Google-Tensor-Chips

Google Tensor Chips — DarWINN NPU Access Direct-access tooling for the Google Tensor NPU DarWINN, reverse-engineered across two generations: Tensor G2 Pixel 7, codename Janeiro and Tensor G3 Pixel 8, codename Rio. Why this exists I was trying to get LLM inference running on the phone and wanted t...

usbsas

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Overview Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of the...

SOC335-CVE-2024-49138-Exploitation-Detected

CVE-2024-49138 Exploitation Detection In this project, I investigated a simulated security incident on the LetsDefend platform, where a Windows machine was compromised through the exploitation of CVE-2024-49138—a privilege escalation vulnerability in the Windows Common Log File System CLFS driver...

DirtyPipe

Dirty Pipe Exploit: CVE-2022-0847 The Dirty Pipe vulnerability, also known as CVE-2022-0847, is a significant flaw within the Linux kernel. This repository provides an adapted version of the widely used exploit code to make it more user-friendly and modular. A very good explanation of this...

CVE-2023-31704

CVE-2023-31704 description Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role. Vulnerability Type Incorrect Access Control Vendor of Product Sourcecodster Affected Product...

CVE-2025-29927_Scanner

CVE-2025-29927 Checker 📌 Introduction This script checks for the CVE-2025-29927 vulnerability in Next.js servers by testing multiple payloads in the x-middleware-subrequest header to detect unauthorized access. ❓ What is CVE-2025-29927? CVE-2025-29927 is a vulnerability that allows security...

NodeSecurityShield

Node Security Shield Node Security Shield NSS is an Open source Runtime Application Self-Protection RASP tool which aims at bridging the gap for comprehensive NodeJS security by enabling Developer and Security Engineer to declare what resources an application can access. Inspired by the Log4Shell...

authz0

Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials. URLs and Roles are managed as YAML-based templates, which can be automatically created and added through authz0. You can also test based on multiple authentication headers...

tomcatWarDeployer

tomcatWarDeployer Apache Tomcat auto WAR deployment & pwning penetration testing tool. What is it? This is a penetration testing tool intended to leverage Apache Tomcat credentials in order to automatically generate and deploy JSP Backdoor, as well as invoke it afterwards and provide nice shell...

CVE-2021-24006

CVE-2021-24006 – FortiManager Improper Access Control Exploit PoC PoC Proof of Concept - Educational Use Only Exploit for improper access to SD-WAN Orchestrator in FortiManager, exploiting an access control flaw CWE-284. Description The vulnerability CVE-2021-24006 affects FortiManager versions...

WordPress WP Ultimate Review plugin <= 2.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability

Authenticated Subscriber+ Arbitrary Shortcode Execution vulnerability discovered by Eunho Kim in WordPress Plugin Wp Ultimate Review versions = 2.4.3...

CVE-2024-28000

CVE-2024-28000 PoC This repository contains tools for exploiting the CVE-2024-28000 vulnerability affecting WordPress sites using the LiteSpeed Cache plugin. The included scripts automate the detection of exposed debug.log files and the exploitation of a privilege escalation vulnerability that...

access-point

Fake Access Point Rogue open Wi-Fi AP for traffic capture in controlled environments. Uses hostapd native nl80211 AP mode + dnsmasq DHCP/DNS + iptables NAT toward an uplink interface. Requirements Linux, root. Wireless card with AP-mode support iw phy → Supported interface modes: ... AP. Packages...

CVE-2022-23131

CVE-2022-23131 Zabbix Frontend Authentication Bypass Vulnerability Description This script is an exploit for CVE-2022-23131 , a vulnerability in the Zabbix SSO Single Sign-On mechanism. The vulnerability allows an attacker to bypass authentication via a specially crafted zbxsession cookie, giving...

CVE-2021-4034

CVE-2021-4034 pkexec The use of this python script exploits the vulnerability in the pkexec file to gain root access without providing credentials · Detects if the binary has SUID privileges, in which case it is vulnerable usuario@gatogamer $ ls -la /usr/bin/pkexec .rwsr-xr-x 1 root root...

redisHack

redisHack Redis unauthorized access detection and CVE-2022-0543 exploitation two-in-one script Usage:...

psc

psc psc ps container is a fast process scanner that uses eBPF iterators and Google CEL to query system state with precision and full container context. Why psc? Fast Kernel-Level Access with eBPF Iterators psc uses eBPF iterators to read process and file descriptor information directly from kerne...

Make-and-Break

Make-and-Break Create and exploit a vulnerable Virtual Machine Description: Built a custom Virtual Machine, running Ubuntu 18.04.1 and Webmin 1.810. Using CVE-2019-15107 to exploit a backdoor in the Linux System Administration Interface PROOF of CONCEPT --- Linux OS Ubuntu 18.04.1 will be deploye...

CVE-2021-24741

CVE-2021-24741 Multiple SQL Injection Unauthenticated in Support Board v 3.3.3 Description Support Board V 3.3.3 Multiple SQL Injection Vulnerability in Support Board Version 3.3.3 that allow remote unauthenticated attacker to execute arbitrary SQL commands via statuscode, department, userid,...

CVE-2021-22555

CVE-2021-22555 Este repositorio aloja el exploit de escalada de privilegios en Linux de TUKRU CVE-2021-22555. Demuestra cómo obtener privilegios de root a través de una vulnerabilidad. Probado en Ubuntu 5.8.0-48-generic y COS 5.4.89+. Úsalo de manera responsable y ética. CVE-2021-22555: Exploit d...