CVE-2020-8004

CVE-2020-8004 Prueba $cd openocd-toolbox/scripts/linux/stm32f1x/ $./lock.sh $./attach.sh $telnet localhost 4444 $reset halt $mdw 0x08000000 $cd stm32f1-firmware-extractor $python3 main.py 0x08000000 512 Referencias https://blog.zapb.de/stm32f1-exceptional-failure/...

teamcity-exploit-cve-2023-42793

TeamCity Exploit Cve 2023 42793 A quick script to exploit the cve-2023-42793 bug. Some additional reading on the exploit can be found here: https://www.fortinet.com/blog/threat-research/teamcity-intrusion-saga-apt29-suspected-exploiting-cve-2023-42793​...

pylane

pylane 简体中文 Pylane es un inyector de máquina virtual de Python con herramientas de depuración, basado en gdb y ptrace. Pylane utiliza gdb para rastrear procesos de Python, inyectar y ejecutar código en su máquina virtual de Python. Uso usa el comando inject para inyectar un script de Python en un...

acltoolkit

acltoolkit acltoolkit is an ACL abuse swiss-army knife. It implements multiple ACL abuses. Table of Contents acltoolkit Table of Contents Installation Usage Commands get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installation pip install acltoolkit-ad or...

PichichiH0ll0wer

PichichiH0ll0wer PichichiH0ll0wer Acerca de Características Métodos de inyección Instalación Uso Créditos Acerca de --== Cargador de hollowing de procesos escrito en Nim solo para PEs ==-- Construí PichichiH0ll0wer para aprender y contribuir, claro, pero también porque estoy bastante cansado de...

VX-API

managed by vx-underground | follow us on Twitter | download malware samples at the VXUG/samples page VX-API Version: 2.01.015 Developer: smellyvx The VX-API is a collection of malicious functionality to aid in malware development. It is recommended you clone and/or download this entire repo then...

CVE-2025-65731

CVE-2025-65731 CWE-1191: On-Chip Debug and Test Interface With Improper Access Control UART Root Shell Access on D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Summary A critical hardware security vulnerability has been identified in the D-Link DIR-605L router, Hardware Version F1, Firmware...

AntiDebug-AntiVM

AntiDebug/AntiVM Purpose This repository hosts the different debug/vm detection methods I have come across whilst looking through the WinAPI. This is not intended to be compiled and ran but rather to show examples of how to implement these different methods into your existing projects. Each file ...

Anti_suspend

Antisuspend Just an example of using shellcode to secure a process. Prevents: 1Freezing process threads you can use anti-attach for debugger 2Hardware breakpoints 3Hide thread from the debugger Problem: Use code in non legit modules This will raise the flags of AV...

CVE-2025-54253-Exploit-Demo

🚨 CVE-2025-54253 – Adobe AEM Forms on JEE OGNL Injection to RCE 🔎 Overview CVE-2025-54253 is a critical OGNL injection vulnerability in Adobe AEM Forms on JEE. It allows unauthenticated attackers to execute arbitrary operating system commands via the /adminui/debug?debug=OGNL: endpoint. Severity:...

CVE-2021-3129

CVE-2021-3129 Depuración RCE de Laravel Instrucciones de uso Ejecuta docker-compse up -d para iniciar el entorno Accede al puerto 8888 y haz clic en generate key en la página de inicio para reproducirlo Algunas notas sobre el entorno docker: Copiar .env.example a .env sirve para activar el entorn...

CVE-2023-27703

CVE-2023-27703 CVE-2023-27703 An Android version of pikpak version V1.29.2 element debugging interface leakage vulnerability fix at pikpak 1.30.1 Suggested description The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface. Additional Informati...

peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

CVE-2021-3129

CVE-2021-3129 PoC para CVE-2021-3129 Laravel Solo con fines educativos Prueba Configurar el entorno del PoC $ docker-compose build $ docker-compose up -d Confirmar que funciona Ver http://localhost:8000/ y asegurarse de que se muestra la página predeterminada de Laravel. Explotación $...

showstopper

ShowStopper - Herramienta de exploración de trucos Anti-Debug Contribuido por Check Point Software Technologies LTD. Programado por Yaraslau Harakhavik Resumen El proyecto ShowStopper es una herramienta para ayudar a los investigadores de malware a explorar y probar técnicas anti-debug o verifica...

CVE-2024-27914

CVE-2024-27914: Reflected XSS in debug mode of GLPI An unauthenticated user can provide a malicious link to a GLPI administrator in order to exploit a reflected XSS vulnerability. The XSS will only trigger if the administrator navigates through the debug bar. Package - GLPI...

tangalanga

Tangalanga Zoom Conference scanner. This scanner will check for a random meeting id and return information if available. Install First try to see if there's any prebaked version for the date: https://github.com/elcuervo/tangalanga/releases. This versions already have a token ready to use. Either...

CVE-2019-2215

CVE-2019-2215 Andriod binder bug record.Just only test on emulator : ubuntu 22.04 | 4G | 4 cpus andriod studio Pixel2 | Andriod 10.0Q--Google Play Intel x86 Atom 64 System Image | API-29 ndk 21.0.6113669 origin/android-goldfish-4.14-dev | kernel version is 4.14.175 algunas opciones de configuraci...

CVE-2026-86834

The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root on every form submission when its HubSpot Forms integration is enabled, allowing unauthenticated attackers to read upstream API response data, including correlation identifiers an...

CVE-2026-86834 MetForm 2.2.1 - 4.3.0 - Unauthenticated Debug File Disclosure via HubSpot Forms Integration

The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root on every form submission when its HubSpot Forms integration is enabled, allowing unauthenticated attackers to read upstream API response data, including correlation identifiers an...