381168 matches found
nysm
nysm A stealth post-exploitation container. Table of Content 1. Introduction 2. Installation 2.1 Requirements 2.2 Linux headers 2.3 Build 3. Usage 3.1 Examples 4. How it works 4.1 In general 4.2 Hide eBPF objects 4.3 Hide Auditd logs 4.4 Hide PIDs 4.5 Hide sockets 5. Limitations Introduction...
4nonimizer
If you like the 4nonimizer, please help us with whatever you want! What is 4nonimizer? It is a bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers OpenVPN, whether free or paid. By default, it includes several...
CVE-2024-50340
CVE-2024-50340 POC Requirements The registerargcargv option must be enabled in the PHP configuration file php.ini. This setting loads command-line arguments and query params into $SERVER'argv'. https://www.php.net/manual/en/ini.core.phpini.register-argc-argv Explanation of Vulnerable Code This...
onelogon
Onelogon: Taking over Active Directory Accounts via Netlogon This repository contains code and data accompanying our paper Onelogon: Taking over Active Directory Accounts via Netlogon WOOT'26. 1. Context 2. How to Cite 3. Artifact Structure and Setup 4. Setting Up a Test Environment 5. Scanning f...
MeshCore
About MeshCore MeshCore is a lightweight, portable C++ library that enables multi-hop packet routing for embedded projects using LoRa and other packet radios. It is designed for developers who want to create resilient, decentralized communication networks that work without the internet. π What is...
LAB1-metasploitable
LAB1-metasploitable Exploitation des vulnΓ©rabilitΓ©s sur la version vsftpd 2.3.4 du service ftp CVE-2011-2523 Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution Date: 9-04-2021 Exploit Author: HerculesRD Software Link: http://www.linuxfromscratch.org/thomasp/blfs-book-xsl/server/vsftpd.html...
sliver
Sliver Sliver is an open-source, cross-platform adversary emulation and red team framework designed for organizations of all sizes to perform authorized security testing. Sliver implants support command-and-control C2 over Mutual TLS mTLS, WireGuard, HTTPS, and DNS. Implants are dynamically...
CVE-2026-33234
How I Turned AutoGPT's Email Feature Into an Internal Network Scanner CVE-2026-33234 | Moderate 5.0 | GHSA-4jwj-6mg5-wrwf Author: Pavan Nallamothu I was mapping every user-controlled input that touched the network in AutoGPT Platform. The HTTP layer was locked down tight. Private IP ranges...
MassZeroLogon
Tool for mass testing ZeroLogon vulnerability CVE-2020-1472 Steps to procedure For using this tool you need a hosts file with the ip adress and hostname separated by comma Hosts file sample 1.1.1.1 , WIN-6641554161U 1.1.1.1 , SERVERDATA 1.1.1.1 , SERVER2012 1.1.1.1 , DC01 1.1.1.1 , SERVER You can...
Decepticon
Decepticon β Autonomous Red Team Agent "Another AI hacker? Let us guess β it runs nmap and writes a report." !Live hosted apphttps://img.shields.io/badge/Live%20App-app.decepticon.red-FF2D55?logo=roc...
CVE-2026-25747
LevelDB Deserialization Vulnerability Reproducer This project demonstrates a Java deserialization vulnerability in Apache Camel's LevelDB Aggregation Repository, similar to CVE-2024-23114 which affected the Cassandra Aggregation Repository. Vulnerability Summary Property| Value ---|--- Component|...
CVE-2024-24576.jl
CVE-2024-24576 PoC in Julia Ξ» julia main.jl Enter arguments: hello Output: Argument received: hello Ξ» julia main.jl Enter arguments: hello & whoami Output: Argument received: "hello & whoami" Ξ» julia main.jl Enter arguments: hello" & whoami Output: Argument received: "hello" desktop-9zk7mal\lpn...
rndis-co
RNDIS-CO Summary The RNDIS USB Gadget may be exploited to dump contents of kernel memory space via packet filter update mechanism. Description The RNDISMSGSET usb control transfer request handler - rndissetresponse calls genndissetresp passing a buffer pointer offset by BufOffset + 8. The BufOffs...
dual-ec-drbg
DualECDRBG Backdoor: Educational Proof-of-Concept For Security Professionals | Educational Purposes Only β οΈ Disclaimer This repository contains an educational demonstration of the DualECDRBG cryptographic backdoor CVE-2014-8610, a well-documented vulnerability disclosed following the Snowden...
CVE-2022-1388-rs
CVE-2022-1388-rs Scanner and Interactive shell for CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust Summary To wrap things up here is an overview of the necessary conditions of a request for exploiting this vulnerability: Connection header must include X-F5-Auth-Token...
idahunt
Overview Requirements Features Scripting Usage Simulate without executing Initial analysis Execute IDA Python script Binary diffing Requirements Initial analysis Diffing files Diffing a function Filters Architecture detection Target-specific Known projects using idahunt Overview idahunt is a...
CVE-2022-26134
CVE-2022-26134 - OGNL injection vulnerability. Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and lower products. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or...
HashDump-BypassEDR
1 Project Overview By leveraging the extended capabilities of the system whitelisted program Reg.exe, we cleverly bypass the interception points of antivirus software, achieving the goal of bypassing EDR to dump hashes. According to actual testing, this method is effective against Windows-series...
CVE-2026-Termius
Termius macOS Application Vulnerability Report CVE-2026-Termius Target : Termius macOS Version Tested : Latest as of Jan 2026 Impact : Remote Code Execution RCE, Local Privilege Escalation LPE, App Security Bypass π¨ Executive Summary Three critical vulnerabilities were identified in the Termius...
missing-cve-nuclei-templates
Weekly updated list of missing CVEs in nuclei templates official repository Note This repository is 100% automated so there can be errors, but in general is pretty accurate. Go to section "How it works" to understand how data is collected. Stats π CVEs analyzed : 178590 CVEs missing : 70208...