Demo-Exploit-Jackson-RCE

Demo-Exploit-Jackson-RCE Basato sul progetto jackson-rce-via-spel, questo progetto funge da applicazione web di esempio per testare molteplici vettori d'attacco caricamento file, moduli sulla vulnerabilità di Jackson-databind. Introduzione Basato su un frontend Angular7 e un backend spring-boot, ...

RootPipe-Demo

RootPipe-Demo Questa è un'applicazione Mac Proof-of-Concept che dimostra la vulnerabilità di escalation dei privilegi RootPipe CVE-2015-1130 identificata da Emil Kvarnhammar di TrueSec Questa demo è stata scritta in Objective-C, portata dal PoC Python qui: RootPipe Utilizzo Per usarlo, fornisci...

CVE-2024-20338

CVE-2024-20338 aviso Este repositório contém arquivos de demonstração para minha palestra na conferência Behind The Code, em Limassol. Isenção de responsabilidade Todos estes materiais são fornecidos como estão e destinam-se apenas a fins educacionais. O autor não tem responsabilidade por quaisqu...

apache-struts2-CVE-2017-5638

apache-struts2-CVE-2017-5638 Applicazione demo e exploit Esempio di app Apache Struts2 Struts2-showcase: https://mvnrepository.com/artifact/org.apache.struts/struts2-showcase/2.3.12 Riferimento exploit: https://github.com/rapid7/metasploit-framework/issues/8064...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

log4shell-demo

Applicazione Spring Boot semplice vulnerabile a Log4Shell CVE-2021-44228 Framework di logging predefinito cambiato da logback a log4j2 L'applicazione registra l'intestazione 'User-Agent', quindi è possibile testare la vulnerabilità con curl e ad esempio interactsh-service: root@kitploit: curl -A...

CVE-2024-12641_12642_12645

CVE-2024-12641 CVE-2024-12642 CVE-2024-12645 CVE-2024-12641 Demo CVE-2024-12642 Demo...

kostebek

Reconnaissance Tool Introduction The Kostebek is a reconnaissance tool which uses firms' trademark information to discover their domains. Reference : https://evren.ninja/en/post/recon-is-everywhere/ Demo video : Setup Downloading Kostebek git clone https://github.com/esecuritylab/kostebek...

IntelOwl

!intelowlp...

maigret

Maigret English · 简体中文 Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors IPcook provides reliable residential proxies for online...

dymerge

A simple, yet powerful tool - written purely in python - which takes given wordlists and merges them into one dynamic dictionary that can then be used as ammunition for a successful dictionary based or bruteforce attack. Compatible with Python 2.6 & 2.7. Author: Nikolaos Kamarinakis nikolaskama.m...

unicorn

Unicorn Engine LOOKING FOR CONTRIBUTORS! See this. Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework, based on QEMU. Unicorn offers some unparalleled features: Multi-architecture: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore and X86 16, 32,...

CVE-2023-2822-demo

CVE-2023-2822-demo Einfache Flask-Anwendung zur Implementierung einer absichtlich verwundbaren Web-App zur Vorführung von CVE-2023-2822. Basiert auf dem Writeup unter...

agx-exploit

Präsentation und Demo von CVE-2022-32947 Sehen Sie sich die Live-Stream-Präsentation mit Lina und Cyan hier an!!! ✨ 日本語の配信はこちら！！ ✨...

Log4ShellAuditor

🤖 AUTO AUDIT Banco di prova dimostrativo isolato di un agente esecutore autonomo e riflessivo Go/Java Russo 🇷🇺 • Inglese 🇬🇧 • Cinese 🇨🇳 • Spagnolo 🇪🇸 • Tedesco 🇩🇪 • Italiano 🇮🇹 • Arabo 🇸🇦...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

cve-2025-10725-eda-demo

Questo repository non contiene un README...

hbp-attack-demo

से फोर्क किया गया https://github.com/veritas501/hbpattackdemo hbpattack demo P0 ब्लॉग देखें: https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html एक vuln module बनाया, यह दिखावा कि हमारे पास कर्नेल में किसी भी पते पर लिखने का प्रिमिटिव है,...

CVE-2021-25646-GUI

CVE-2021-25646-GUI Un piccolo demo realizzato in C, con implementazioni parziali del codice ispirate da fonti online...

CVE-2025-14364

CVE-2025-14364 Demo Importer Plus Da Subscriber autenticato ad Amministratore tramite l'azione AJAXdo-reinstall 〔 1 〕 Vulnerabilità Causa principale: Ajax::handlerequest registra l'azione AJAX demoimporterplus senza chiamare currentusercan. Qualsiasi subscriber autenticato può inviare...