266366 matches found
beyondtrust-cve-2026-1232
π Vulnerability Research A curated collection of in-depth vulnerability writeups covering real-world security incidents in the software ecosystem. Each entry includes a full technical analysis, proof-of-concept, IOC listing, and remediation guidance. Purpose: Educational reference and portfolio...
CVE-2023-22515
CVE-2023-22515: Confluence Data Center & Server Privilege Escalation Vulnerability Analysis Report 1. Overview CVE-2023-22515 is a critical Broken Access Control vulnerability discovered in Atlassian Confluence Data Center and Server products. An unauthenticated attacker can remotely reactivate...
NorthStarC2
NorthStarC2 is an open-source command and control framework developed for penetration testing and red teaming purposes by Engin Demirbilek. NorthStar C2 Framework consists of two applications, a server-side GUI web application for managing sessions and a client-side stager to communicate with C2...
CVE-2026-1375
CVE-2026-1375: Authenticated IDOR / Broken Access Control in Tutor LMS Plugin Disclaimer: This repository is created for educational purposes and ethical disclosure only. The vulnerability has been responsibly reported to the vendor and patched. Do not use this information to exploit systems...
CVE-2026-27344
Broken Access Control in Inseri Core WordPress Plugin Plugin: Inseri Core Affected Component: /includes/restapi.php Vulnerability Type: Broken Access Control Missing Authorization Status: Reported in August 2026β Closed as Duplicate. Summary Whilst testing this summer I came across a Broken Acces...
C2-Pwn
C2-Pwn Uses Shodan API to pull down C2 servers to run known exploits on them. Requires shodan account for API. https://www.shodan.io/ Rat Exploit Support Dark Comet Remote File Download https://www.rapid7.com/db/modules/auxiliary/gather/darkcometfiledownloader Gh0st Rat buffer Overflow...
CVE-2026-21017-LDAP-Anonymous-Bind-Privilege-Escalation
CVE-2026-21017 β LDAP Anonymous Bind Privilege Escalation Program Code Python ldap3 sim ldapanonsim.py - LDAP server allowing anonymous bind with write access from ldap3 import Server, Connection, ALL Simulated: real server would be misconfigured server = Server'ldap://localhost:389', getinfo=ALL...
lamda
FIRERPA Android ο½ AI-Powered Automation An all-in-one Android automation framework that combines on-device services, AI-ready agents, and extensible tool invocation. Documentation | δ½Ώη¨ζζ‘£ | TELEGRAM | QQ Group | SKILLS | llms-full.txt | δΈζηζ¬ FIRERPA is an all-in-one Android device control platform...
Blackash-CVE-2025-33073
β¨ CVE-2025-33073: Windows SMB RCE Vulnerability π¨ π₯ High-Severity Authenticated Remote Code Execution π₯ Improper Access Control in Windows SMB Client CWE-284 π‘οΈ Key Details at a Glance Aspect| Details ---|--- CVSS v3.1 Score| 8.8 High π₯ Affected Systems| Windows 10, 11, Server 2012β2025 all...
RedbloodC2
Public version of Redblood C2 This is a simple command and control server to handle sessions and your victims installation $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Usage After install node.js and and all modules from npm execute: node...
Schwarze-Sonne-RAT
Schwarze-Sonne-RAT SS-RAT Schwarze-Sonne-Remote-Access-Trojan...
freeipa
FreeIPA Server FreeIPA allows Linux administrators to centrally manage identity, authentication and access control aspects of Linux and UNIX systems by providing simple to install and use command line and web based management tools. FreeIPA is built on top of well known Open Source components and...
smart-contract-vulnerabilities
Smart Contract Vulnerabilities A collection of smart contract vulnerabilities along with prevention methods. See /references for LLM-optimized references. Access Control Authorization Through tx.origin Insufficient Access Control Delegatecall to Untrusted Callee Signature Malleability Missing...
CVE-2025-57489
CVE-2025-57489 Description From the developer's blog: When the lock in SuperDuper is unlocked to allow execution to occur without having to enter an administrator password, a 3rd party program could make use of our authorization to run something other than a backup with administrator privileges...
Striker
Striker C2 Striker is a simple Command and Control C2 program. Disclaimer This project is under active development. Most of the features are experimental, with more to come. Expect breaking changes. Features A Agents Native agents for linux and windows hosts. Self-contained, minimal python agent...
CVE-2020-24030
CVE-2020-24030 Description ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and to access sensitive data via token reuse. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Incorrect...
octohook
octohook Git Web Hook Tunnel for C2 Install apt-get update && apt-get upgrade -y apt-get install python3-pip git -y pip install --upgrade pip pip install virtualenv virtualenv -p python venv . venv/bin/activate git clone https://github.com/dsnezhkov/octohook pip install prompttoolkit PyGithub...
citrix-cve-2021-22941-lab
β οΈ Disclaimer This is a mock simulation of the CVE-2021-22941 vulnerability for testing purposes. The mock server replicates the actual vulnerable behavior where the Upload.aspx endpoint is accessible without authentication and returns LocalFile GUID responses, as documented in the official CVE an...
CVE-2021-24006
CVE-2021-24006 β FortiManager Improper Access Control Exploit PoC PoC Proof of Concept - Educational Use Only Exploit for improper access to SD-WAN Orchestrator in FortiManager, exploiting an access control flaw CWE-284. Description The vulnerability CVE-2021-24006 affects FortiManager versions...