binwalk

Binwalk v3 This is an updated version of the Binwalk firmware analysis tool, re-written in Rust for speed and accuracy. What does it do? Binwalk can identify, and optionally extract, files and data that have been embedded inside of other files. While its primary focus is firmware analysis, it...

CVE-2024-50395

CVE-2024-50395 CVE Info An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the following version:...

CVE-2025-31033

⚠️ CVE-2025-31033 - CSRF in WordPress Buddypress Humanity Plugin Exploit – CVE-2025-31033 form action="http://target.com/wp-admin/admin.php?page=bph-settings" me...

pfsense-api-enroll-json-ssh

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-enroll-json-ssh pfsense-api-enroll-json-ssh Class: Privilege leftover Reach: Remote pfSense Plus MIM API toolkit b4acd7ca - Netgate example-add-devices.py is the documented way to register the Nexus...

goWAPT

GOWAPT - Go Web Application Penetration Test GOWAPT is the younger brother of wfuzz a swiss army knife of WAPT, it allow pentester to perform huge activity with no stress at all, just configure it and it's just a matter of clicks. How to install To install gowapt just type: make sudo make install...

DarkSpiritz

DarkSpiritz Python3 A penetration testing framework for Linux and Windows systems. Official DarkSpiritz Repository. The old organization was deleted by a rouge member. What is DarkSpiritz? Created by the SynTel Team it was a project of one of the owners to update and clean-up an older pentesting...

agentic-threat-hunting-framework

Agentic Threat Hunting Framework ATHF Quick Start • Installation • Documentation • Examples Give your threat hunting program memory and agency. The Agentic Threat Hunting Framework ATHF is the memory and automation layer for your threat hunting program. It gives your hunts structure, persistence,...

cve-2026-69243-poc-aiohttp-smuggling

CVE-2026-69243 — aiohttp Request Smuggling CWE-444 Request smuggling via rejected WebSocket upgrade in aiohttp Or build the Rust version zero dependencies, std only: git clone https://github.com/JVBotelho/cve-2026-69243-poc-aiohttp-smuggling cd cve-2026-69243-poc-aiohttp-smuggling/poc cargo build...

win-rat

win-rat Note: This repo is currently under testing.......soon will upload a fresh one. Virustotal Result: https://www.virustotal.com/gui/file/9fe32a10054b824b10cc24eb6ac1c96b5b8d4b3e730e4120c2a9891bc3d29a38/detection Contact: Telegram:- https://t.me/machine1337 Warning: Don't upload powershell or...

Mintinstall-object-injection

TR Linux mint yazılım yöneticisi v 7.9.5/9 yanlış yapılandırmadan dolayı obje enjeksiyonu ve keyfi kod çalıştırmamıza neden olmaktadır. EN Linux mint software manager v 7.9.5/9 causes us to execute object injection and arbitrary code due to incorrect configuration mintinsall TR Mint yazılım...

AutoDirbuster

/ | / / / / / / / / /| |/ / / / / / / / / / / / / / / / / / / / / // / // // / // / / / / // / // // / / // |,////// /./,///// Automatically run and save ffuf scans for multiple IPs Contents Quick Run FAQ Why? What is the recommended usage? What data does this need? How does this script...

react2shell-scanner

react2shell-scanner A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. For technical details on the vulnerability and detection methodology, see our blog post:...

Scannerweb

Scannerweb Vulnerability Scanner written in python3, It Fuzzes All URLs of target website & then scan them for scanner web Screeenshot Navigate to the /opt directory optional cd /opt/ Clone this repository git clone https://github.com/Khalidhusain786/Scannerweb.git Navigate to scannerweb folder c...

CVE-2026-38165-SSTI-

CVE-2026-38165 SSTI Velocity Server-Side Template Injection SSTI in XDocReport allows Remote Code Execution via Apache Velocity engine Bug Definition Overview of the vulnerability Server-Side Template Injection SSTI is a web security vulnerability that allows attackers to inject malicious code in...

CVE-2026-39363

CVE-2026-39363 — Vite Dev Server Arbitrary File Read PoC A drop-in PoC for GHSA-p9ff-h696-f583. It reads arbitrary files from the machine running the dev server by calling fetchModule over an unauthenticated HMR WebSocket, bypassing the HTTP-layer server.fs.allow restriction. Affected Versions...

Citrix-cve-2025-6543

Citrix CVE-2025-6543 Script to check if Citrix is vulnerable to CVE-2025-6543 citrix-cve-2025-6543-check.py is a Python 3 command-line script that identifies NetScaler ADC / Gateway instances vulnerable to the CVE-2025-6543 memory overflow published by Citrix in June 2025. Designed for pentesters...

CVE-2023-32233

Building And Configuring The instructions below were tested under Ubuntu 23.04 Lunar Lobster. Installing Build Dependencies Run the following command to install the build dependencies: sudo apt install gcc libmnl-dev libnftnl-dev Building Binary Run the following command to build the PoC binary:...

owasp-java-encoder

OWASP Java Encoder Contextual output encoding for Java 8+. Choose an encoder for the parser context receiving untrusted text: HTML, JavaScript, CSS, XML or a URL component. The core has no runtime dependencies; optional JSP and Jakarta adapters provide view-layer bindings. Encoding is one part of...

unicorn

unicorn Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Magic Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David...

CVE-2024-55968

CVE-2024-55968 POC for DTEX LPE CVE-2024-55968 Affected product: DEC-M DTEX Forwarder version 6.1.1. DTEX is a unified insider risk management platform. Affected component: DEC-M EventReportingService XPC Helper Attack vector: The DTEX Event Reporting Service was found with a privileged XPC helpe...