DDOS-RootSec

RootSec Archive Overview of RootSec Archive Welcome to the RootSec Archive , your ultimate resource for DDOS tools, scanners, botnets, exploits, and more. Our archive includes: Mirai Edits: Private and Public Versions QBot Edits: Private and Public Versions Other Botnet Variants: Diverse...

waybackpack

waybackpack Waybackpack is a command-line tool that lets you download the entire Wayback Machine archive for a given URL. For instance, to download every copy of the Department of Labor's homepage through 1996 which happens to be the first year the site was archived, you'd run: waybackpack...

exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documentation, and more useful information for those interested. Statement This repo was incomplete when published. In regard to AI usage, my fuzzing workflow was automated by AI with a strict workflow. I used GPT-5.3 for ALL the fuzzing, a...

red-tldr

Red Team TL;DR English | 中文简体 What is Red Team TL;DR? red-tldr is a lightweight red team command lookup tool. It helps experienced red team operators quickly find the commands, techniques, and key points they need — like a man command built for offensive security. Starting from v0.5.0, red-tldr...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

BGGP

Binary Golf Grand Prix This repo contains files for the Binary Golf Grand Prix, sorted by year. This repo now lives here! https://github.com/binarygolf/bggp...

slides

Diapositives HyperDbg Diapositives de présentations issues de conférences et de recherches sur HyperDbg. Diapositives par année 2022 2023 2024 2025 2026...

unblob

unblob Accurate, fast, and easy-to-use extraction suite for binary blobs. unblob parses unknown binary blobs for 78+ archive, compression, and file-system formats , extracts their content recursively, and carves out unknown chunks. It is the perfect companion for extracting, analyzing, and revers...

CVE-2023-38831-WinRAR-Exploit

CVE-2023-38831-WinRAR-Exploit إثبات المفهوم PoC استغلال لثغرة WinRAR CVE-2023-38831 الاستخدام: python poc.py مثال: python poc.py cutepicture.jpg exploit.bat output.rar فيديو PoC: https://youtu.be/TRe0eGIsB5k...

CVE-2016-2334

استغلال ثغرة CVE-2016-2334 في 7zip لملف نظام HFS+ hfsGenerator.py سكربت يُستخدم لإنشاء ملف HFS+ heap.js سكربت WinDbg بلغة js. بعد تحميل السكربت، قم بإعداد خطاف توزيع الذاكرة بالطريقة التالية: bp ntdll!RtlAllocateHeap "pt "dx Debugger.State.Scripts.heap.Contents.handleRtlHeapAlloc;g"" بعد ذلك يمكن...

electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

CVE-2022-36804-POC

CVE-2022-36804-POC 🕷️ تنفيذ أوامر عن بُعد بدون مصادقة في Bitbucket CVE-2022-36804 الاستغلال ابحث عن المستودعات المرئية للعموم - example.com/repos?visibility=public /rest/api/latest/projects/project-path/archive?filename=kiE0h&at=kiE0h&path=kiE0h&prefix=ax%00--exec=%60id%60%00--remote=origin...

cve-2023-38831

CVE-2023-38831 WinRAR - إثبات المفهوم للاستغلال يحتوي هذا المستودع على نص برمجي بلغة بايثون كإثبات المفهوم PoC لاستغلال CVE-2023-38831، وهي ثغرة أمنية في WinRAR الإصدارات الوسائط: : المسار إلى ملف الإغراء مثل document.pdf، image.jpg. : المسار إلى ملف الحمولة المراد تنفيذه مثل script.bat،...

6cy

sixcy — .6cy Container Format A Rust implementation of the .6cy archive format featuring: Self-describing blocks : Every block carries its own magic, version, codec UUID, sizes, and integrity checksums Mandatory integrity verification : CRC32 header checks + BLAKE3 content hashes on every block...

CVE-2026-44402

CVE-2026-44402 Exécution de commandes à distance totale sans authentification dans Voltronic Power SNMP Web Pro 1.1 Sommaire Fournisseur concerné : https://voltronicpower.com/ Produit concerné : SNMP Web pro 1.1 SNMP Web Pro 1.1 contient une vulnérabilité d'exécution de code à distance non...

CVE-2025-6218-WinRAR-Directory-Traversal-RCE

CVE-2025-6218-WinRAR-Traversée-de-répertoire-RCE CVE-2025-6218 est une vulnérabilité de traversée de répertoire dans WinRAR qui permet à un attaquant de placer des fichiers en dehors du répertoire d'extraction prévu lorsqu'un utilisateur extrait une archive .rar spécialement conçue. En exploitant...

CVE-2025-6218

CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - تجاوز المسار في WinRAR - تنفيذ التعليمات البرمجية عن بُعد RCE إثبات المفهوم معلومات إضافية: https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/ https://www.zerodayinitiative.com/advisories/ZDI-25-409/ ثغرة تنف...

OpenSTAManager-RCE-Exploit-CVE-2026-38751

Exploit RCE OpenSTAManager CVE-2026-38751 Téléversement de fichier arbitraire menant à l’exécution de code à distance Preuve de concept complète pour CVE-2026-38751 , écrite en Rust. Avertissement : Cet outil est destiné uniquement aux tests de sécurité autorisés et à des fins pédagogiques...

Exploits + Shellcode + GHDB

The Exploit Database Git Repository Ceci est un dépôt officiel de The Exploit Database, un projet sponsorisé par Offensive Security. Nos dépôts sont : Exploits & Shellcodes : gitlab.com/exploit-database/exploitdb Binary Exploits : gitlab.com/exploit-database/exploitdb-bin-sploits Papers :...

XnlReveal

À propos - v4.5 Il s'agit d'une extension Chrome/Firefox qui peut faire ce qui suit : Pour les hôtes dans le périmètre : Afficher une alerte pour tout paramètre de requête reflété et identifier les paramètres « sus ». Vérifier en option si les caractères ', " et sont reflétés sans être encodés...