cve-2024-38077-madlicense_reproduction

CVE-2024-38077: Windows Remote Desktop Licensing Service Remote Code Execution "MadLicense" I. Vulnerability Overview CVE ID : CVE-2024-38077 Alias : MadLicense CVSS Score : 9.8 Critical Type : Heap-Based Buffer Overflow CWE-122 Discovered by : Ver, Lewis Lee, Zhiniang Peng Description : A...

PT-2026-110108

VTCode auto-approved find after three yeses, then -exe$''c slipped past the -exec block CVE-2026-104247, CVSS 6.3. Family learning plus exact-token denylists is a parser gap the shell wins. Fixed in 0.171.5. If your coding agent banks command approvals, which flags still get a free pass after the...

APIHarvester

ApiHarvester A full-pipeline black-box API security scanner written in Python. It enumerates endpoints, identifies parameters, probes HTTP methods, tests authentication/authorization logic, and runs standard OWASP API Top 10 attack simulations BOLA, Broken Auth, BFLA, Mass Assignment, Rate...

higernes

higernes passive osint toolkit in python. no api keys, no accounts, no logging into anything. give it a handle, an email, a domain, an ip, a phone number or a hash and it goes through what's already public. what it does username sweeps a handle across about 700 sites, using the community...

prompt-injection-email-samples

Prompt-Injection Email Samples A small, open test set of emails for checking whether your email security controls and AI mailbox assistants handle indirect prompt injection : instructions hidden in an email that try to hijack an AI assistant when it reads, summarizes or acts on that email. The se...

CVE-2016-10708

SSH NEWKEYS Flood PoC CVE-2016-10708 Description This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 CVE-2016-10708 by sending unexpected SSHMSGNEWKEYS packets which can result in DoS. It can operate in two modes: scan : Connects to one or more SSH servers,...

CVE-2026-63030-CVE-2026-60137-wp2shell-poc

wp2shell — WordPress REST API Time-Based Blind SQLi → RCE Proof‑of‑Concept Description pocwptot.py is a proof‑of‑concept PoC to exploit a time‑based blind SQL injection vulnerability on the WordPress REST API batch endpoint, and perform an escalation chain up to Remote Code Execution RCE...

CVE-2024-44083

CVE-2024-44083 Crashes IDA most versions see Compability section upon opening the malicious binary. Disclamer This software is provided "as is" for educational and research purposes only. The author is not responsible for any damage, loss, or legal issues arising from the use or misuse of this...

sast

sast — by Insomnia Free, fast static application security testing for your terminal & CI/CD. SAST + taint · secrets with live key validation · SCA/CVEs · IaC · CMS & web-shell/malware — one self-contained binary , the same engine in your IDE and your build. Get the editor plugins — same engine,...

discord-crasher

Media parser test-case generator media-gen is a small, dependency-light Rust command-line tool for building two media-parser test cases. It edits existing valid media files in place; it does not invoke FFmpeg, patch a browser, contact a server, or upload anything. The WebM case includes a bridge...

CVE-2021-3493

CVE-2021-3493 — Ubuntu OverlayFS Local Privilege Escalation A working proof-of-concept for CVE-2021-3493 , a local privilege escalation vulnerability in the Ubuntu kernel's OverlayFS implementation. An unprivileged user can mount an overlay filesystem inside a user namespace and set arbitrary fil...

CVE-2026-57517-CWP

CVE-2026-57517 CWP Exploit This repository contains a Go-based proof-of-concept tool for testing a known Control Web Panel CWP vulnerability scenario related to CVE-2026-57517. The implementation targets a blind SQL injection path and includes optional webshell deployment and command execution fl...

CVE-2026-43499_OPPO-MT6835

CVE-2026-43499 / GhostLock PoC for OPPO MT6835 This repository preserves a compact research snapshot for the GhostLock-style exploit chain targeting an OPPO MT6835-based device. Scope Exploit source tree under exploit Minimal proof-of-concept under poc Supporting analysis notes and build artifact...

google-poc

To reporoduce the CVE-2025-13425 just follow the steps below: Step 1: Clone the fresh osv-scalibr source code: $ git clone https://github.com/google/osv-scalibr Step 2: Remove the code mentioned in fix commit https://github.com/google/osv-scalibr/commit/e67c4e198ca099cb7c16957a80f6c5331d90a672 St...

CVE-2022-22963

CVE-2022-22963 CVE-2022-22963 PoC Slight modified for English translation and detection of https://github.com/chaosec2021/Spring-cloud-function-SpEL-RCE/blob/main/SpelRCEPOC.py . By default whoami is executed on the target and a file vulnerable.txt is created with the URLs that are vulnerable...

Fake_CVE-2020-1350

FakeCVE-2020-1350 This is the source code for a very crude fake CVE-2020-1350 exploit tool, which developed as part of honeypot repository for the SIGRed vulnerability, with the goal of tracking/mapping interest and attempts to use exploits for this critical vulnerability. This project was...

house_of_apple_2

Exploring House of Apple 2 on modern glibc This repository is a self-contained playground inspired by pwn.college's File Struct Exploitation module. It does not introduce a new variation of House of Apple 2, it just answers my curiosity about how the technique holds up on recent versions of glibc...

CnaEmulator

CnaEmulator - Cobalt Strike Aggressor Script Emulator & Mock Harness CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts .cna. It allows security researchers, tool developers, and BOF authors to validate script syntax,...

RC4Decryption

tlscsp.dll — Ghosted Microsoft RC4 LOLBin BYOK encrypt/decrypt primitive A Microsoft-signed, never-loaded DLL that ships a hardcoded RC4 key. Call LsCspEncryptHwid - get RC4 encrypt/decrypt running inside trusted Windows code, with zero crypto in your own binary. tlscsp.dll — Ghosted Microsoft RC...

CVE-2022-37706

CVE-2022-37706 The CVE-2022-37706 vulnerability is related to the Enlightenment window manager, specifically the enlightenmentsys binary. This binary has the SUID Set User ID bit enabled, meaning it can be executed with elevated privileges usually as the root user. Summary: Vulnerability :...