CVE-2020-11023

CVE-2020-11023 POC Dom XSS This proof of concept, demostraste an security flaw of dom-bases XSS manipulating and using JQuery DOM Methods. eg:.append, .text,.html Payload i used: alert"Text: " + $"test".text; To test the vulnerability do the following: 1. Open and web console, on your browser and...

deception-as-detection

Deception-as-Detection Deception based detection techniques mapped to the MITRE’s Adversarial Tactics, Techniques, and Common Knowledge ATT&CK™: Windows Technique Matrix Linux Technique Matrix Mac Technique Matrix 📔 Deception Stories A sample deception story is created as a reference. More...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

EagleEye

$$$$$$$$\ $$\ $$$$$$$$\ $$ | $$ | $$ | $$ | $$$$$$\ $$$$$$\ $$ | $$$$$$\ $$ | $$\ $$\ $$$$$$\ $$$$$\ $$\ $$ $$\ $$ |$$ $$\ $$$$$\ $$ | $$ |$$ $$\ $$ | $$$$$$$ |$$ / $$ |$$ |$$$$$$$$ | $$ | $$ | $$ |$$$$$$$$ | $$ | $$ $$ |$$ | $$ |$$ |$$ | $$ | $$ | $$ |$$ | $$$$$$$$\$$$$$$$ |$$$$$$$ |$$...

CVE-2026-54597

CVE-2026-54597 - ITFlow Time-Based Blind SQL Injection Severity: High Advisory: GHSA-m63v-j7fw-hq2h Affected: ITFlow agent/ajax.php — expires parameter Fixed in: Commit 63d8691 Author: iltosec Summary A time-based blind SQL injection vulnerability in ITFlow's share link generation handler. The...

CVE-2026-55200

Security Report: CVE-2026-55200 📝 General Description CVE-2026-55200 is a critical heap-based buffer overflow vulnerability dynamic memory corruption affecting the libssh2 library in versions up to 1.11.1. It allows a malicious SSH server to compromise vulnerable clients that connect to it. ⚡...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: An SQL Injection vulnerability exists in the Event management software version 2.3.0. An attacker can leverage the vulnerable "id" parameter in the...

firmware-mod-kit

Disclaimer Automatically exported from code.google.com/p/firmware-mod-kit Firmware Modification Kit This kit is a collection of scripts and utilities to extract and rebuild linux based firmware images. Extract a firmware image into its component parts User makes desired modification to the...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

CVE-2025-7606

CVE-2025-7606 code-projects AVL Rooms Project V1.0/city.php SQL injection NAME OF AFFECTED PRODUCTS AVL Rooms Vendor Homepage https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/ submitter dazhi Vulnerable File /city.php VERSIONS V1.0 Software Link...

ephemora-cell

Ephemora-cell Ephemora-cell is an ephemeral, stateless, capability-bound execution boundary for untrusted AI and agent-generated code. create → constrain → execute → prove → destroy Every execution starts from a clean state, runs under limits the host granted — fuel, memory, time, I/O, output siz...

doser.go

doser.go DoS tool for HTTP requests inspired by hulk but has more functionalities written in Go: How to use? 1. Compile it go build doser.go 2. Use it For example: 999 threads sends GET requests. P.S: Do not really attack my website pls ./doser -t 999 -g 'https://stylish-bear.ru' Usage Usage of...

vscan

vscan vulnerability scanner tool is using nmap and nse scripts to find vulnerabilities This tool puts an additional value into vulnerability scanning with nmap. It uses NSE scripts which can add flexibility in terms of vulnerability detection and exploitation. Below there are some of the features...

argumentinjectionhammer

Argument Injection Hammer Argument Injection Hammer is an extension for the intercepting proxy Burp Suite that extends the scanner's ability to detect argument injection and manipulation vulnerabilities in web applications and web services. A web application is vulnerable to argument injection wh...

frelatage

pip3 install frelatage The Python Fuzzer that the world deserves Installation | How it works | Features | Use Frelatage | Configuration Frelatage is a coverage-based Python fuzzing library which can be used to fuzz python code. The development of Frelatage was inspired by various other fuzzers,...

apparatus

ASTo - Apparatus Software Tool Archive Notice - After the completion of my research degree the repository has been archived. ASTo has made a significant impact to my research. I want to express my gratitude to everyone that helped make it better. However, this is not the end. Active development...

ghidralligator

Ghidralligator Ghidralligator is a C++ multi-architecture pcode emulator based on the Ghidra libsla, designed for fuzzing with AFL++. It allows performing emulation-based fuzzing while keeping interesting performances when dealing with binaries running on exotic architectures. Its extensible natu...

OffensiveRust

OffensiveRust My experiments in weaponizing Rust for implant development and general offensive operations. Table of Contents OffensiveRust Why Rust? Examples in this repo Compiling the examples Compiling the examples in this repo Cross Compiling Optimizing executables for size Pitfalls I found...

bt2

bt2: Blaze Telegram Backdoor Toolkit bt2 is a Python-based backdoor in form of a IM bot that uses the infrastructure and the feature-rich bot API provided by Telegram, slightly repurposing its communication platform to act as a C&C. Dependencies Telepot requests Installation $ sudo pip install...

CRIME-poc

CRIME-poc CRIME attack : a compression oracle attacks CVE-2012-4929 discovered by Juliano Rizzo and Thai Duong; In a compression oracle attack the use of adaptive data compression on a mixture of chosen plaintext and unknown plaintext can result in content-sensitive changes in the length of the...