298090 matches found
XSS2Shell-CVE-2026-64638
XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/scanning utility for authorized WordPress security testing. The project contains a single-target exploitation workflow and a concurrent multi-target scan-only mode. Important: Use this project only on WordPress installations that you own or...
teamcity-CVE-2026-63077-pcap
teamcity-CVE-2026-63077-pcap teamcity teamcity-CVE-2026-63077 exploitation pcap info: https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/ https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077/ Target: teamcity server 2025.11.3 docker 192.168.64.31 po...
Win11Debloat
Win11Debloat Win11Debloat is a lightweight, easy to use PowerShell script that allows you to quickly declutter and customize your Windows experience, no installation required! You can use it to remove pre-installed apps, disable telemetry, remove intrusive interface elements and much more. No nee...
JShunter
JSHunter Professional JavaScript Security Analysis Tool Complete endpoint discovery, sensitive data detection, and advanced code analysis for security professionals About JSHunter is a comprehensive command-line tool for JavaScript security analysis and endpoint discovery. Built for security...
RustHound-CE
RustHound-CE is a cross-platform and cross-compiled BloodHound collector tool written in Rust, making it compatible with Linux, Windows, and macOS. It therefore generates all the JSON files that can be analyzed by BloodHound Community Edition. This version is only compatible with BloodHound...
jdvrif
jdvrif jdvrif is a fast, easy-to-use steganography command-line tool for concealing and extracting any file type via a JPG image. There is also a Web edition, which you can use immediately, as a convenient alternative to downloading and compiling the CLI source code. Web file uploads are limited ...
LogFileParser
Features Decode and dump $LogFile records and transaction entries. Decode NTFS attribute changes. Optionally resolve all datarun list information available in $LogFile. Option: "Reconstruct data runs". Recover transactions from slack space within $LogFile. Choose to reconstruct missing or damaged...
Gepetto
Gepetto Gepetto is a Python plugin which uses various large language models to provide meaning to functions decompiled by IDA Pro β₯ 7.6. It can leverage them to explain what a function does, and to automatically rename its variables. Here is a simple example of what results it can provide in mere...
Blue-Team-Notes
Blue Team Notes A collection of one-liners, small scripts, and some useful tips for blue team work. I've included screenshots where possible so you know what you're getting. Contact me If you see a mistake, or have an easier way to run a command then you're welcome to hit me up on Twitter or comm...
awesome-connected-things-sec
π Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. !https://img.shields.io/badge/%F0%9F%A4%96ROBOTICS-ROS&DDS...
ldeep
============== Project Status .. image:: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml/badge.svg :target: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml :alt: Build status .. image:: https://badgen.net/pypi/v/ldeep :target:...
nightcrawler
Nightcrawler An autonomous penetration testing agent that runs entirely on a smartphone. Drop the phone on a network, walk away, and it discovers hosts, maps services, finds vulnerabilities, and generates a pentest report β all without cloud connectivity. root@kitploit: βββββ β βββ βββ βββ βββ ββ...
CVE-2025-32463
CVE-2025-32463 Exploit Overview This repository provides a Go-based exploit tool for CVE-2025-32463 , a critical local privilege escalation vulnerability CVSS 9.3 in sudo versions 1.9.14 to 1.9.17. It allows unauthorized local users to gain root access by exploiting a flaw in the --chroot -R...
CVE-2026-49176_LPE_POC
CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026. Technical write-up: CVE-2026-49176 Exploit Development: WalletService to SYSTEM. A standard user creates a Wallet ESE database containing a persisted callbac...
VCG
==================================================================================== VCG VisualCodeGrepper Current version: 2.3.2 ==================================================================================== Contents: 1. Overview 2. Latest additions to VCG V2.3.2 3. Using VCG Input...
nimux
Pure-Nim network enumeration and remote execution toolkit nimux - Native Operator Toolkit nimux is a native command surface for authorized security assessments. It combines network enumeration, lightweight web discovery, credential validation, Active Directory operations, Kerberos workflows, remo...
HIKRAVEN
HIKRAVEN π‘οΈ Advanced Hikvision Security Assessment Platform - Professional Edition Features β’ Quick Start β’ Installation β’ Usage β’ Documentation β’ Disclaimer β οΈ IMPORTANT LEGAL NOTICE ! THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ! Unauthorized access to computer systems is illegal and...
moltis
Moltis β A secure persistent personal agent server in Rust One binary β sandboxed, secure, yours. Installation β’ Comparison β’ Architecture β’ Security β’ Features β’ How It Works β’ Contributing Moltis recently hit the front page of Hacker News. Please open an issue for any friction at all. I'm focus...
CVE-2024-56426
Exynos 990 / Exynos9830 Unified BootROM Exploit Unified CVE-2024-56426 tooling for the Exynos 990 Galaxy S20, S20 FE, and Note20 families. The exploit accepts all ten model names and maps them onto six verified stock bootloader families. !CAUTION The tracked key bundle and generated images are...
acp-framework-en
ACP β Agent Control Protocol Admission control for agent actions. Before any agent mutates system state, ACP answers four questions: Who is this agent? What are they authorized to do? Is this action policy-compliant? Can the outcome be traced to an accountable institution? Cryptographic identity ...