Curated Proof-of-Concept Exploits Working, verified PoC scripts for recent CVEs. Tested in lab environments. For security researchers, penetration testers, and CTF players. ⚠️ Disclaimer All PoCs are for educational and authorized testing only. Each exploit has been tested in...

can-i-take-over-xyz

Aviso legal ⚠️ Los autores de este documento no asumen ninguna responsabilidad por la exactitud. Este proyecto solo está aquí para ayudar a guiar a los investigadores de seguridad a determinar si algo es vulnerable o no, pero no garantiza precisión. Este proyecto depende en gran medida de las...

WP-CVE-2023-32243

WP-CVE-2023-32243 How to use 1. Make sure you have installed the dependencies: root@kitploit: pip install requests 2. Run script with target list file: root@kitploit: python2 file.py ⚠️ Disclaimer This repository was created for security research and educational purposes only. More Disclaimer You...

CVE-2025-57819

Usage root@kitploit: python3 exploit.py Legal Warning !WARNING This software is intended for educational and authorized security research purposes only. Unauthorized use on any system is illegal and strictly prohibited. The author, kali , is not responsible for any damage or misuse of this...

graphql-threat-matrix

GraphQL Threat Matrix ¿Por qué graphql-threat-matrix? graphql-threat-matrix fue creado para cazadores de recompensas, investigadores de seguridad y hackers, con el fin de ayudar a descubrir vulnerabilidades en múltiples implementaciones de GraphQL. Las diferencias en cómo las implementaciones de...

xepor

Xepor Xepor pronunciado /ˈzɛfə/ , céfiro es un framework de enrutamiento web para ingenieros inversos e investigadores de seguridad. Proporciona una API similar a Flask para que los hackers intercepten y modifiquen solicitudes y/o respuestas HTTP en un estilo de codificación amigable para los...

securitylab

GitHub Security Lab This is the main git repository of GitHub Security Lab. We use it for these main purposes: We share with our community some best practices about security research and vulnerability disclosures in our docs We use issues on this repo to track CodeQL bounty requests. We use it fo...

cloud

Cloud Monitoreando el Panorama de la Nube Nuestra misión con este proyecto es ofrecer un mapa siempre actualizado y de libre acceso del panorama de la nube para cada uno de los principales proveedores de servicios en la nube. Decidimos comenzar recolectando datos de certificados SSL de máquinas A...

security-research

Security Research A collection of files related to my personal security research. Additional content will be posted on my blog https://blog.mirch.io. Tools Tool| Description ---|--- openssldircheck| Windows utility to check for potential insecure paths used by the OPENSSLDIR build parameter in...

CVE-2021-33739_PoC_Analysis

This is what I analyzed and studied about CVE-2021-33739 PoC. You can get the full resources from here: https://github.com/freeide2017/CVE-2021-33739-POC...

vulhub

Vulhub es una colección de código abierto de entornos vulnerables Docker preconstruidos y listos para usar. Con un solo comando puedes lanzar un entorno vulnerable para investigación de seguridad, aprendizaje o demostración, sin necesidad de experiencia previa con Docker. 中文版本Versión en chino...

xortool

xortool.py A tool to do some xor analysis: guess the key length based on count of equal chars guess the key base on knowledge of most frequent char Notice: xortool is now only running on Python 3. The old Python 2 version is accessible at the py2 branch. The pip package has been updated...