zotlit-PoC

ZotLit: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-4qh7-66xv-h329. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-zotlit-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox @squeeze440...

PocList

PocList A collection of self-written vulnerability POCs and EXPs. After specifying the URL file, the POC script can perform multi-threaded batch scanning of targets for verification; the EXP script can exploit vulnerabilities, such as file reading, uploading webshells, command execution, etc...

Philips-PM-5139-5138A-5136-Firmware-Project

Philips PM5139 — Firmware Reverse Engineering A 20 MHz function generator from about 1994, taken apart in software: two EPROM dumps, an 8051 emulator used as a measuring instrument, and 35 sections of documentation where every single claim is backed by a listing address, an emulator measurement, ...

CVE-2026-18963

CVE-2026-18963 — Keycloak Reset-Credentials Flow Bypass Lab Tổng quan Lab mô phỏng lỗ hổng CVE-2026-18963 CVSS 9.1 trong Keycloak, cho phép kẻ tấn công chiếm quyền tài khoản bất kỳ thông qua bypass xác minh email trong luồng đặt lại mật khẩu. Chỉ sử dụng cho mục đích nghiên cứu bảo mật và giáo dụ...

extended-ssrf-search

Extended ssrf search This tool search for SSRF using predefined settings in different parts of a request path, host, headers, post and get parameters. First step Rename example.app-settings.conf to app-settings.conf and adjust settings. The most important setting is the callback url. I recommend ...

CVE-2026-28496

CVE-2026-27604 + CVE-2026-28496 — FOSSBilling Pre-Auth RCE Chain Executive Summary This repository contains a local Docker lab for reproducing and validating the FOSSBilling Pre-Auth RCE chain, composed of two chained vulnerabilities: CVE| Type| CVSS v4| GHSA| Description ---|---|---|---|---...

LOIC

INFO Low Orbit Ion Cannon LOIC is an open source network stress tool, written in C. LOIC is based on Praetox's LOIC project at https://sourceforge.net/projects/loic/ . DISCLAIMER LOIC is for educational purposes only, intended to help server owners develop a "hacker defense" attitude. This tool...

AGAS

An Efficient and Effective Agentic Group Shilling Attack on Recommender Systems This is the official code to the paper: "An Efficient and Effective Agentic Group Shilling Attack on Recommender Systems". This paper introduces AGAS, which is an LLM-driven shilling attack against black-box...

CVE-2016-3223

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell

LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell Introduction I went into a SharePoint zero-day called ToolShell CVE-2025-53770 in the LetsDefend lab. I mimicked a real-world zero-day attack where a malicious POST request bypassed auth, ran PowerShell to steal MachineKeySection key...

InlineExecute-Assembly

InlineExecute-Assembly InlineExecute-Assembly is a proof of concept Beacon Object File BOF that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module. InlineExecute-Assembly will execute any...

Nimcrypt2

Nimcrypt2 Nimcrypt2 is yet another PE packer/loader designed to bypass AV/EDR. It is an improvement on my original Nimcrypt project, with the main improvements being the use of direct syscalls and the ability to load regular PE files as well as raw shellcode. Before going any further, I must...

TATS

TATS — Token Analysis and Tracking System Track OAuth 2.0, OIDC, and Microsoft Entra ID tokens across captured network traffic. Ingests Burp Suite XML exports, mitmproxy flow files, or live Chrome DevTools Protocol streams into a single SQLite database, then serves an interactive web dashboard fo...

CVE-2024-20154

CVE-2024-20154: NB-IoT SIB1-NB Stack Overflow in MediaTek MT6769 Baseband Classification: CWE-121 — Stack-based Buffer Overflow Severity: Critical MediaTek bulletin · 8.8 High, Attack Vector: Adjacent CISA-ADP Type: Remote Code Execution — no user interaction, no prior association Disclosure:...

crowbar

Crowbar - Brute forcing tool What is Crowbar? Crowbar formally known as Levye is a brute forcing tool that can be used during penetration tests. It was developed to brute force some protocols in a different manner according to other popular brute forcing tools. As an example, while most brute...

CVE-2025-12137

1 Helper to call the plugin’s REST API with current nonce async function iwpFetchpath, method='GET', body const nonce = window?.wpApiSettings?.nonce || jQuery?.ajaxSettings?.headers?.'X-WP-Nonce'; const res = await fetch$location.origin/wordpress/wp-json/iwp/v1$path, method, headers:...

how_to_become_a_malware_analyst

How to Study to Become a Malware Analyst work-in-progress This is @PINKSAWTOOTH's personal opinion and may not necessarily be the best method for you. I hope you can refer to it as one example of a study method. Before reading this, the malware analyst I respect, @hasherezade, has written a blog...

CVE-2026-79387-PbootCMS-SQL-Injection

CVE-2026-79387: SQL Injection in PbootCMS V3.2.5 User Management Module Overview Field| Detail ---|--- CVE ID| CVE-2026-79387 Product| PbootCMS Affected Versions| 3.2.0 – 3.2.5, and possibly earlier Vulnerability Type| SQL Injection CWE-89 Attack Vector| Remote Authenticated CVSS Severity| High...

Mikrotrick_POC

RouterOS SSH Modulus-Confusion Validator CVE-2026-67276 An automated behavioral validator designed to detect the SSH public key authentication bypass vulnerability in MikroTik RouterOS CVE-2026-67276. The script tests whether an SSH service incomplete-validation flaw allows authentication by...

CVE-2026-67401

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...