CVE-2026-76581

CVE-2026-76581 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha...

memory-forensic

memory-forensic A memory forensics toolkit that profiles Windows kernels itself — and is cross-checked, process-for-process, against Volatility 3. mem4n6 reads every common dump format LiME, AVML, ELF core, Windows crash dumps, hibernation files, VMware save-states, kdump, raw… and walks processe...

CVE-2015-8351

gwollebuster this script is exploit for wordpress old plugin gwolle usage: ./gwollebuster.py first arguments = your target url of wordpress that installed gwolle second arguments = your ip third arguments = listening port for reverse shell example: ./gwollebuster.py http://vulnpress.com/...

CVE-2020-1313

CVE-2020-1313 Abstract Windows Update Orchestrator Service is a DCOM service used by other components to install windows updates that are already downloaded. USO was vulnerable to Elevation of Privileges any user to local system due to an improper authorization of the callers. The vulnerability...

YellowKey-Bitlocker-CVE-2026-45585

🛡️ YellowKey-Bitlocker-CVE-2026-45585 - Recover Your BitLocker Keys Safely 📋 What This Software Does YellowKey is a free open-source utility for Windows 10 and Windows 11. It helps you extract, backup, and view your BitLocker recovery keys. This is useful if you lost access to your encrypted drive...

OpenDoor

OpenDoor — OWASP Web Recon & Directory Discovery Platform OpenDoor is an open-source CLI Recon Platform for authorized web reconnaissance, directory discovery, subdomain enumeration, fingerprints, WAF detection, bypass probing, response filtering, reporting, open-redirect checks, bounded crawl an...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use --threads=THREADS...

ThreadlessInject

Threadless Process Injection From my Bsides Cymru 2023 talk: Needles Without the Thread. As red teamers, we always find ourselves in a cat and mouse game with the blue team. Many Anti-virus and EDR solutions over the past 10 years have become significantly more advanced at detecting fileless...

patch_CVE-2023-22809

patchCVE-2023-22809 Bash Script: sudo Installation This Bash script automates the installation of the latest version of sudo on your system. Prerequisites Linux-based operating system wget package installed can be installed using the package manager Usage 1. Clone or download this repository to...

samsung-android-lpe

Part 1: Arbitrary AT command execution CVE-2026-20980 Application ProcessorAP commands are managed by atdistributor after switching the connection mode in an unlocked device using. AT+SWATD=0 AT+ACTIVATE=0,0,0 AT+SWATD=1 atdistributor verifies AT commands through the function pacmcheckatcmds void...

CVE-2018-11759

CVE-2018-11759 Proof of concept Description The Apache Web Server httpd specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 did not handle some edge cases correctly. If only a sub-set of the URLs supported b...

Nac_Bypass_Agent

Nac Bypass Agent This piece of code is a script written in Python and designed to run on Kali Linux. Here is a summary explaining what each function does: runcommandcommand: This function runs the command it takes as input and returns its output. killnetworkservices: This function stops the...

haxx

haxx Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1. Based on CoreTrustDemo, also please note that certificates are not copyrightable. Usage Note: requires macOS + existing jailbreak Get up and running This method works on 14.0-14.6. 14.7 14.7b1-14.8.1 requires launch...

Log4JHunt

Log4JHunt An automated, reliable scanner for the Log4Shell CVE-2021-44228 vulnerability. Video demo: Usage Here the help usage: $ python3 log4jhunt.py +--------------+ Log4JHunt +--------------+ + Log4jHunt by RedHunt Labs - A Modern Attack Surface ASM Management Company + Author: Pinaki Mondal R...

netmap.js

netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...

bxss

Bxss - Blind XSS Scanner 🚀 Description Bxss is a high-performance Blind XSS scanner that automates the detection of blind XSS vulnerabilities in web applications. ✨ Features Injects Blind XSS payloads into custom headers & parameters Supports multiple HTTP methods PUT, POST, GET, OPTIONS High-spe...

DInvoke_rs

DInvokers Rust port of Dinvoke. DInvokers may be used for many purposes such as PE parsing, dynamic exported functions resolution, dynamically loading PE plugins at runtime, API hooks evasion and more. Features: Dynamically resolve and invoke undocumented Windows APIs from Rust. Primitives allowi...

t-reqs

T-Reqs HTTP Fuzzer T-Reqs T wo Req uests is a grammar-based HTTP Fuzzer written as a part of the paper titled "T-Reqs: HTTP Request Smuggling with Differential Fuzzing" which was presented at ACM CCS 2021. BibTeX of the paper: @inproceedingsccs2021treqs, title=T-Reqs: HTTP Request Smuggling with...

TLS-Scanner

TLS-Scanner TLS-Scanner is a tool to assist pentesters and security researchers in the evaluation of TLS server and client configurations. Please note: TLS-Scanner is a research tool intended for TLS developers, pentesters, administrators and researchers. There is no GUI. It is in the first versi...

WinPmem

WinPmem -- a physical memory acquisition tool WinPmem has been the default open source memory acquisition driver for windows for a long time. It used to live in the Rekall project, but has recently been separated into its own repository. This is the Windows version. The Linux version, Linpmem , i...