CVE-2026-92707

The MessagePack-CSharp library is vulnerable to an improperly controlled sequential memory allocation (CWE-1325) when deserializing attacker-controlled data as System.Object via the PrimitiveObjectFormatter . The root cause is that the formatter allocates an object[] based on declared array lengt...

CVE-2026-92707

MessagePack for C is a MessagePack serializer for C. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object from each declared array length before the...

CVE-2026-92707 MessagePack: Nested arrays can blow past buffer length limits

MessagePack for C is a MessagePack serializer for C. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object from each declared array length before the...

PoC-CVE-2021-4034

PoC-CVE-2021-4034 PoC reference https://github.com/arthepsy/CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Usage: gcc PoC.c -o PoC ./PoC...

f_poc_cve-2021-4034

fpoccve-2021-4034 usage cd /tmp git clone https://github.com/jcatala/fpoccve-2021-4034/ cd fpoccve-2021-4034 gcc -fPIC -c ISO646.c ld -shared -shared ISO646.o -o s.so gcc f.c -o f ./f...

CVE-2026-31431.c

CVE-2026-31431.c This content is provided for educational purposes only. The author assumes no responsibility or liability for any errors or omissions in the content. All information is provided "as is" with no guarantees of completeness, accuracy, usefulness, or timeliness. Any action you take...

UnhookMe

UnhookMe - Dynamically unhooking imports resolver In the era of intrusive AVs and EDRs that introduce hot-patches to the running processes for their enhanced optics requirements, modern adversaries must have a robust tool to slide through these watchguards. The propsed implementation of dynamic...

copyfail-c

copyfail-c A minimal C reproduction for researching Copy Fail CVE-2026-31431. This repository contains a compact C implementation built around the Linux kernel AFALG interface for vulnerability research, behavior analysis, and controlled reproduction. Repository layout . ├── src/ C source ├── dis...

CVE-2021-44132

CVE-2021-44132 This script exploits a vulnerability in the OMCISHELL object for C-DATA proprietary routers such as BESTCOM...

Shhhloader

Shhhloader Shhhloader is a work in progress shellcode loader. It takes raw shellcode as input and compiles a C++ stub that does a bunch of different things to try and bypass AV/EDR. The included python builder will work on any Linux system that has Mingw-w64 installed. 1/25/24 EDIT: Shhhloader no...

my-little-honeypot

my-little-honeypot Description This repository aims to show how easy it is to code a telnet honeypot in order to recovering IOT malwares, and thus, active Command & Control. This code has been released espacially because of the conference I gave at the INSHACK event in Lyon, France on April 6th...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Raw bytes manipulation utility, able to apply well known and less well known transformations, quick binary search, network proxy interception and more. Install on Windows: Download the release zip here Remember to install/repair the VS...

DNS-Persist

DNS-Persist DNS-Persist is a post-exploitation agent which uses DNS for command and control. The server-side code is in Python and the agent is coded in C++. This is the first version, more features and improvements will be made in the future. Getting Started Author 0x09AL -...

SharpPN

C PrintNightmare CVE-2021-1675 You'll need a DLL to use SharpPN. So once you have that, just build and specify the dll path in the command-line arguments. Build You can build yourself with C:\Windows\Microsoft.NET\Framework64\v3.5\csc.exe -out:SharpPN.exe C:\Path\to\Program.cs or by opening the...

copy-fail-CVE-2026-31431-C

copy-fail-CVE-2026-31431-C Verified on ubuntu 18.04,ubuntu 20.04,ubuntu 22.04,kali 2024,kali 2025,kali 2026 gcc -o exploit exploit.c -lz && chmod +x exploit && ./exploit Verified on ubuntu 25.04 arm64 gcc -o exploit exploitaarch64.c -lz && chmod +x exploit && ./exploit...

TeamViewer-dumper-in-CPP

TeamViewer-dumper-in-CPP Dumps TeamViewer ID,Password and account settings from a running TeamViewer instance by enumerating child windows. Compilation and requirements 1. Compile with CL 2. cl TeamViewerDump.cpp 3. or with cl TeamViewerDump.cpp /EHsc 4. Requirements 5. TeamViewer must be running...

Stealth-Kid-RAT

Stealth Kid RAT Codename: Kiddo Version: 0.01A Stealth Kid RAT is an opensource remote administration tool written in C. Currently delevoped under POC Concept branch. Under development features:- TCP network stream IPv4 & IPv6 support Fast network serialization NetSerializer Compressed QuickLZ &...

CVE-2019-3980

CVE-2019-3980 This repo was created to utilize the Nessus POC with a custom C executable to run commands on a remote host and get the output of the command. The python file is used to start a web server, execute the exploit, and then get the results over the web server. The C exe is uploaded...

CVE-2021-4034

Run the following commands on a vulnerable Linux machine in the directory where the c file is present and it should give you root access. $ gcc CVE-2021-4034.c -o exploit $ ./exploit whoami root...

android-c-sharp-rat-server

Android C R.A.T Server This is a pulgin built for the C R.A.T Server with the plugin system. 1. To install this plugin place the AndroidExtension.dll file from AndroidExtension/bin/Debug to /TutServer/bin/Debug/scripts 2. Then start the server and select the Plugins tab. 3. Select...