BGGP

Binary Golf Grand Prix This repo contains files for the Binary Golf Grand Prix, sorted by year. BGGP is an annual small file competition, with players creating the smallest possible files that perform a specified function. Files can be no greater than 4096 bytes. Year| Theme| Description...

apxutil

A tool to manipulate Schneider Electric PLC archive files This tool can extract and reassemble PLC "archive" files, used by several Schneider Electric PLC:s, including at least M580, M340 and Quantum. The archive files with an extension of .sta are really a zip archive containing a few files...

CVE-2026-79824

A directory traversal vulnerability exists in HPE NonStop Python 3.x (specifically version T0993 - T0993L01^AAL and earlier ) caused by a .. (dot dot) sequence in filenames within a TAR archive. This flaw could allow an attacker to overwrite arbitrary files. HPE has released fixes, including vers...

CVE-2026-79824 HPE NonStop Python 3.x - Directory traversal vulnerability

A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive...

7-Zip-CVE-2025-0411-POC

7-Zip-CVE-2025-0411-POC CVE-2025-0411 Details "This vulnerability CVSS SCORE 7.0 allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

evine

Evine Interactive CLI Web Crawler. Evine is a simple, fast, and interactive web crawler and web scraper written in Golang. Evine is useful for a wide range of purposes such as metadata and data extraction, data mining, reconnaissance and testing. If you like the project, give it a star. It forces...

SteganographierGUI

SteganographierGUI Hide files into MP4/MKV files Please make sure you understand the meaning of the word "file extension " before watching the following tutorial. If you don't understand, please first search for "how to change file extension" If it's still MP4 after changing the extension, that...

cve-2023-38831

CVE-2023-38831 WinRAR Exploit PoC This repository contains a Python proof-of-concept PoC script for exploiting CVE-2023-38831, a vulnerability in WinRAR versions Arguments: : Path to the decoy file e.g., document.pdf, image.jpg. : Path to the payload file to execute e.g., script.bat, malware.exe....

CVE-2018-20250-WinRAR-ACE

CVE-2018-20250-WinRAR-ACE Proof of concept code in C to exploit the WinRAR ACE file extraction path CVE-2018-20250. Resources https://research.checkpoint.com/extracting-code-execution-from-winrar/ https://github.com/droe/acefile https://apidoc.roe.ch/acefile/latest/ Dependencies InvertedTomato.Cr...

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework 1. config your metasploit-framework directory $ vim config/config.rb $metasploitpath =...

exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documentation, and more useful information for those interested. Statement This repo was incomplete when published. In regard to AI usage, my fuzzing workflow was automated by AI with a strict workflow. I used GPT-5.3 for ALL the fuzzing, a...

DATA

DATA: Credential Phish Analysis and Automation Slides from presentation at CircleCityCon 2017 Tested on Headless Ubuntu Server 16.04 BUCKLEGRIPPER py Given a suspected phishing url or file of line separated urls, visit, screenshot, and scrape for interesting files. Requirements can be installed b...

unblob

unblob Accurate, fast, and easy-to-use extraction suite for binary blobs. unblob parses unknown binary blobs for 78+ archive, compression, and file-system formats , extracts their content recursively, and carves out unknown chunks. It is the perfect companion for extracting, analyzing, and revers...

CVE-2019-10685

CVE-2019-10685 The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the "TextField" parameter. Exploit-DB publication at https://www.exploit-db.com/exploits/46804 PacketStorm publication at...

6cy

sixcy — .6cy Container Format A Rust implementation of the .6cy archive format featuring: Self-describing blocks : Every block carries its own magic, version, codec UUID, sizes, and integrity checksums Mandatory integrity verification : CRC32 header checks + BLAKE3 content hashes on every block...

cve-2023-38831

CVE-2023-38831 Vulnerable: WinRAR = 6.22 https://www.win-rar.com/ Usage: python3 cve-2023-38831.py filename payloadname archivename Refs: https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ https://xakep.ru/2023/08/24/winrar-0day/ Telegram: https://t.me/ptsoft...

CVE-2023-38831-WinRAR-Exploit

CVE-2023-38831-WinRAR-Exploit Proof of concept PoC exploit for WinRAR vulnerability CVE-2023-38831 vulnerability Usage: python poc.py Example: python poc.py cutepicture.jpg exploit.bat output.rar PoC Video: https://youtu.be/TRe0eGIsB5k...

CVE-2023-38831-RaRCE

RaRCE, Exploit generator for CVE-2023-38831 This is an easy to install and easy to use, versatile exploit generator for CVE-2023-38831, a vulnerability that affects WinRAR versions before 6.23. RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a...

CVE-2018-20250

CVE-2018-20250-3 010 Editor template for ACE archive format & CVE-2018-20250-3 ace.bt 010 editor template acefile.py open source ACE extractor, used for writing the template watchme.gif demo wace269i WinAce installer Disclaimer: All resources in this project are for technical research purposes on...

cve-2023-38831

Project Introduction This is a tool written in Go for generating POC for the CVE-2023-38831 vulnerability Affected version: WinRAR 6.23 How to use? Compile go build cve-2023-38831.go Usage cve-2023-38831.exe 1234.jpg payload.cmd poc.zip Here, 1234.jpg can be the result of any file modification. I...