OAuth-Request-Crafter

OAuth-Request-Crafter OAuth Request Crafter is a tool that helps you to play with OAuth signature protected URLs. Features Support GET,POST,PUT and DELETE Proxy the Request Tamper URL, Parameters & Headers on the GO Add additional Headers and Cookie Why? When dealing with OAuth signature protecte...

restler-fuzzer

RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service with an OpenAPI formerly Swagger specification, RESTler analyzes its...

EtwLeakKernel

EtwLeakKernel This repository contains a PoC for a program that utilizes ETW to leak kernel memory addresses. It does so by creating a consumer could be to almost any provider as almost all of them leak kernel addresses and requesting a stack trace from it. Once the stack trace is received, it is...

MeshTNC

MeshTNC MeshTNC is a tool for piping LoRa data to and from consumer grade radios. Code - github.com/datapartyjs/MeshTNC Releases - github.com/datapartyjs/MeshTNC/releases Support - ko-fi/dataparty Features Simple serial cli built into the firmware Transmit raw bytes hex over LoRA using serial CLI...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

atproto

Blacksky AppView This is Blacksky's fork of the AT Protocol reference implementation by Bluesky Social PBC. It powers the AppView at api.blacksky.community. We're publishing this for transparency and so other communities can benefit from the work. This repository is not accepting contributions,...

redis-poc

Redis 인증 RCE stream NACK double free, TDigest 및 TopK 모듈 버그 Redis 6.2.22, 7.4.9, 8.6.4 를 대상으로 하는 비파괴적non-destructive RCE 익스플로잇입니다. stream consumer-group 공유 NACK double freeCVE-2026-25243 패치 우회를 이용하며, 8.8.0 은 번들 RedisBloom의 TDigest 힙 오버플로, 8.8.1 은 TopK wild freeCVE-2026-25589 패치 우회를 이용합니다. 파일...

CVE-2017-2751

You'll find the .tex and .pdf file for CVE-2017-2751, a BIOS/EFI password extraction for consumer HP laptops...

invokeai-consumer

invokeai-consumer Demo consumer app pinned to invokeai==5.0.1 — used by Endor Labs to demonstrate vulnerability detection and exploit-chain analysis against the upstream invokeai library. v5.0.1 is the specific release named in the source CVE CVE-2024-10821...

gin-vulnerable

gin-vulnerable Демонстрационный потребитель зафиксирован на github.com/gin-gonic/gin v1.7.0 подверженный уязвимости CVE-2023-29401. Обработчик /download/:filename передаёт пользовательский ввод напрямую в Context.FileAttachment — шаблон условия эксплуатации, который Endor помечает как...

ollama-consumer

ollama-consumer 데모 컨슈머 앱이 github.com/ollama/ollama v0.5.0에 고정되어 있습니다. — Endor Labs가 상위 ollama 라이브러리에 대한 취약점 탐지 및 익스플로잇 체인 분석을 시연하는 데 사용됩니다...

dlink-dir-819-dos

CVE-2022-40946 익스플로잇: DLink 소비자용 DIR 819 A1 라우터의 인증되지 않은 서비스 거부DoS 익스플로잇 소스 가져오기 root@kitploit: $ git clone https://github.com/whokilleddb/dlink-dir-819-dos $ cd dlink-dir-819-dos $ pip install -r requirements.txt 익스플로잇 실행 root@kitploit: $ ./exploit.py -i 192.168.0.1 + DLink DIR-819 DoS exploit i...

PT-2026-89274

An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a shared broker thread and leading to denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0...

CVE-2026-48206

A flaw was found in the Apache Camel JIRA component. Due to improper input validation, non-Camel-prefixed Exchange header constants can bypass the HTTP header filter. This allows a remote attacker, potentially unauthenticated, to supply specific headers and override intended values. Consequently,...

CVE-2026-86756

Snipe-IT 8.5.0 through 8.6.3 contains an open redirect vulnerability in its SAML assertion-consumer endpoint SamlController::acs, POST /saml/acs. The endpoint wrote the RelayState POST parameter directly into Laravel's url.intended session key with only CR/LF characters stripped, and...

CVE-2026-86756

Snipe-IT 8.5.0 through 8.6.3 contains an open redirect vulnerability in its SAML assertion-consumer endpoint (SamlController::acs, POST /saml/acs). The endpoint wrote the RelayState POST parameter directly into Laravel's url.intended session key after stripping only CR/LF characters, and LoginCon...

Spring-Kafka-POC-CVE-2023-34040

Spring Kafka Deserialization POC Requirements Java 11 Maven Docker or Kafka Usage First start up the Dockerized Kafka instance. This will start up Kafka and make it available on port 29092. root@kitploit: docker-compose up Start up the Consumer application. root@kitploit: cd spring-kafka-consumer...

redis: Redis: Remote Code Execution via specially crafted RESTORE payload

A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...

CVE-2026-40860

camel-jms JMS ObjectMessage Unsafe Deserialization Reproducer CVE-2026-40860 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-jms component and, transitively, camel-sjms, camel-sjms2, camel-amqp, camel-activemq, camel-activemq6, tracked as CVE-2026-40860...

BIT-APISIX-2026-63041 Apache APISIX: attach-consumer-label does not strip client-supplied consumer-label headers

Reliance on Untrusted Inputs in a Security Decision vulnerability in Apache APISIX. This vulnerability allows an attacker to escalate privilege or perform an authorization bypass by sending certain values that the attach-consumer-label plugin does not sanitise correctly. This issue affects Apache...