AutoRDPwn

AutoRDPwn is a post-exploitation framework created in Powershell, designed primarily to automate the Shadow attack on Microsoft Windows computers. This vulnerability listed as a feature by Microsoft allows a remote attacker to view his victim's desktop without his consent, and even control it on...

sniffly

Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...

BITB

BITB Browser templates for Browser In The Browser BITB attack. More information: https://mrd0x.com/browser-in-the-browser-phishing-attack/ Usage Each folder has a index.html file which has 4 variables that must be modified: XX-TITLE-XX - The title that shows up for the page e.g. Sign in to your...

clusterd

clusterd clusterd is an open source application server attack toolkit. Born out of frustration with current fingerprinting and exploitation methods, clusterd automates the fingerprinting, reconnaissance, and exploitation phases of an application server attack. See the wiki for more information...

hashcatch

hashcatch Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog Written by @SivaneshAshok PoC of hashcat...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

CVE-2026-96512

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-96512 CVE-2026-96512 sudo 1.9.13p3 Debian bookworm - Sudo Project I am @abraxasnull. Local lab, not HTTP. The client is CVE-2026-96512-Abraxas-Labs.py. NOTBEFORE / NOTAFTER timestamps without a trailing Z go...

h4rpy

h4rpy h4rpy is an automated WPA/WPA2 PSK attack tool, wrapper of aircrack-ng framework. h4rpy provides clean interface for automated cracking of WPA/WPA2 PSK networks. h4rpy enables monitor mode on selected wireless interface, scans the wireless space for access points, tries to capture WPA/WPA2...

RFCrack

/ | | | / | | | | / \ ' - / \ / - | / \ V V / ' / \ || - /||// /| ///|. //, / / |/ | /| | | || | / | | '/ /| / / | || || , | \ Welcome to RFCrack - A Software Defined Radio Attack Tool Developer: @Ficti0n - http://ConsoleCowboys.com CCLabs: http://cclabs.io Blog: console-cowboys.blogspot.com...

NSEC3-Encloser-Attack

NSEC3-Encloser-Attack Zonefile Generation This project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. Requirements Python3 tested on Python3.10 Installed Python dependencies: cryptography 42.0.5 dnspython 2.6.1 Components lib: Python...

CVE-2023-33768

CVE-2023-33768 Description Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows attackers to cause a Denial of Service DoS via a crafted firmware file. Additional Information When updating the firmware of the Wemo...

CVE-2024-21107

CVE-2024-21107 Oracle VM VirtualBox for Windows prior to 7.0.16 - Elevation of Privileges Description: A vulnerability has been identified in Oracle VM VirtualBox on Windows where the setup fails to set proper access rights for its installation folder if a non-default installation path was chosen...

CVE-2023-46451

CVE-2023-46451 Suggested description Sourcecodester Best courier management system v1.0 is vulnerable to Cross Site Scripting XSS in the change username field. Additional Information Here I update the video POC on the you tube : https://youtu.be/f8B3m5YfqI Vulnerability Type Cross Site Scripting...

cloud-middleware-dataset

Cloud Middleware Dataset This project contains cloud middleware i.e. agents installed by cloud security providers used across the major cloud service providers Azure, AWS and GCP. The cloud middleware dataset lists all agents installed by the major cloud service providers Azure, AWS, and GCP. The...

DEFCON-CICD-pipelines-workshop

CI/CD : The new Eldorado ? Abstract CI/CD pipelines are increasingly becoming part of the standard infrastructure within dev teams, with the rise of new approaches such as Infrastructure as Code, the sensitivity level of such pipelines is escalating quickly. In case of compromise, it is not just...

http2-security-lab

🦣 TuskMads HTTP/2 Security Lab A from-scratch HTTP/2 attack simulation and defense lab built in pure Python. What This Does Simulates 3 real-world HTTP/2 attacks against a vulnerable server, then demonstrates 5 defense layers blocking all 3 on a hardened server. Attacks Implemented Attack|...

next-bug-CVE-2025-55182

用於復現 CVE-2025-55182 npm run dev npm run exploit.js // Simulated malicious attack...

CVE-2025-56503

CVE-2025-56503 Description An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall file with a crafted binary in the installation folder. Affected Product Sublime Text 4, Versio...

CVE-2017-8869

CVE-2017-8869 - MediaCoder 0.8.48.5888 - Local Buffer Overflow SEH Exploit rewritten with reverse shell option...

CVE-2023-2594

CVE-2023-2594 https://vulners.com/cve/CVE-2023-2594 A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. ...