CVE-2020-0728

CVE-2020-0728 Details The TrustedInstaller.exe service is running as NTAUTHORITY\SYSTEM and is hosting the Sxs Store Class 3C6859CE-230B-48A4-BE6C-932C0C202048 COM service along with the interface ISxsStore. The access permissions...

Forensia

Forensia Anti Forensics Tool For Red Teamers, Used For Erasing Some Footprints In The Post Exploitation Phase. Reduces Payload Burnout And Increases Detection Countdown. Can Be Used To Test The capabilities of Your Incident Response / Forensics Teams. Capabilities Unloading Sysmon Driver. Gutmann...

device-activity-tracker

Device Activity Tracker WhatsApp & Signal Activity Tracker via RTT Analysis ⚠️ DISCLAIMER : Proof-of-concept for educational and security research purposes only. Demonstrates privacy vulnerabilities in WhatsApp and Signal. Overview This project implements the research from the paper "Careless...

DVS

DCOM Vulnerability Scanner AKA Devious swiss army knife - Lateral movement using DCOM Objects Did you ever wonder how you can move laterally through internal networks? or interact with remote machines without alerting EDRs? Let's assume that we have a valid credentials, or an active session with...

WDBFontOverwrite

Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689. Works on iOS 16.1.2 and below tested on iOS 16.1 on unjailbroken devices. IPA available in the Releases section. Fonts included: DejaVu Sans Condensed DejaVu Serif DejaVu Sans Mono Go Regular Go Mono Fira Sans Segoe UI Comic San...

sift-kg

sift-kg Turn any collection of documents into a knowledge graph. No code, no database, no infrastructure — just a CLI and your documents. Drop in PDFs, papers, articles, or records — get a browsable knowledge graph that shows how everything connects, in minutes. sift-kg extracts entities and...

C0deVari4nt

C0deVari4nt Description C0deVari4nt is a variant analysis and visualisation tool that inspects codebases for similar vulnerabilities. It leverages CodeQL, a semantic code analysis engine, to query code based on user-controlled CodeQL query templates and passes the results to our client interface...

React2Shell-Scanner

CVE-2025-55182 and CVE-2025-66478 Vulnerability Checker A non-intrusive detection tool for identifying vulnerable React Server Components RSC implementations affected by CVE-2025-55182 React and CVE-2025-66478 Next.js. This tool performs active detection using benign, non-malicious payloads to...

BlueHound

BlueHound is an open-source tool that helps blue teams pinpoint the security issues that actually matter. By combining information about user permissions, network access and unpatched vulnerabilities, BlueHound reveals the paths attackers would take if they were inside your network It is a fork o...

Vidar-Stealer-Reverse-Engineering

Vidar Stealer 2.0 Reverse Engineering Analysis Overview This analysis covers an in-depth reverse engineering of Vidar Stealer 2.0 , a sophisticated information stealer that uses advanced evasion techniques to remain undetected. Key findings include: Task Scheduler Tampering: Modifies system task...

cook

COOK An overpowered wordlist generator, splitter, merger, finder, saver, create words permutation and combinations, apply different encoding/decoding and everything you need. Frustration killer! & Customizable! Index Installation Configuration Basic Ranges Param Approach COOK's Ingredients...

webscreenshot

webscreenshot Description A simple script to screenshot a list of websites, based on the url-to-image PhantomJS script. Features Integrating url-to-image 'lazy-rendering' for AJAX resources Fully functional on Windows and Linux systems Cookie and custom HTTP header definition support for the...

phpmyadmin-importldi

abraxaslabs.tech · github.com/abraxas ·&...

noPac

About Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user Changed from sam-the-admin. Usage SAM THE ADMIN CVE-2021-42278 + CVE-2021-42287 chain positional arguments: domain/username:password Account used to authenticate to DC. options: -h, --help show this hel...

phpmyadmin-auth-plugin-unquoted

abraxaslabs.tech · github.com/abraxas ·&...

phpmyadmin-vqb-xss

abraxaslabs.tech · github.com/abraxas ·&...

ipChecker

ipChecker Tool to check if a given IP is a node tor or an open proxy. Why? Sometimes all your throttles are not enough to stop brute force attacks or any kind of massive attacks, so it can help you to drop, some attackers who use tor or open proxies. How it works The ipChecker has some plugins...

hakrawler

Hakrawler Fast golang web crawler for gathering URLs and JavaScript file locations. This is basically a simple implementation of the awesome Gocolly library. Example usages Single URL: echo https://google.com | hakrawler Multiple URLs: cat urls.txt | hakrawler Timeout for each line of stdin after...

vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...

RpcProxyInvoke

RpcProxyInvoke Overview To create a general way to execute local and remote code, we designed a relatively obscure method of code execution, which we internally refer to as RpcCraft Self and RpcExec Remote Process. This technique leverages a methodology well-known among exploit developers, abusin...