binlex

| Binlex - A Binary Genetic Trait Lexer Framework If maldevs think their binary is FUD, they're about to have an existential crisis. ---|--- Binlex extracts instructions, basic blocks, and functions from binaries and emits searchable JSON traits for reverse engineering, hunting, and similarity...

CVE-2021-36630

CVE-2021-36630 The SmartZone series devices of Ruckus have security risks. After notifying the manufacturer, they actively organized technical personnel to conduct investigations. During this period, we also provided security suggestions and verification methods many times. On July 19, the compan...

browser-crash-tool

Browser Crash Tool - Kali Overview This tool exploits a vulnerability in iOS WebKit CVE-2020-27950 using Metasploit’s webkitbackdropfilterblur auxiliary module. But seems it work on all browsers after some testing ,It crashes the target browser by loading a crafted web page. The tool also uses...

peirates

Peirates What is Peirates? Peirates, a Kubernetes penetration tool, enables an attacker to escalate privilege and pivot through a Kubernetes cluster. It automates known techniques to steal and collect service account tokens, secrets, obtain further code execution, and gain control of the cluster...

riscv-isa-sim

Spike RISC-V ISA Simulator About Spike, the RISC-V ISA Simulator, implements a functional model of one or more RISC-V harts. It is named after the golden spike used to celebrate the completion of the US transcontinental railway. Spike supports the following RISC-V ISA features: RV32I and RV64I ba...

CVE-2022-32898

CVE-2022-32898: ANEProgramCreate multiple kernel memory corruption Nov 23, 2022 • Mohamed GHANNAM @simo36 저자 commnet I'm sharing two other iOS kernel vulnerabilities reachable from the default app sandbox that don’t require you to open a UserClient: +16 kernel bugs I reported to Apple have been...

AADInternals

AADInternals AADInternals is PowerShell module for administering Azure AD and Office 365 For details, please visit https://aadinternals.com/aadinternals Installation Run the following PowerShell command to install Install-Module AADInternals...

Laravel-CVE-2021-3129

Laravel-CVE-2021-3129 CVE-2021-3129 Description Integrates https://github.com/zhzyker/CVE-2021-3129 and https://github.com/SNCKER/CVE-2021-3129. This project has the following advantages: Retains custom command functionality New: automatically exit after successful exploitation, improving...

keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...

CVE-2021-31760

..| CVE-2021-31760 |.. Description : Exploiting a Cross-site request forgery CSRF attack to get a Remote Command Execution RCE through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution...

Owasp-top-10-k8s-2025

OWASP Kubernetes Top 10 2025, hands-on A capture-the-flag built on the OWASP Kubernetes Top 10 — 2025. You've been hired to red-team NimbusMart , a fictional e-commerce company whose cluster grew faster than its security. Ten challenges, one per OWASP risk plus a bonus — exploit each weakness,...

CVE-2024-22369

CVE-2024-22369 Credits This POC is based on the reproducer built by Ziyang Chen of HuaWei Open Source Management Center The reproducer has been used to create this PoC, with some adjustments and clean up, and also enriched with some more automation. Prepare the enviroment We'll need a Mysql...

NTLMRecon

Overview NTLMRecon is a Golang version of the original NTLMRecon utility written by Sachin Kamath AKA pwnfoo. NTLMRecon can be leveraged to perform brute forcing against a targeted webserver to identify common application endpoints supporting NTLM authentication. This includes endpoints such as t...

sec-af

SEC-AF AI-Native Security Auditor Built on AgentField Output • Benchmark • How It Works • Comparison • Quick Start • API Other tools flag patterns. SEC-AF proves exploitability : every finding ships with a verdict, a data flow trace, and evidence you can act on. Free, open source, one API call. A...

wazuh-home-soc

Home SOC: Threat Detection Lab with Wazuh + Suricata A self-hosted Security Operations Center lab built to detect real attack techniques against a deliberately vulnerable target, using Wazuh as the SIEM and Suricata as a network-based IDS sensor. Built to demonstrate detection engineering skills ...

CVE-2022-22963

CVE-2022-22963 - Spring4shell To run the vulnerable SpringBoot application run this docker container exposing it to port 8080. Example: docker run -it -d -p 8080:8080 bobcheat/springboot-public Exploit Curl command: curl -i -s -k -X $'POST' -H $'Host: 192.168.1.2:8080' -H...

Ciphey

Ciphey Paste in text that's been encoded or encrypted. Ciphey works out how and hands you the plaintext. No key, no cipher name, no hints. Base64, hex, Caesar/ROT13, Vigenère, Morse code and 19 more, several layers deep. Install · Quick start · Features · Library · MCP · Docs · Discord ▶ Watch th...

react2shell

React2Shell: RCE 0-day in React Server Components CVE-2025-55182 React and CVE-2025-66478 Next.js This repository contains exploit code for authorized security testing and educational purposes only. See also: Multiple researchers have published analyses of this vulnerability. Check the References...

honeypot.rs

honeypot.rs Honeypot that scopes CVE-2023-46604 Apache ActiveMQ RCE Vulnerability and focused on getting Indicators of Compromise. This honeypot can be used in any Threat Intelligence infrastructure to get attacker's IP adresses, Post-Exploitation samples and malware samples. This information can...

CVE-2020-23583

CVE-2020-23583 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" REMOTE CODE EXECUTION found in "OPTILINK OP-XT71000N". The issue occurs when the attacker sends an arbitrary code on "/diagpingadmin.asp" to "PingTest" interface that leads t...