CVE-2025-0411-MoTW-PoC

CVE-2025-0411: Vulnerabilidad de Omisión de MoTW en 7-Zip Introducción CVE-2025-0411 es una falla en 7-Zip que omite la Marca-de-la-Web MoTW de Windows, permitiendo que archivos maliciosos de archivos comprimidos manipulados se ejecuten sin advertencias. Explotada en campañas de SmokeLoader, supo...

imbyter-WinRAR_CVE-2023-38831

💥 WinRAR Vulnerability Description CVE-2023-38831 A spoofable file extension vulnerability exists in WinRAR versions prior to 6.23. Attackers can exploit this vulnerability by crafting specially packaged files that appear harmless, such as JPG .jpg image files, text files .txt, or PDF documents...

ParamSpider

paramspider Minería de URLs desde rincones oscuros de los Archivos Web para caza de bugs/fuzzing/profundización 📖 Acerca de • 🏗️ Instalación • ⛏️ Uso • 🚀 Ejemplos • 🤝 Contribuir • Acerca de paramspider te permite obtener URLs relacionadas con cualquier dominio o una lista de dominios desde los...

mboxshell

mboxShell Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups 50 GB+ without loading them into memory. Leer en Espanol / Spanish Why this project exists When you export your email from Gmail using Google Takeout, you get one or more .mbox fil...

CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-

CVE-2025-8088 WinRAR Proof of Concept PoC-Exploit This repository contains a Proof of Concept PoC script for CVE-2025-8088 , a path traversal vulnerability in WinRAR versions up to 7.12. This PoC demonstrates how attackers could exploit the vulnerability to place malicious files outside the...

Exploits-Archives

This repository does not have a README...

IRFuzz

IRFuzz - Escáner simple con reglas Yara IRFuzz es un escáner simple con reglas Yara para archivos de documentos o cualquier archivo. Instalación 1. Requisitos previos Linux o OS X Yara: simplemente use el código fuente de la última versión, compílelo e instálelo o instálelo mediante pip install...

ZipRarHunter

ZipRarHunter ZipRarHunter es una potente herramienta de hacking ético de línea de comandos diseñada para descifrar contraseñas de archivos ZIP y RAR utilizando una lista de palabras. Automatiza el proceso de recuperación de contraseñas de archivos cifrados. Características Descifrado de archivos...

Ligeo Archives Ligeo Basics - Server Side Request Forgery

Ligeo Archives Ligeo Basics as of 0201-2022 is vulnerable to Server Side Request Forgery SSRF which allows an attacker to read any documents via the download features. id: CVE-2021-46107 info: name: Ligeo Archives Ligeo Basics - Server Side Request Forgery author: ritikchaddha severity: high...

ipaforge

IPAForge IPAForge is a dependency-free Python command-line tool for unpacking, inspecting, editing, and rebuilding iOS .ipa archives. It extracts the complete archive, converts editable Apple plist and localization formats into readable XML, preserves opaque and binary content byte-for-byte, and...

Se7enSlip

🔒 Se7enSlip - 7-Zip Vulnerability Scanner A stunning, interactive web application that demonstrates and helps detect the critical CVE-2023-52169 symlink traversal vulnerability in 7-Zip archives. ⚡ Features 🎯 Core Functionality ZIP Upload & Analysis - Drag & drop or click to upload ZIP files for...

ZipCracker

ZipCracker ZipCracker is a simple but powerful password brute-force utility for cracking password-protected ZIP archives. It’s built with Qt and integrates a custom cracking engine, providing both CLI and GUI support. ⚡ Disclaimer: This tool is intended for educational purposes, recovery of your...

CVE-2026-92000

adm-zip versions 0.5.14 through 0.6.0 are vulnerable to a denial-of-service attack caused by failing to apply zlib decompression output limits when ZIP entries declare a zero uncompressed size . An attacker can craft a malicious ZIP archive containing highly compressible entries that declare zero...

PSF-2026-41

In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...

Astra Linux – Vulnerability in FontForge

Splinefont in FontForge, with a version number of 20230101, allows for command injection through crafted archives or compressed files...

Astra Linux – Vulnerability in tar

GNU Tar version 1.34 has a one-byte out-of-bounds read operation, which allows for the use of uninitialized memory during a conditional jump. Exploitation to alter the control flow has not been demonstrated. The issue occurs in the fromheader section of the list.c file, due to a V7 archive where...

PT-2026-91410

🚨High - CPython tarfile Filter Bypass via Hardlink-to-Symlink CVE-2026-82049 In CPython tarfile.extractall, extraction filters can be bypassed with a crafted tar containing a hard link targeting a symlink, causing chmod/utime to apply to a file outside the destination dir or exposing its contents...

CVE-2024-55587

CVE-2024-55587 Este repositorio es una prueba de concepto para la vulnerabilidad CVE-2024-55587 en la biblioteca Python libarchive. El archivo generatezip crea un zip malicioso que explotará la extracción insegura de archivos en el método extractall de libarchive. El archivo vulnerablezip es solo...

gf

gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: root@kitploit: ▶ grep -HnrE...

zombieguard

ZombieGuard A defensive scanner for structural metadata evasion in ZIP archives. ZombieGuard detects contradictions between ZIP local file headers, central directory records, and payload characteristics. These contradictions can be used to make archive contents appear empty or harmless to one...