CVE-2016-6914-UniFiVideo-LPE

CVE-2016-6914 - Ubiquiti UniFi Video 3.7.3 LPE PoC 🔥 Overview This repository contains a proof-of-concept PoC for CVE-2016-6914 , a Local Privilege Escalation LPE vulnerability affecting Ubiquiti UniFi Video 3.7.3. An attacker with low privileges can replace a trusted binary taskkill.exe inside...

Tracgram

Trackgram Use Instagram location features to track an account Usage At this moment the usage of Trackgram is extremly simple: 1. Download this repository 2. Go through the instalation steps 3. Change the parameters in the tracgram main method directly: + Mandatory: - NICKNAME: your username on...

CVE-2023-49070

ofbiz-xmlrpc-rce CVE-2023-49070 PoC for the Apache OFBiz XML-RPC pre-auth deserialization RCE tracked as CVE-2023-49070: an authentication-bypass path unlocks the legacy /webtools/control/xmlrpc endpoint, which deserializes an attacker- controlled Java object smuggled inside an XML-RPC parameter...

CVE-2026-94609

CVE-2026-94609 — authentik Privilege Escalation via Delegated Group/User Management -important Write-up and proof-of-concept for a privilege-escalation vulnerability in goauthentik/authentik, fixed in 2026.2.7 / 2026.5.7 / 2026.8.2 and assigned CVE-2026-94609 GHSA-h6c5-mpvq-j4jc. I was one of the...

sippts

What is Sippts? Sippts is a set of tools to audit VoIP servers and devices using the SIP protocol. Sippts is programmed in Python and it allows us to check the security of a VoIP server using the SIP protocol. Is it free? Yes. You can freely use, modify and distribute it. If you modify it, please...

rdx

Android API type and exception facts android-35-exceptions.json records class and interface ancestry plus exact method throws declarations extracted from the Android SDK API 35 android.jar. It contains metadata only, not class implementations. The input SHA-256 is embedded in the file. Regenerate...

whodunit

whodunit Recognizing the most likely APT groups responsible for an incident Description This program takes a report from a cybersecurity incident containing the MITRE ATT&CK techniques that have been detected to have been used in the incident and tries to recognize which APT groups are the most...

CVE-2023-3163-SQL-Injection-Prevention

CVE-2023-3163-SQL-Injection-Prevention A simple and quick way to check if your SQL Developer by Oracle is vulnerable to SQL Injection CVE-2023-3163, most commonly occurs when SQL Developer version 23.1.0. CVE-2023-21969 Exploit - SQL Developer Vulnerability Check Description This repository...

DarkWidow

DarkWidow A Customizable Dropper Tool targeting Windows. Honourable Mentions: 1. BlackHat Asia, 2024 - Call For Tools 2. BlackHat USA, 2024 - Call For Tools 3. BlackHat SecTor, 2024 - Call For Tools 4. BlackHat Europe, 2024 - Call For Tools 5. Wild West Hacking Fest 2024 - Arsenal Thanks a lot to...

DockSec

!CREATEDhttps://img.shields.io/badge/created-feb,%202025-blue?style=for-the-b...

JSShell

JSShell 2.0 An interactive multi-user web based javascript shell. It was initially created in order to debug remote esoteric browsers during experiments and research. This tool can be easily attached to XSS Cross Site Scripting payload to achieve browser remote code execution similar to the BeeF...

DFIR-LABS

About DFIR LABS is a compilation of challenges that aims to provide practice in simple to advanced concepts in the following topics: Digital Forensics, Incident Response, Malware Analysis and Threat Hunting. This is aimed at Professionals, Security Researchers, Students, CTF Players as well as DF...

CVE-2019-12840

CVE-2019-12840 Authenticated RCE in Webmin 1.910 - 'Package Updates' Usage : 1-setup a netcat listener. 2- python3 exploit.py Notes: Provide the url for example: http://:port Please copy 'sid' cookie from your browser and supply it for the exploit to work...

whatfiles

whatfiles Whatfiles is a Linux utility that logs what files another program reads/writes/creates/deletes on your system. It traces any new processes and threads that are created by the targeted process as well, and records whether each operation succeeded. Rationale: I've long been frustrated at...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 16.6.1 Refer to lunar.sh and CHANGELOG.md for more up to date version information License CC BY-NC-SA: https://creativecommons.org/licenses/by-nc-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code i...

crypto-attacks

Introduction Python implementations of cryptographic attacks and utilities. Requirements SageMath with Python 3.9 PyCryptodome You can check your SageMath Python version using the following command: $ sage -python --version Python 3.9.0 If your SageMath Python version is older than 3.9.0, some...

YAPS

YAPS - Y et A nother P HP S hell Yes, as the name reveals, this is yet another PHP reverse shell, one more among hundreds available out there, but with some advantages. It is a single PHP file containing all its functions and you can control it via a simple TCP listener e.g. nc -lp 1337. In the...

CVE-2021-3560-Authentication-Agent

PolicyKit CVE-2021-3560 Exploit Authentication Agent Technology Details Blog posts about this exploit : https://ricterz.me/posts/2022-04-28-a-new-exploit-method-for-cve-2021-3560-polkit-linux-privilege-escalation.txt...

cook

COOK An overpowered wordlist generator, splitter, merger, finder, saver, create words permutation and combinations, apply different encoding/decoding and everything you need. Frustration killer! & Customizable! Index Installation Configuration Basic Ranges Param Approach COOK's Ingredients...

redsails

Redsails About A post-exploitation tool capable of: maintaining persistence on a compromised machine subverting many common host event logs both network and account logon generating false logs / network traffic Based on PyDivert https://github.com/ffalcinelli/pydivert, a Python binding for...