367511 matches found
kin
A new foundation for code. Kin is a graph-native code repository for people and AI agents. It stores source, recorded code relationships, and versioned history as repository state. The graph is the repository model, not a search index maintained beside another repository. Functions, types, and th...
SystemVulnerabilityChecklist_Project4_Decodelabs
🔐 System Vulnerability Checklist A security assessment and network hardening exercise conducted against a vulnerable Linux target machine. The project focuses on identifying critical vulnerabilities, assessing their impact, and implementing firewall-based mitigation using IPTables. 📌 Project...
CVE-2019-9978
CVE-2019-9978 - Social Warfare Wordpress plugin RCE 3.5.3 Remote Code Execution in Social Warfare Plugin before 3.5.3 for Wordpress. This Poc does not require running an additional HTTP Server. Just pass your local IP and the desired port and the exploit will create a server in its own thread...
superpowers-evals
Superpowers Evals Laboratorio de evaluación comportamental para superpowers. Quorum impulsa CLIs reales de agentes de codificación Claude, Codex, Antigravity, Gemini, Kimi, OpenCode, Pi y Copilot a través de un agente de control de calidad Gauntlet y los califica según los criterios de aceptación...
apk-info
apk-info Un analizador apk completo. Características Un extractor zip amigable con malware. Excelente artículo sobre la técnica BadPack; Un extractor axml y arsc amigable con malware; Una implementación completa de AXML Android Binary XML; Una implementación completa de ARSC Recursos de Android;...
drs-malware-scan
Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...
CVE-2026-59310-POC
CVE-2026-59310 — VMware vCenter Syslog Directory Traversal Leading to Unauthenticated RCE Disclaimer : This project is intended solely for authorized security testing, vulnerability verification, and defensive research. Please use it only in environments where you have obtained explicit written...
NucleiFuzzer
NucleiFuzzer = Nuclei + Paramspider + waybackurls + gauplus + hakrawler + katana + Fuzzing Templates Descripción general NucleiFuzzer es una herramienta de automatización avanzada diseñada para optimizar y agilizar las pruebas de seguridad en aplicaciones web, integrando un conjunto de potentes...
openclaw
OpenClaw 🦞 — Your assistant, on your devices, in your chats OpenClaw is an open-source AI assistant that runs on your own computer and meets you in the channels you already use: Discord, iMessage, Slack, Teams, Telegram, WhatsApp, and 20+ more, plus native apps for macOS, iOS, Android, Windows, a...
CVE-2025-22352
1️⃣ Component type WordPress plugin 2️⃣ Component details Component name ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Vulnerable version = 1.4.8 Component slug elex-bulk-edit-products-prices-attributes-for-woocommerce-basic Component link...
EDR-Freeze
EDR-Freeze This is a tool that exploits the software vulnerability of WerFaultSecure to suspend the processes of EDRs and antimalware without needing to use the BYOVD Bring Your Own Vulnerable Driver attack method. EDR-Freeze operates in user mode, so you don't need to install any additional...
waf-checker
WAF Checker Este proyecto te ayuda a comprobar qué tan bien protege tu Web Application Firewall WAF tu producto contra ataques web comunes. Se puede ejecutar como un Cloudflare Worker con una interfaz web interactiva incorporada o como una herramienta CLI independiente de Node.js. Características...
dnstwist
See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...
jebmcp
A quick-and-dirty MCP server&Plugin for JEB Pro. Tested on Cline & Cursor & RooCode. Reference: https://github.com/mrexodia/ida-pro-mcp Installation Requirements Python = 3.11 uv: https://docs.astral.sh/uv/getting-started/installation/ Usage COPY the src/jebmcp/MCP.py to...
santa
Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...
CVE-2025-59712_CVE-2025-59713
PoC for CVE-2025-59712 and CVE-2025-59713 This PoC provides an automated script to exploit CVE-2025-59712 XSS in User-Agent header and CVE-2025-59713 unsafe deserialization. Context These two vulnerabilities were discovered by Synacktiv during vulnerability research on the Snipe-IT software...
exploit-CVE-2016-10033
PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...
CVE-2023-34152
CVE-2023-34152 RCE vulnerability affecting ImageMagick 6.9.6-4. This vulnerability allows the attacker to execute commands on the victim system. Thus, allowing for Remote Command Execution. This is a POC which was inspired by fullwaywang discovery of CVE-2023-34152. Vulnerability Disclosure Usage...
CVE-2022-21907
CVE-2022-21907 Descripción 1. Este repositorio detecta un sistema vulnerable a CVE-2022-21907 CVSS:3.1 9.8 y protege contra esta vulnerabilidad si se desea. Ofrezco 2 códigos de PowerShell en 1 línea. 2. Propongo scripts puros en Python, PowerShell, Ruby y módulos de Metasploit y Nmap para atacar...