Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell CVE-2026-109618 exploit tool — RCE via OO...

llm-circuit-finder

llm-circuit-finder I replicated Ng's RYS method and found that duplicating 3 specific layers in Qwen2.5-32B boosts reasoning by 17% and duplicating layers 12-14 in Devstral-24B improves logical deduction from 0.22→0.76 on BBH — no training, no weight changes, just routing hidden states through th...

ThisSeemsWrong

Fix for this issue appeared as CVE-2024-49746: bulletin, patch "This seems wrong" Above title is the comment from Parcel::continueWrite method, which is actually responsible for resizing Parcel objects, either when explicitly request by user for example through setDataSize or when calling one of...

Netryx-Astra-V2-Geolocation-Tool

Netryx Astra V2 State-of-the-art AI geolocation from a single image. The Idea • How It Works • Getting Started • Community Hub • Installation The Idea You have a photograph. Maybe it's a screenshot from a video. Maybe it's a cropped, blurry phone photo someone posted online. Maybe it shows just a...

BugId

BugId Detect, analyze and uniquely identify application bugs. TL;DR Do you... want to know what kind of bug is causing an application to crash? want to know if a bug might be security vulnerability? want to find out if two or more crashes are caused by the same bug? want a human readable report...

ZygoteExploitDemo

🔥 ZygoteExploitDemo - CVE-2024-31317 Android Security Lab 🚨 Educational Demonstration of Android Zygote Injection Vulnerability 📋 Overview This lab demonstrates CVE-2024-31317 , a critical Android vulnerability that allows a malicious app to escalate privileges to SYSTEM level UID 1000 and bypass...

Graylog2__graylog2-server_CVE-2023-41044_5-1-2

Graylog Welcome! Graylog is an open source log management platform. You can read more about the project on our website and check out the documentation on the documentation site. Issue Tracking Found a bug? Have an idea for an improvement? Feel free to add an issue. Contributing Help us build the...

Malbait

Malbait TCP/UDP Honeypot program implemented in Perl README for malbait, 2/10/17 btw my bitcoin address is 3A7yuqBcPAcVEM59bNAVQdTCmkxRb5JRgE Here's an alternative, also for BTC, as I've been getting reports of some bitcoin wallets not supporting certain addresses:...

wsh

wsh wsh pronounced woosh is a web shell generator and command line interface. This started off as just an http client since interacting with webshells is a pain. There's a form, to send a command you have to type in an input box and press a button. I wanted something that fits into my workflow...

tamarin-prover

The Tamarin prover repository This README describes the organization of the repository of the Tamarin prover for security protocol verification. Its intended audience are interested users and future developers of the Tamarin prover. For installation and usage instructions of the Tamarin prover se...

CVE-2019-9766

CVE-2019-9766 Exploiting the buffer overflow vulnerability in Free MP3 CD Ripper version 2.6, by constructing a specially crafted MP3 file, when the attacker uses the player to play the audio file, the audio file bait exploits the buffer overflow vulnerability to execute arbitrary code...

linux-smart-enumeration

First, a couple of useful oneliners ; wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700 lse.sh Note that...

CVE-2025-10951

CVE-2025-10951 - checkmlloggertraversal.py Proof-of-existence checker for CVE-2025-10951 / GHSA-8x9j-2p8r-7xc6 — an unauthenticated path traversal in geyang/ml-logger ≤ 0.10.36, affecting the loghandler / streamhandler functions in mllogger/server.py. For use only against systems you are authoriz...

Aether-C2-Framework

🌌 Aether-C2-Framework - Powerful Tools for Cybersecurity Training Download Aether-C2-Framework 🚀 Getting Started Welcome to the Aether-C2-Framework! This guide will help you download and run the framework easily, even if you're not a tech expert. 🛠️ System Requirements Before downloading the...

diaphora

δiaphora Installation Install with the Hex-Rays plugin manager: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.4.zip Manual install: download the code and place it into your plugins/ directory. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most...

flowsint

Flowsint Flowsint is an open-source OSINT graph exploration tool designed for ethical investigation, transparency, and verification. Ethics: Please read ETHICS.md for responsible use guidelines. https://github.com/user-attachments/assets/eaabfa81-d7b3-414d-8cf7-f69b4e37bab6...

go-dork

go-dork The fastest dork scanner written in Go. There are also various search engines supported by go-dork, including Google, Shodan, Bing, Duck, Yahoo and Ask. Install Usage Basic Usage Flags Querying Defining engine Pagination Adding custom headers Using proxy Chained with other tools Supportin...

opencti

Note: Building connectors, contributing to the platform, or running OpenCTI in production? Join us on the Community Slack to ask questions, talk through a PR before you open it, or compare notes on integrations. Introduction OpenCTI is an open source platform allowing organizations to manage thei...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

log4fix

log4fix This tool is to detect and fix the log4j log4shell vulnerability CVE-2021-44228 by looking and removing the JndiLookup class from .jar/.war/.ear files with zero dependencies for free. This tool has been tested on: - Linux 32bit and 64 bit - Windows 32 bit and 64 bit - OpenBSD 64 bit This...