ps-ppl-bypass

Process Explorer vulnerable driver PPL Bypass While it is well known that old versions before 17.x of SysInternals Process Explorer drivers PSEXP152.sys are vulnerable and can be abused to open full access process handles to PPL processes IOCTL: 0x8335003c, newer versions 17.x upward are still...

graphql-cop

GraphQL Cop - Security Audit Utility for GraphQL About GraphQL Cop is a small Python utility to run common security tests against GraphQL APIs. GraphQL Cop is perfect for running CI/CD checks in GraphQL. It is lightweight, and covers interesting security issues in GraphQL. GraphQL Cop allows you ...

impersonate-rs

IRS Impersonate-RS 💡 IRS is a library version of https://github.com/zblurx/impersonate-rs, zblurx Reimplementation of Defte Impersonate in plain Rust. For more informations about it, see this blogpost. The token impersonation approach is a bit different from Defte Impersonate : here you have to...

SpawnWith

SpawnWith An experimental Beacon Object File BOF that provides an alternative to the spawnas and inject commands. This exposes a new command, spawnwith pid listener, that performs the following: 1. Obtain a handle to the target process. 2. Obtain a handle to the process' primary token. 3. Duplica...

bt2

bt2: Blaze Telegram Backdoor Toolkit bt2 is a Python-based backdoor in form of a IM bot that uses the infrastructure and the feature-rich bot API provided by Telegram, slightly repurposing its communication platform to act as a C&C. Dependencies Telepot requests Installation $ sudo pip install...

urless

About - v2.7 This is a tool used to de-clutter a list of URLs. As a starting point, I took the amazing tool uro by Somdev Sangwan. But I wanted to change a few things, make some improvements like deal with GUIDs and make it more customizable. Installation urless supports Python 3. Install urless ...

llm-circuit-finder

llm-circuit-finder I replicated Ng's RYS method and found that duplicating 3 specific layers in Qwen2.5-32B boosts reasoning by 17% and duplicating layers 12-14 in Devstral-24B improves logical deduction from 0.22→0.76 on BBH — no training, no weight changes, just routing hidden states through th...

uddup

UDdup - URLs Deduplication Tool The tool gets a list of URLs, and removes "duplicate" pages in the sense of URL patterns that are probably repetitive and points to the same web template. For example: https://www.example.com/product/123 https://www.example.com/product/456...

DuplicateDump

DuplicateDump DuplicateDump is a fork of MirrorDump with following modifications: DInovke implementation LSA plugin DLL written in C++ which could be clean up after dumping LSASS. MirrorDump compile LSA plugin as .NET assembly which would not be unloaded by LSASS process. That's why MirrorDump...

weakpass

Weakpass Here, you can find the list of tools and example of API server from weakpass.com for password and hash cracking in one place. 📂 Folder Structure tools A collection of password and hash cracking tools. Check them out: Kraker-js Lookup Passcheck Passgen libs Links to the libraries used in...

nelson

Nelson Finding vulnerabilities through dumb brute force Inspired by a talk by Nicholas Carlini and the Ralph loop, Nelson is a tool to loop on every file in a project, prompting an agent to look for vulnerabilities. It has a scan mode, similar to Carlini's bash loop, where it asks the model to fi...

LogMeInPoCHandleDup

LogMeIn / GoTo LMIInfo.sys Handle Duplication Summary A race condition exists in the LMIInfo.sys driver provided by LogMeIn / GoTo RMM wherein an arbitrary handle can be duplicated from the SYSTEM process. The core issue stems from the lack of proper access control on the device object alongside...

CVE-2026-8069

From an Acer Named Pipe to NT AUTHORITY\SYSTEM: CVE-2026-8069 Acer NitroSense and PredatorSense 3.x installed a Windows service called PSSvc that exposed a custom named-pipe protocol to local users. One protocol command accepted a caller-controlled executable path, duplicated the token of...

meshtastic-cve-2025-52464-poc

Meshtastic CVE-2025-52464 Proof of Concept Overview This project is a software-only proof of concept demonstrating CVE-2025-52464 , a vulnerability affecting Meshtastic firmware versions 2.5.0 to 2.6.10. The implementation reproduces the cryptographic behaviour of the vulnerable firmware and...

invoker

Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...

cve-2025-2783-chrome_sandbox_escape_reproduction

CVE-2025-2783: Google Chrome Mojo Sandbox Escape CVSS Score: 8.3 High Discovered by: Kaspersky Status: Actively exploited in the wild espionage campaigns Overview CVE-2025-2783 is a Windows-specific privilege escalation vulnerability in Google Chrome's Mojo Interprocess Communication IPC framewor...

CVE-2026-111947 Easy Pricing Tables < 4.1.3 - Contributor+ Arbitrary Post Clone and Publish via Legacy Table Duplication

The Pricing Table WordPress Plugin WordPress plugin before 4.1.3 does not perform authorisation checks when duplicating a legacy pricing table, allowing users with the contributor role and above to clone and publish any post or page on the site, including private and draft content belonging to...

CVE-2026-111947 Easy Pricing Tables < 4.1.3 - Contributor+ Arbitrary Post Clone and Publish via Legacy Table Duplication

The Pricing Table WordPress Plugin WordPress plugin before 4.1.3 does not perform authorisation checks when duplicating a legacy pricing table, allowing users with the contributor role and above to clone and publish any post or page on the site, including private and draft content belonging to...

CVE-2026-111947

The Pricing Table WordPress Plugin (specifically the Easy Pricing Tables plugin) is vulnerable in versions before 4.1.3 due to a lack of authorisation checks when duplicating a legacy pricing table. This flaw allows users with a contributor role or higher to clone and publish any post or page on ...

.NET 8.0 security, bug fix, and enhancement update

8.0.132-2.0.1 - Add support for Oracle Linux 8.0.132-2 - Fix apphost hash duplication under compiler optimizations on ppc64le - Resolves: RHEL-277790 8.0.132-1 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277790...