3276 matches found
Nim-Reverse-Shell
Nim Reverse Shell A simple reverse shell written in Nim that bypasses Windows Defender detection see the "Tested Operating Systems" section below for more details. This code is made for educational purposes only. Tested Operating Systems Windows 10 10.0.19045 Windows 11 10.0.22621 Compilation The...
Shell3er
Shell3er Shell3er PowerShell Reverse Shell The Shell3er Reverse Features Get-RandomProcessName Function The Get-RandomProcessName function generates a random process name by concatenating "PS" with a new GUID. This is used to create unique and seemingly random process names, making it harder to...
Guide-and-theoretical-code-for-CVE-2023-35674
Guide-and-theoretical-code-for-CVE-2023-35674 Guide and theoretical code for CVE-2023-35674 Because android is out of my skill league please use this as a high overview from my pov on how i would exploit this cve. the code snippets are just skeletons , please help : So first of all u can't exploi...
PortGuard
Port-Guard Port-Guard is a USB port management and security tool designed for Debian. It allows you to control access to USB devices , maintain a custom whitelist , and run an automatic background scan to detect any unauthorized connection. ⚠️ Beta version : The software is functional, but...
lazyrecon
| | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and is optimized...
BakaBlocker
BakaBlocker Stop Secret Phone Slowdowns & 24/7 Spyware in One Tap ⚡ No Computer · 🔓 No Root · 🛡️ 100% Safe Updates, Banking & Chats · 🚀 Adaptive 120Hz -FF2E88?style=for-the-badge ✨ SAFE & LIVE ✨ | ⚡ PROCESSING ⚡ | 💢 TAP TO KILL 💢 ---|---|--- 🎭 Unmasked: Hidden 24/7 Spyware & Planned Obsolescence...
Netgear-WN604 downloadFile.php - Information Disclosure
There is an information leakage vulnerability in the downloadFile.php interface of Netgear WN604. A remote attacker using file authentication can use this vulnerability to obtain the administrator account and password information of the wireless router, causing the router's background to be...
sak1to-shell
sak1to-shell Multi-threaded, multi-os/platform Linux/Windows c2 server and Windows reverse TCP shell client both written in C. Compiling reverse TCP shell client with i686-w64-mingw32-gcc: i686-w64-mingw32-gcc sakitorevshell.c lib/windows/sakitowincore.c -o sakitorevshell.exe -s -ffunction-sectio...
nmapAutomator
nmapAutomator A script you can run in the background! Summary The main goal for this script is to automate the process of enumeration & recon that is run every time, and instead focus our attention on real pentesting. This will ensure two things: 1. Automate nmap scans. 2. Always have some recon...
CVE-2026-48732-poc
CVE-2026-48732: Warp Remote SSH cwd Command Injection PoC Description This repository contains a Proof of Concept PoC for CVE-2026-48732 , a high severity OS Command Injection vulnerability in Warp legacy SSH background command handling. Affected Warp versions used the remote working directory cw...
CVE-2025-41244
💻 Step-by-Step Technical Process Compile the Program bash Compile the C code into an executable gcc -o /tmp/httpd /tmp/CVE-2025-41244.c Make it executable chmod +x /tmp/httpd Test the Version Functionality bash Test the -v flag should print version and exit /tmp/httpd -v Test the -V flag should...
CVE-2026-67444 Hubleys: Stored XSS via unrestricted background-image upload, served with an attacker-chosen Content-Type and no CSP protection
Hubleys is a dashboard for self-hosted services. Prior to version 0.5.2, any authenticated non-admin Hubleys user can upload a file with an arbitrary extension as their dashboard "background image," and the server will later serve that file back with a Content-Type derived straight from the...
CVE-2026-67444
Hubleys , a dashboard for self-hosted services, is vulnerable to Stored XSS prior to version 0.5.2 . An authenticated non-admin user can upload a file with an arbitrary extension as a dashboard "background image." The server serves this file back with a Content-Type derived directly from the atta...
iOS18.6.2-Persistent-Automation-Exploit-in-Siri-Shortcuts-and-Apple-SWC
Improper Input Validation in Siri Shortcuts and Shared Web Credentials Discovered by: Joseph Goydish II Date Discovered: August 20, 2025 Severity: High Executive Summary This report outlines a high-severity vulnerability chain affecting Apple’s Siri Shortcuts and Shared Web Credentials SWC...
ServiceCheater
ServiceCheater Poc of CVE-2020-0113 & CVE-2020-0108 Analysis of Android Foreground Service Privilege Escalation Vulnerability Vulnerability Background In the AOSP August 2020 patch, a vulnerability in the framework layer AMS was disclosed, numbered CVE-2020-0108, rated high, and another numbered...
CVE-2026-126537
The Ninja Forms - File Uploads add-on for WordPress is vulnerable to Arbitrary File Deletion and arbitrary file read via S3/Dropbox/Google Drive exfiltration in versions up to, and including, 3.3.36. The flaw spans NFFUFieldsUpload::process in includes/fields/upload.php — which returns early...
CVE-2026-126537: SaturdayDrive Ninja Forms - File Uploads: The Ninja Forms - File Uploads add-on for WordPress is vulnerable to Arbitrary File Deletion (and arbitrary file read…
The Ninja Forms - File Uploads add-on for WordPress is vulnerable to Arbitrary File Deletion and arbitrary file read via S3/Dropbox/Google Drive exfiltration in versions up to, and including, 3.3.36. The flaw spans NFFUFieldsUpload::process in includes/fields/upload.php — which returns early...
CVE-2026-105554
Heap-based buffer overflow in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...
CVE-2026-105554
A heap-based buffer overflow vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) . This flaw allows an authorized attacker to perform a local privilege elevation attack. While the documents confirm the vulnerability exists and provide the CVSS v3.1 score (7.0 High),...
