GitSecure

GitSecure About GitSecure GitSecure is a GitHub action that can be used to alert security teams of any exposed API keys for push and pull requests. When files are added or modified on a GitHub repo, this action will be initiated and will start looking for exposed credentials in the system. After...

instrumentation_callbacks

instrumentationcallbacks Instrumentation callbacks are quite a fun undocumented part of Windows. All the code in this repository is released under the MIT license. This repository uses google style C++ spacing. PRs are welcome if you find issues, bugs, or believe a specific feature should be adde...

cve-2021-45232-exp

apisixdashboardrce Don't be evil...

wp2shell-poc

wp2shell PoC El primer PoC de la inyección SQL basada en tiempos pre-autenticación para la cadena de confusión de rutas por lotes de la API REST de WordPress CVE-2026-63030 + CVE-2026-60137 Se logró la ejecución de comandos, sin simplemente intentar descifrar la contraseña del administrador...

delete-self-poc

🗑️ delete-self-poc El delete-self-poc es una demostración de un método para eliminar un ejecutable bloqueado o un archivo actualmente en ejecución del disco. Este concepto fue descubierto inicialmente por Jonas Lykkegaard, y yo he creado la prueba de concepto POC para el mismo. Además, puede...

horus

Proyecto | Horus Tabla de Contenidos 🚀 Acerca de Horus ⚡ Instrucciones de Instalación y Uso ⚙️ Configuración de la API 🔮 Características Previstas 🤝 Mantenedores Actuales 🛠️ Contribuciones 📧 Contáctame 🤝 Agradecimientos 🚀 Acerca de Horus Horus es una herramienta integral todo-en-uno para asistencia...

CVE-2026-106208

Missing authorization in API in Google Chrome prior to 155.0.8059.39 a...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

SlackShell

SlackShell Description & Changelog v1.0 This PowerShell module includes various functions that utilize the Slack API to create a command and control channel. The main function, Start-Shell, will connect to a user-specified Slack channel and authenticate using a supplied API authentication token f...

plecost

Plecost 专业的WordPress安全扫描器 异步优先，库友好，无需外部API。 目录 什么是Plecost？ Plecost vs WPScan 快速入门 安装 CVE数据库 CVE检测引擎 扫描 检测模块 WooCommerce安全 WP eCommerce安全 输出格式 库使用 环境变量 架构 故障排除 本地测试环境 许可 什么是Plecost？ Plecost检测WordPress安装中的漏洞——核心、插件和主题——并将发现结果与每日更新的本地CVE数据库关联。它可以作为CLI工具、Python库或Celery等任务队列内部运行，输出格式一致且易于自动化。...

azureOutlookC2

Azure Outlook C2 Azure Outlook Command & Control that uses Microsoft Graph API for C2 communications & data exfiltration. Remotely Control a compromised Windows Device from your Outlook Mailbox. Creators: Bobby Cooke @0xBoku & Paul Ungur @C5pider CTI Threat update 02/13/22 Elastic Security Labs h...

gundog

gundog gundog - PowerShell based guided hunting in Microsoft 365 Defender Gundog provides you with guided hunting in Microsoft 365 Defender. Especially if not only for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID you might received via Email notification and gundo...

Ares

Project Ares Project Ares Injector Project Ares Injector is a Proof of Concept PoC loader written in C/C++ based on the Transacted Hollowing technique. The loader injects a PE into a remote process and features: PPID spoofing CIG to block non-Microsoft-signed binaries Dynamic function resolution...

Doozer

Doozer Doozer is an extensible, automated hash cracking utility used to automate the parsing, cracking, and organization of password hashes. Currently, Doozer supports nt/lm, ntlmv1, and ntlmv2 hashes from Responder or SAM, but sports a modular architecture that allows other hash types to be...

CVE-2020-17519

CVE-2020-17519 Apache Flink RESTful API Arbitrary File Read Apache Flink is a framework and distributed processing engine for stateful computations over unbounded and bounded data streams which developed using Java and Scala. A change introduced in Apache Flink 1.11.0 and released in 1.11.1 and...

CVE-2025-57231

CVE-2025-57231 - Docmost 0.22.0 - Lectura arbitraria de archivos Este repositorio contiene un exploit de Prueba de Concepto PoC para CVE-2025-57231. Descargo de responsabilidad Este proyecto se proporciona únicamente con fines educativos y para pruebas de seguridad autorizadas. No lo utilice cont...

CVE-2021-21315

the CVE-2021-21315's exploit code wrote with Rust lang I'm rust noob so this code was my part of RustLang practices Yes!!Let's Get the reverse shell!!!!!!!!!! !for education or researching only Build cargo build Usage ./exploit ./exploit http://target.com/api/osinfo?param 172.17.2.1 1234 need...

kyocera-cve-2022-1026

kyocera-cve-2022-1026 Una vulnerabilidad de extracción de datos no autenticada en impresoras Kyocera, que permite recuperar la libreta de direcciones en texto claro y las contraseñas de dominio. Resumen de la vulnerabilidad A finales de 2021, durante una prueba de penetración, estaba experimentan...

RemoteSessionEnum

Blog: https://0xv1n.github.io/posts/sessionenumeration/ The purpose of this project was to attempt to replicate the functionality of qwinsta /server: utilizing the largely undocumented Windows Station WinSta API...

Inspeckage

Inspeckage - Android Package Inspector Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. http://ac-pm.github.io/Inspeckage...