HERCULES

HERCULES HERCULES is a customizable payload generator that can bypass antivirus software. VERSION 3.0.5 INSTALLATION SUPPORTED PLATFORMS: Operative system | Version ---|--- Ubuntu | 16.04 / 15.10 Kali linux | Rolling / Sana Manjaro | Arch Linux | Black Arch | Parrot OS | 3.1 go get...

nftables-oob-read-write-exploit-CVE-2023-35001-

nftables oob read/write exploit CVE-2023-35001 Exploit used at pwn2own Vancouver 2023 on Ubuntu desktop. The exploit supports the kernel version available at the beginning of the event 5.19.0-35. Requirements C compiler Go compiler Usage Build $ make Run $ ./exploit This produces a lpe.zip file...

cve-2019-5736-exp

cve-2019-5736-exp This is a proof-of-concept PoC exploit for the CVE-2019-5736 vulnerability in runc, the runtime used in Docker. Disclaimer I undertook this project as an exercise, for educational reasons and for fun. It should go without saying that I do not support unethical and/or illegal...

CVE-2025-27591

CVE-2025-27591 – Privilege Escalation via Symlink Abuse in below 🛑 Disclaimer : This exploit is provided for educational and authorized security testing only. Unauthorized use may be illegal. 🧠 Overview below is a performance monitoring tool developed by Facebook for Linux systems. Versions of...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 Lab Environment Setup and Report CVE-2024-3094 Practice Reproduced the backdoor inserted in XZ Utils 5.6.0 and 5.6.1 in a lab environment, analyzing SSH authentication hooking status and risks. Environment Host OS : - Windows 11 Docker : Docker Desktop 28.0.1 Dockerfil...

CVE-2025-8088

Security Analysis: Path Traversal Exploitation in WinRAR CVE-2025-8088 Note: Repository under development. This project will receive future updates with additional analyses, analysis scripts non-exploit, and presentation material. New versions will be published as soon as they are available. This...

shirocrack

shirocrack Simple hash cracker for Apache Shiro hashes written in Golang. Useful for exploiting CVE-2024-4956. Let's keep this short CVE-2024-4956 is a path traversal vulnerability in Sonatype Nexus Repository that allows an unauthenticated attacker with network access to the server to read...

intel471-threat-hunting-cve-2023-46604

Intel 471 Threat Hunting Workshop – CVE-2023-46604 Investigation Overview This repository documents my first hands-on experience with Intel 471’s Intelligence-Driven Threat Hunting Workshop focused on CVE-2023-46604. Through this practical workshop, I investigated how attackers leveraged a critic...

CVE-2025-4802-Proof-of-Concept

CVE-2025-4802 — Proof of Concept ⚠️ Disclaimer: This repository is for educational and authorized security research purposes only. Do not use this exploit against systems you do not own or have explicit permission to test. Misuse may violate laws and regulations. CVE Summary Field| Details ---|---...

CVE-2024-48990-PoC

This simple shell script should create all the required file for this vulnerability to work. First it creates a randomly generated temporary file that will be used to compile the fake init.so file When the vulnerability is triggered. This file will execute and copy the bash binary to /tmp/ribbit...

frida-ios-dump-modern

Modern iOS IPA Dumper A modern iOS application memory decryption tool built for Frida 17.5.2+ with full support for iOS 14-16 and multiple jailbreaks. Status: ✅ Working and Tested - Successfully dumps and decrypts iOS apps using Frida 17.5.2 on: iOS 14.7.1 + Taurine jailbreak iPad mini 5 iOS...

cover

Cover Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow. Install · Quick start · Policies · Monitoring · Pi / OMP · Security Cover is a bidirectional privacy proxy for AI coding agents. It replaces matched sensitive values locally wit...

CVE-2018-9276

CVE-2018-9276 — PRTG Network Monitor ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal. Table of Contents Overview Vulnerability Details...

steg-tools

steg-tools This is a list of tools and resources for learning and experimenting with steganography and information hiding. Tools Exiftool is a Perl library and a command line application for the manipulation of metadata of different files, including EXIF, GPS, XMP, and ID3. Strings is part of the...

CVE-2025-55182

CVE-2025-55182 Next.js RCE Exploit Tool 🚀 This is an automated Proof-of-Concept PoC tool for the Next.js React Server Components CVE-2025-55182 Remote Code Execution RCE vulnerability. The tool integrates an interactive Shell , intelligent protocol detection , and multi-threaded batch scanning...

GPEWebDefender

GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...

Enigma

Enigma Engine A native C++ reverse-engineering engine inspired by Ghidra's analysis pipeline. Enigma removes the JVM dependency and provides a standalone analysis core that can be embedded, extended, and integrated directly with native tools and AI systems. Current State Enigma is under active...

shellcodetester

Probador de Shellcode ShellcodeTester es compatible oficialmente con Python 3.8+. Características principales Archivo ASM de ensamblador 32 y 64 bits Archivo ASM de ensamblador para Windows, Linux y MacOS Verificar badchars Salida a varios formatos NASM Shell Otras características increíbles...

metasploitable3-pentest-writeup

Metasploitable3 — Penetration Test Report Author: Arlen Fortunato Date: September 2026 Environment: Parrot OS attacker → Metasploitable3 Ubuntu 14.04 target Scope: Full network penetration test — enumeration, exploitation, privesc, post-exploitation Type: Home Lab / Capture The Flag Practice ⚠️ Al...

fileless-xec

➲ fileless-xec 🦜 👋 Ciertamente útil, principalmente por diversión, aproximadamente inspirado por el artículo de 0x00 artículo Uso en pentest: fileless-xec se utiliza en la máquina objetivo para ejecutar sigilosamente un archivo binario ubicado en la máquina del atacante ➲ Breve historia...