CVE-2025-61299_POC

CVE-2025-61299POC Authenticated Command Injection in Nagios XI 2024R1 CVE-2025-61299...

CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC

CVE-2023-44487 - HTTP/2 Rapid Reset Checker PoC Descriptions This main is a Proof of Concept PoC for CVE-2023-44487 , also known as the HTTP/2 Rapid Reset Attack. The vulnerability allows attackers to perform a Denial of Service DoS attack by rapidly sending RSTSTREAM frames over HTTP/2...

CVE-2023-46805

Title: Proof of Concept for CVE-2023-46805 - For Educational Use Only License: This work is placed under the Creative Commons Attribution 4.0 International License CC BY 4.0. You are free to share, copy, distribute, and transmit this work, to adapt it or use it for other purposes, provided the...

lightweight_static_analysis

Lightweight Static Analysis This repo contains the PoC code for a ShellCon 2019 talk, "Rolling Your Own: How to Write Custom, Lightweight Static Analysis Tools" slides. In a nutshell, this repo demonstrates a few concrete examples of how you can build some interesting static analyses using open...

CVE-2026-48908

CVE-2026-48908 — SP Page Builder Unauthenticated RCE SP Page Builder comsppagebuilder for Joomla ≤ 6.6.1 allows unauthenticated attackers to upload arbitrary files and achieve Remote Code Execution. Field| Value ---|--- CVE| CVE-2026-48908 CWE| CWE-284 Improper Access Control Component| SP Page...

Sudo-Agent-CTF-

Sudo-Agent-CTF 🛸 Write-up for Sudo Agent CTF TryHackMe, with enumeration, web exploitation, steganography, SSH and privilege escalation via CVE-2019-14287. 📌 Machine Information Item| Information ---|--- Platform| TryHackMe System| Linux Difficulty| Easy Objective| Web exploitation, FTP, SSH,...

burp-ai-agent

Custom AI Agent The bridge between Burp Suite and modern AI. A note on the name: This extension is published as Custom AI Agent formerly Burp AI Agent. It was renamed to comply with PortSwigger's BApp Store naming requirements and to avoid confusion with Burp Suite's built-in Burp AI provider. Th...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

openssl-1.1.1g_CVE-2021-23840

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2026-24061-payload

Original source:https://github.com/K3ysTr0K3R/CVE-2026-24061 CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass GNU InetUtils versions 1.9.3 through 2.7 are vulnerable to a remote authentication bypass vulnerability in the telnetd server. The telnetd daemon fails to...

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 is a Passive Open Source Intelligence OSINT Automated Reconnaissance framework 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 can be used by Infosec Researchers, Penetration Testers, Bug Hunters to find deep information, more assets, WAF/CDN bypassed IPs, Internal/External Infra, Publicly exposed leaks and many...

omigood

omigood OM I GOOD? This repository contains a free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research team, specifically CVE-2021-38647. Original blog post from Wiz: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure...

CVE-2026-61511-PoC-Exploit

CVE-2026-61511 – vBulletin Pre‑Auth RCE Exploit & Verifier ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misu...

CVE-2018-11776

CVE-2018-11776 Proof of Concept exploit so I could quickly assess what sorts of protections and fixes are available. Originally found by Man Yue Mo, Semmle: https://semmle.com/news/apache-struts-CVE-2018-11776 Semmle had a "Apache Struts RCE - CVE-2018-11776 - PoC Exploit Demo" YouTube video up f...

Wubes

Wubes Architecture Prerequisites Usage Tricks Firefox sandbox References Wubes Wubes is like Qubes but for Windows. The idea is to leverage the Windows Sandbox technology to spawn applications in isolation. We currently support spawning a Windows Sandbox for the following applications: Firefox...

WHP

M$ Windows Hacking Pack Tools here are from different sources. The repo is generally licensed with WTFPL, but some content may be not eg. sysinternals. "pes" means "PE Scambled". It's useful sometimes. Remote Exploits Windows 2000 / XP SP1 MS05-039 Microsoft Plug and Play Service Overflow, Works...

OpenWire-CVE-2023-46604-Investigation

OpenWire-CVE-2023-46604-Investigation OpenWire Lab During my shift as a Tier 2 Security Operations Center SOC Analyst, I received an escalation from a Tier 1 analyst regarding a publicly accessible server that had been observed communicating with multiple suspicious external IP addresses. In...

cve-2025-21479_iqooneo8

CVE-2025-21479 — Qualcomm Adreno GPU Privilege Escalation Exploit SM8475 / iQOO Neo8 Local privilege escalation proof-of-concept code targeting CVE-2025-21479 , aimed at the Qualcomm Adreno GPU KGSL on the vivo V2301A iQOO Neo8 / PD2301, Snapdragon 8+ Gen 1 / SM8475, Adreno A730, Android 14, GKI...

Rusty-Playground

Rusty-Playground 🦀 A collection of Rust programs showcasing some offensive-securtiy and evasions techniques Tool| Description| References ---|---|--- ClipboardMon| Monitors the clipboard for changes and logs clipboard content or copies files depending on detected changes.| - DumpMDEConfig|...

CVE-2024-3400

PAN-OS Firewall Exploit Script This script is designed to demonstrate the exploitation of vulnerabilities in PAN-OS firewalls. It sends a specially crafted payload to the firewall's API endpoint to execute arbitrary commands. This exploit specifically targets CVE-2024-3400, a command injection...