CVE-2024-12970

CVE-2024-12970 CVE-2024-12970 describes an OS Command Injection vulnerability found in the My Computer software of the Pardus operating system. This vulnerability allows a user to inject system commands through the file name parameter, thus enabling an attacker to execute malicious commands on th...

papers-we-love

Papers We Love PWL is a community built around reading, discussing and learning more about academic computer science papers. This repository serves as a directory of some of the best papers the community can find, bringing together documents scattered across the web. You can also visit the Papers...

bumblebee

Threat Intelligence Exposure Catalogs Maintained exposure catalogs for recent supply-chain campaigns, built from public threat-intelligence reporting with Perplexity Computer and updated via PRs as fresh campaigns are reported. Pass a catalog to a scan with --exposure-catalog . Review the entries...

skyvern

🐉 Automate Browser-based workflows using LLMs and Computer Vision 🐉 Skyvern automates browser-based workflows using LLMs and computer vision. It provides a Playwright-compatible SDK that adds AI functionality on top of playwright, as well as a no-code workflow builder to help both technical and...

CVE-2025-59287-WSUS

CVE-2025-59287-WSUS powershell version of hawktrace POC exploit https://hawktrace.com/blog/CVE-2025-59287-UNAUTH 1: edit the variables in the script url, port, etc 2: start netcat listener 3: run script - it will auto download ysoserial.net, generate the payload and send exploit to WSUS server th...

CVE-2022-32883

CVE-2022-32883 Turning Your Computer Into a GPS Tracker With Apple Maps...

poisontap

PoisonTap - siphons cookies, exposes internal router & installs web backdoor on locked computers Created by @SamyKamkar || https://samy.pl When PoisonTap Raspberry Pi Zero & Node.js is plugged into a locked/password protected computer, it: emulates an Ethernet device over USB or Thunderbolt...

OSXAuditor

OS X Auditor OS X Auditor is a free Mac OS X computer forensics tool. OS X Auditor parses and hashes the following artifacts on the running system or a copy of a system you want to analyze: the kernel extensions the system agents and daemons the third party's agents and daemons the old and...

how_to_become_a_malware_analyst

How to Study to Become a Malware Analyst work-in-progress This is @PINKSAWTOOTH's personal opinion and may not necessarily be the best method for you. I hope you can refer to it as one example of a study method. Before reading this, the malware analyst I respect, @hasherezade, has written a blog...

forensicscanner

This repository does not have a README...

CVE-2026-54121-CertiGhost

CVE-2026-54121-CertiGhost This POC is the original POC code from https://github.com/aniqfakhrul/CVE-2026-54121/blob/main/certighost.py but with slight changes to use a computer object that we already controll instead of relying on creating a new computer that is generally limited through...

cua-kit

CUA-Kit A toolkit for enumerating and interacting with computer use agents on Windows and macOS systems. Tools Tool| Description| Outputs ---|---|--- cua-enum| Enumerate computer use agent configurations Claude Code, Codex CLI, Cursor, Gemini CLI| .exe, .x64.o cua-exec| Execute computer use agent...

R00tLib-Catalog

Note: This repository serves strictly as a curated bibliographic catalog and reading index for computer science and security engineering literature. No copyrighted files are hosted or distributed here. 📚 Open Tech Books Index A Community-Curated Knowledge Hub for Computer Science, Cybersecurity &...

columbo

Columbo Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets. It breaks down data to small sections and uses pattern recognition and machine learning models to identify adversaries behaviour and their possible locations in compromise...

GlobalUnProtect

GlobalUnProtect PoC tool for decrypting and collecting GlobalProtect configuration, cookies, and HIP files from windows client installations. Blog post: https://rotarydrone.medium.com/4a1d8fc7773e Usage Run as standalone or in-memory via execute-assembly or equivalent. Collects all contents to an...

Malware in tailwind-lines-clamps

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

rbcd-attack

Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...

Pachine

Pachine Python implementation for CVE-2021-42278 Active Directory Privilege Escalation. Installation $ pip3 install impacket Usage Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: pachine.py -h -scan -spn SPN -impersonate IMPERSONATE -domain-netbios NETBIOSNAME -computer-name...

Malicious code in pdf-html5-page-flip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3ff36ac8518eded0b7acb87f26ae3d704ff2924722ac2415450afc1ae32a869 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CUAHarm

Measuring Harmfulness of Computer-Using Agents 🤗 Hugging Face 📄 Paper 📋 Introduction CUAHarm is a benchmark designed to evaluate the safety risks of Computer-Using Agents CUAs - AI agents that can autonomously control computers to perform multi-step actions. Key Features 🔍 CUAHarm Dataset : A...