Exploit for Command Injection in Php

Task 04 — Exploitation with Metasploit Zyroo Cybersecurity...

CVE-2026-41940

CVE-2026-41940 - cPanel/WHM Auth Bypass Scanner & Exploit Tool cPanel/WHM Authentication Bypass Scanner & Exploit Tool for CVE-2026-41940 ⚠️ Disclaimer This tool is provided for educational purposes and authorized security testing only. By using this tool, you agree that: You will only test system...

CVE-2025-69985

FUXA ≤ 1.2.8 Bypass de autenticación + RCE CVE-2025-69985 📜 Descripción Este exploit en Python ataca CVE-2025-69985, una vulnerabilidad crítica de omisión de autenticación en FUXA software SCADA/HMI basado en web versiones ≤ 1.2.8. Al enviar una carga útil JSON manipulada con código Node.js...

Argus

Argus Security Intelligence Framework Argus is a multi-p...

CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC

CVE-2025-47812 — Wing FTP Server Vulnerabilidad de ejecución remota de código no autenticada en Wing FTP Server = 7.4.3. Un byte NULL inyectado en el parámetro username durante el inicio de sesión provoca que se escriba código Lua en el archivo de sesión. Cuando se accede a /dir.html con la cooki...

Exploiting-a-vulnerability-using-reverse-shell

Information Security Fundamentals — Spring 2026 Project Total Points: 20 | Deadline: No late submissions accepted Overview This project simulates a real-world attack-and-defend scenario across two virtual machines. You will exploit a critical pre-authentication RCE vulnerability CVE-2025-32433 in...

wp2shell-PoC

wp2shell-PoC ⚠ This tool is created solely for educational or bug bounty purpose only. Unauthorized use outside of controlled environments is strictly prohibited. Overview Proof-of-concept for the wp2shell vulnerability chain affecting WordPress Core, combining CVE-2026-63030 and CVE-2026-60137...

cve-2026-61732-lab

CVE-2026-61732 — Decepticon ChatML role-boundary forgery lab A self-contained, disposable lab that reproduces GHSA-g5f9-3xfg-p9mf / CVE-2026-61732: Decepticon , an autonomous red-team agent, wrapped web-crawl output into LLM messages without neutralizing ChatML special-token literals. On a...

VectorFreed

VectorFreed Abstract This document introduces "VectorFreed", a vulnerability chain that begins with a use-after-free I @rafabd1 found in librsvg CVE-2026-96889. In a Node.js/Sharp/libvips build, this bug led to command execution. It covers the bug, the paths confirmed in applications so far, and...

ubuntils

ubuntils Forensic triage for live Ubuntu systems — automated artifact collection, persistence detection, and guided remediation in under 5 seconds. The Problem When you suspect a Linux system is compromised, the first 30-40 minutes are usually spent running the same ten commands in sequence: chec...

R2Socks

R2Socks SOCKS5 proxy tunneled through Cloudflare R2 buckets. Client App ◄─SOCKS5─► Proxy ◄─── R2 Bucket ───► Agent ◄─TCP─► Target The proxy runs a local SOCKS5 server on the operator's machine. Every CONNECT request is serialized as binary packets and stored as R2 objects. The agent polls the sam...

waybend

Waybend Self-hosted SSRF infrastructure for redirect chains, exact protocol payloads, callbacks, DNS rebinding, and request evidence. One Rust binary provides the web workbench, JSON API, authoritative DNS responder, and stdio MCP interface. Install Install with Homebrew: brew install...

apk-reverse

English · 简体中文 Capabilities · Structure · Install · Requirements · Failure catalogue · Scope · Maintenance · Disclaimer apk-reverse An Agent Skill for Android APK reverse engineering, debloating, ad removal, surgical dex patching, repacking, and runtime/server analysis. It is a skill , not a...

cnspec

cnspec Open source, cloud-native security and policy project cnspec assesses your entire infrastructure's security and compliance. It finds vulnerabilities and misconfigurations across public and private cloud environments, Kubernetes clusters, containers, container registries, servers, endpoints...

Darkcloak

DARKCLOAK Linux process identity cloaking DARKCLOAK chains the manipulation of all userspace-visible identity sources into an 11-phase sequential pipeline that progressively transforms a process until it becomes indistinguishable from the impersonated one to userspace monitoring tools. To the bes...

anycast-census

LACeS Anycast Census LACeS: an Open, Fast, Responsible and Efficient Longitudinal Anycast Census System Contact: [email protected] Contents Downloading census data LACeS Explorer — interactive web interface Using the Python helper Understanding the dataset Data recommendations Detection...

Sandroid_Dexray-Intercept

Android Binary API Tracer Sandroid - Dexray Intercept Dexray Intercept is part of the dynamic Sandbox Sandroid. Its purpose is to create runtime profiles to track the behavior of an Android application. This is done utilizing frida. Install Just install it with pip: python3 -m pip install...

flipper-mcp

flipper-mcp A Rust MCP Model Context Protocol server that runs directly on the Flipper Zero's WiFi Dev Board v1 ESP32-S2, enabling AI agents to control a Flipper Zero over the network. What is this? This project puts an MCP server on the Flipper itself. Any MCP-compatible AI client Claude Desktop...

azure-pentesting-suite

azure-pentesting-suite azpt 🚧 Public beta. azpt is under active development — commands, flags, and output formats may still change between releases. Bug reports and feedback are welcome via GitHub issues. azpt is a Go toolkit for authorized Azure security assessments. It works from two...

SmuggleMyPayload

SmuggleMyPayload SmuggleMyPayload is an HTML Smuggling toolkit for generating HTML pages that embed and reconstruct files using JavaScript. It provides multiple HTML Smuggling methods, payload encoding options, JavaScript variations, and several built-in HTML templates. Features Multiple HTML...