PhoneSploit-Pro

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Getting started Installing dependencies Device setup...

CVE-2025-27210_NodeJS_Path_Traversal_Exploit

CVE-2025-27210NodeJSPathTraversalExploiter Proof of Concept CVE-2025-27210, a precise Path Traversal vulnerability affecting Node.js applications running on Microsoft Windows. This vulnerability leverages the specific way Windows handles reserved device file names e.g., AUX, CON, NUL when combine...

CVE-2015-2291

CVE-2015-2291 1 IQVW32.sys before 1.3.1.0 and 2 IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted a 0x80862013, b 0x8086200B, c 0x8086200F, or d...

UltimateWDACBypassList

Ultimate WDAC Bypass List A centralized resource for previously documented WDAC/Device Guard/UMCI bypass techniques as well for building/managing/testing WDAC policies Note: WDAC Windows Defender Application Control has been rebranded by Microsoft as "Application Control" or "Application Control...

apkSneeze

apkSneeze v2.0.0 A tool that automates the mundane tasks of pentesting Android apps. The tool currently provides the following features: 1. Decompiles the provided apk file. 2. Converts the provided apk file to a Jar file. 3. Searches the decompiled files for interesting strings. 4. Sets up ADB...

mdk4

MDK4 MDK is a proof-of-concept tool to exploit common IEEE 802.11 protocol weaknesses. About MDK4 MDK4 is a new version of MDK3. MDK4 is a Wi-Fi testing tool from E7mer, ASPj of k2wrlz, it uses the osdep library from the aircrack-ng project to inject frames on several operating systems. Many part...

dcsgonebadge

DEF CON Singapore One Badge This project manages the hardware design of the Circuit Crafters first project, an electronic hardware badge intended for distribution at the DEF CON Singapore 2026 security conference at the Marina Bay Sands Expo and Convention Centre. License This project is licensed...

Azure-App-Tools

Azure-App-Tools Collection of tools to use with Azure Applications. https://azure.microsoft.com/en-us/get-started/apps/ Prerequisites Azure Powershell Module https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-3.8.0 Examples: Dynamic Device Codes Original PoC by @MrUn1k0d3r...

Hardware Hacking Cheatsheet

Hardware Hacking Cheatsheet TOC Disclaimer I'm a noob who's trying to learn this type of things so maybe something could be not 100% correct Sorry for bad english Notes Follow the easyest path first methodology Sometimes you will need to solder stuff; here a quick and simple how to You could have...

AdbNet

adb - An exploitation tool for android devices. A tool that allows you to search for vulnerable android devices across the world and exploit them. Features Features: - Post-Exploitation modules to control and tinker with the device you are connected to. - Scanners to search for vulnerable android...

CVE-2026-0092

CVE-2026-0092 In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. NVD - CVE-2026-0092 Android...

umap2

Umap2 Umap2 is the second revision of NCC Group's python based USB host security assessment tool. This revision will have all the features that were supported in the first revision: umap2emulate - USB device emulation umap2scan - USB host scanning for device support umap2detect - USB host OS...

device_renesas_kernel_AOSP10_r33_CVE-2022-0492

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

NetAlertX

NetAlertX - Network Visibility & Asset Intelligence Framework !mainmain 📷 Click for more screenshots !Main screenmain| !devicedetails 1devicedetails| !Screen networknetwork ---|---|--- !presencepresence| !maintenancemaintenance| !settingssettings !synchubsynchub| !report1report1|...

process-enumeration-stealth

🚴 process-enumeration-stealth What is this? This is a simple PoC which allows you to return a list of PIDs currently using NTFS, by querying the \ntfs\ base device the Windows filesystem base object. Using this method circumvents the need to use typical APIs, such as NtQuerySystemInformation or t...

CVE-2021-47881

CVE-2021-47881 Local stack-based buffer overflow in dataSIMS Avionics ARINC 4.5.3 Data Device Corporation Hi, I'm Kağan Çapar. In February 2020 I found a local stack-based buffer overflow in DDC's dataSIMS avionics databus software and published a proof of concept on Exploit-DB in February 2021...

hackEmbedded

hackebds 🔗中文 readme Overview hackebds is a toolkit for embedded-device payload generation, encrypted shell workflows, SOCKS5 proxy tunneling, and device information lookup. The current branch uses a pure ELF workflow for encrypted shell and proxy features: reverseshellfile + encryptedshellserver ...

trackerjacker

trackerjacker Like nmap for mapping wifi networks you're not connected to. Maps and tracks wifi networks and devices through raw 802.11 monitoring. PyPI page: https://pypi.python.org/pypi/trackerjacker Install pip3 install trackerjacker Supported platforms : Linux tested on Ubuntu, Kali, and RPi...

lamda

FIRERPA Android ｜ AI-Powered Automation An all-in-one Android automation framework that combines on-device services, AI-ready agents, and extensible tool invocation. Documentation | 使用文档 | TELEGRAM | QQ Group | SKILLS | llms-full.txt | 中文版本 FIRERPA is an all-in-one Android device control platform...

Best-Practices-Cybersecurity-Otanata-Project

CP3418BestPracticesCybersecurityOTANATAProject CVE-2024-3273 — Authorized Penetration Test Report D-Link DNS-320L NAS | Client: Otonata Overview This repository contains the full security assessment report for an authorized penetration test conducted on a D-Link DNS-320L NAS device for client...