CVE-2021-30862

CVE-2021-30862 In 2021, CodeColorist released his writeups on the Mistuned vulnerabilities, a series of vulnerabilities affecting the iTunes Store allowing for one-click remote code execution. Notably, he demonstrated popping calc with no memory corruption at all, but with just a logic bug. Durin...

cuckoo-modified

This is a heavily modified version of Cuckoo Sandbox provided under the GPL. It offers a number of advantages over the upstream Cuckoo: Fully-normalized file and registry names 64-bit analysis Handling of WoW64 filesystem redirection Many additional API hooks Service monitoring Correlates API cal...

slicer

Slicer A tool to automate the recon process on an APK file. Slicer accepts a path to an extracted APK file and then returns all the activities, receivers, and services which are exported and have null permissions and can be externally provoked. Note : The APK has to be extracted via jadx or...

CVE-2025-39247

CVE-2025-39247 Target: HikCentral Professional HCMP, central VMS server CVE: CVE-2025-39247 — Access Control Vulnerability CVSS 3.1: 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Affected: V2.3.1 – V2.6.2 and V3.0.0 Fixed: V2.6.3 / V3.0.1 / Fix-Pack CVE-2025-39247 Disclosed: 2025-08-28 Analysis date:...

inquisitor

Inquisitor Notice This project is only partially complete and I have yet to implement many of the features described in the following blog post I made: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor is a simple tool for gathering information on companies and organizations through the...

CVE-LiteLLM

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

CypherDog

CypherDog4.3 PoSh BloodHound Dog Whisperer aka PowerShell Cmdlets to interact with BloodHound Data via Neo4j HTTP API Compatible with Bloodhound 4.3+ and neo4j 4.4+...

NixImports

NixImports A .NET malware loader, using API-Hashing and dynamic invoking to evade static analysis How does it work? NixImports uses my managed API-Hashing implementation HInvoke, to dynamically resolve most of it's called functions at runtime. To resolve the functions HInvoke requires two hashes...

halo-cors-csrf-CVE-2026-67921

CVE-2026-67921: Halo CMS CORS Misconfiguration + CSRF Protection Bypass Combined Attack Summary A critical combined attack vulnerability exists in Halo CMS versions up to 2.25.4 due to two security misconfigurations: 1. CORS Misconfiguration : The CORS policy allows any origin with credentials:...

CVE-2024-47533-PoC

CVE-2024-47533 – Cobbler XMLRPC Authentication Bypass → Reverse Shell Unauthenticated RCE 📌 Summary This repository contains a Proof-of-Concept PoC exploit for CVE-2024-47533 , a critical authentication bypass in Cobbler's XMLRPC API that leads to unauthenticated remote code execution RCE. The...

tmpmail

A temporary email right from your terminal written in POSIX sh tmpmail is a command line utility written in POSIX sh that allows you to create a temporary email address and receive emails to the temporary email address. It uses 1secmail's API to receive emails. By default w3m is used to render th...

CVE-2021-4191_Exploits

CVE-2021-4191Exploits pip install python-graphql-client Usage: python3 gitlabenum.py --rurl http://10.0.0.6/api/graphql Copyrights: https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/...

TwitWork

TwitWork What is TwitWork? Demonstration Require Installation Development setup Download precompiled exe What is TwitWork? Monitor twitter stream. TwitWork use the twitter stream which allows you to have a look at tweets in real-time. There is an input that allows you to filter the flow on one or...

CVE-2026-63030

CVE-2026-63030 - WordPress REST API Batch Route Confusion PoC Description Proof-of-concept exploit for CVE-2026-63030, a pre-authentication vulnerability in WordPress versions 6.9.0 through 7.0.1. It chains: REST API batch route confusion validation vs dispatch mismatch SQL injection via...

CVE-2026-54519

CVE-2026-54519 ai-agent-automation missing ownership checks in memory APIs allowed cross-user memory read and deletion. Primary advisory: GHSA-qv97-83w4-ff86 Researcher credit: @chaitanyagarware At a Glance Field| Value ---|--- CVE| CVE-2026-54519 GHSA| GHSA-qv97-83w4-ff86 Project|...

CVE-2024-2782-PoC

CVE-2024-2782-PoC CVE-2024-2782 Proof-of-Concept The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/fluentform/v1/global-settings REST A...

reposcanner

Reposcanner Reposcanner is a python script to search through the commit history of Git repositories looking for interesting strings such as API keys, inspired by truffleHog. Installation The python Git module is required python3-git on Debian. Docker docker build -t reposcanner . docker run -it...

WSSAT

WSSAT - Web Service Security Assessment Tool WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files. This tool accepts WSDL address list as input file and for each service, it...

dvcsharp-api

Damn Vulnerable C Application API Only Getting Started Note: This is a deliberately vulnerable app, please do not host it on production or Internet/public facing servers. Use with caution. Docker docker-compose up Manual Install .NET Core 2.x SDK Microsoft .NET Core SDK Install dependencies and...

CVE-2025-29557

CVE-2025-29557 – ExaGrid MailConfiguration API Credential Disclosure 📝 Overview Vulnerability Title : SMTP Credential Disclosure via MailConfiguration API Product : ExaGrid EX10 Backup Appliance Versions Affected : 6.3 – 7.0.1.P08 CVE ID : CVE-2025-29557 Severity : High Attack Vector : Remote...