awesome-exploit-development

awesome-exploit-development A curated list of resources books, tutorials, courses, tools and vulnerable applications for learning about Exploit Development A project by Fabio Baroni. Read the full article here!...

Bitmancer

Bitmancer Bitmancer is a library for Offensive Security Tooling development for the Windows operating system written in Nim. It aims to provide common APIs, routines, and macros with highly configurable, position-independent, standalone implementations. If you're looking to develop an Implant, te...

[SECURITY] Fedora 45 Update: adobe-afdko-4.0.3-5.fc45

Adobe Font Development Kit for OpenType AFDKO. The AFDKO is a set of tools for building OpenType font files from PostScript and TrueType font data...

OffensiveCpp

OffensiveCpp Offensive C++ is a collection of offensive security snippets written in C++. It includes various tools for penetration testing and exploit development. Table of Contents OffensiveCpp Introduction Why C/C++? Compiling Reference Libraries Contributing License Introduction The purpose o...

osed-scripts

osed-scripts herramientas a medida para el curso de desarrollo de exploits de Windows en modo usuario de Offensive Security OSED Tabla de contenidos Scripts independientes egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 Scripts de WinDbg find-ppr.py find-bad-chars.py...

PowerShell-for-Hackers

2022 Hak5 hacker of the Year Table of Contents 1. Description 2. The Functions 3. Contact 4. Acknowledgments PowerShell Functions For Hackers 🤓💻 I am currently the 1 ranked payload contributor to Hak5. I decided to make this repository to share all of the functions I have come up with to develop ...

CVE-2019-5420

CVE-2019-5420 Ruby-on-Rails offers three different environments it can run in: development, test and production. You should obviously not have code running in development or test available on the internet but it as always happens for example in staging environments. Ruby-on-Rails uses...

CVE-2026-94485

The Next.js framework (versions 16.0.0 through 16.3.8 ) contains a vulnerability in the next dev development server. The server exposes a Model Context Protocol (MCP) endpoint that lacks reliable restrictions on cross-site requests . If a developer visits a malicious website while the development...

CVE-2026-94486 Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-94486 Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-94486 Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

specula

Getting started info and information for developing your own modules is available on the wiki...

csw-slides-2024

Developing Secure Software in 2024 Abstract As humanity increases its dependence on computer systems, the need for safe and secure software becomes paramount. Today, everything from planes, trains, and automobiles to toothbrushes and cooktops contain a multitude of tiny computers. Each of these...

DFIRArtifactMuseum

DFIR Artifact Museum Description The DFIR Artifact Museum is a community-driven archive of DFIR-related artifacts. It was created to provide a centralized location for examples of artifacts from various operating systems. Purpose To increase accessibility to sample artifacts without individual...

Exploit_Development

Proof-of-Concepts for my CVEs CVE-2022-3436 - Online Student Clearance System v1.0 - CVE-2022-3436.py...

EGESPLOIT

EGESPLOIT EGESPLOIT es una biblioteca de golang para desarrollo de malware, cuenta con algunas funciones únicas para la integración con meterpreter. DOCUMENTACIÓN CalculateChecksumx: Función que calcula un checksum de 8 bits de x dígitos para conexiones meterpreter reversas HTTP/HTTPS, devuelve e...

teler

!IMPORTANT Estimados usuarios, Queremos compartir algunas actualizaciones importantes sobre el desarrollo de teler IDS. 🛑 El desarrollo de teler IDS está actualmente en pausa. Sin embargo, nos complace informarles que hemos decidido dar un paso audaz: emprender una reestructuración completa,...

naxsi

Estado del Proyecto Esta es una actualización del estado del proyecto sobre Naxsi. Como habrán notado, el desarrollo de Naxsi se ha detenido y el repositorio será archivado por razones históricas. Esto significa que no se publicarán nuevas actualizaciones ni correcciones de errores para esta...

bst

Binary String Toolkit Resumen El Binary String Toolkit o BST, para abreviar, es una utilidad bastante simple para convertir cadenas binarias a varios formatos adecuados para su inclusión en códigos fuente, como los utilizados para desarrollar exploits y Pruebas de Concepto en el campo de la...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...