raspi-corelight

Corelight@Home raspi-corelight v3.2 Configure the Pi to Run Corelight Software Sensor The Corelight Software Sensor is a 64-bit application, so we have created a configuration tool raspi-corelight to perform initial configuration of the sensor and Raspberry Pi OS. To install and run this tool,...

Gallery-Plugin-SQL-Injection

Exploit Title: Wordpress Video Gallery - YouTube Gallery and Vimeo Gallery Plugin SQL Injection Date: 2024-07-05 Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://total-soft.com/wp-video-gallery/ Version 2.3.6 1. Access the Admin Panel: Navigate to the admin panel of your...

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework 1. config your metasploit-framework directory $ vim config/config.rb $metasploitpath =...

pySigma

pySigma pySigma is a python library that parses and converts Sigma rules into queries. It is a replacement for the legacy Sigma toolchain sigmac with a much cleaner design and is almost fully tested. Backends for support of conversion into query languages and processing pipelines for transforming...

sj

sj Swagger Jacker sj is a command line tool designed to assist with auditing of exposed Swagger/OpenAPI definition files by checking the associated API endpoints for weak authentication. It also provides command templates for manual vulnerability testing. It does this by parsing the definition fi...

juicy-potato

Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...

InletGuard

InletGuard InletGuard is a native PHP extension like curl...

php2shell-poc

PHP 8.4.26 php2shell RCE lab Authorized local research only...

openssl_g2.5_v1_0_1g

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

Monitor

Project Description Used for implementing privilege persistence during the post-exploitation testing phase Project Usage Step 1 : Download the project, then compile Monitor.cpp using VS. Of course, you can also use the pre-compiled one. The Monitor.cpp code is as follows: include "Windows.h" int...

CVE-2026-89863

A flaw was found in the Linux kernel's qla2xxx SCSI driver. This vulnerability, a NULL pointer dereference, occurs when the system attempts to process a SCSI command that has already been completed or aborted by the firmware. This can lead to a system crash, resulting in a Denial of Service DoS f...

CVE-2024-4367-PoC

CVE-2024-4367 & CVE-2024-34342: Arbitrary JavaScript execution in PDF.js A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. If pdf.js is...

second-order

Second Order Scans web applications for second-order subdomain takeover by crawling the app, and collecting URLs and other data that match certain rules, or respond in a certain way. Installation From binary Download a prebuilt binary from the releases page and unzip it. From source Go version 1....

FOFA-API-Threaded-Searcher

FOFA API Threaded Searcher A powerful multi‑threaded Python tool to query the FOFA Fofa.so API, extract selected fields, and save unique results with intelligent formatting. ✨ Features Multi‑threaded – Fetch multiple pages concurrently configurable threads Custom fields – Choose any valid FOFA...

vortex

🚩 This is the public repository of vortex, for latest version and updates please consider supporting us through https://porchetta.industries/ Vortex VPN Overall Reconnaissance, Testing, Enumeration and Exploitation Toolkit 🚩 Sponsors If you want to sponsors this project and have the latest update...

Security Bulletin: AIX is vulnerable to a denial of service due to NTP and tmux.

Summary Multiple vulnerabilities in NTP and tmux could allow a remote attacker to cause Integer Overflow CVE-2026-63384, Out-of-bounds Read CVE-2026-63383, Memory Corruption CVE-2026-63381, CVE-2026-63387, CVE-2026-63388, HTTP Request Smuggling / Header Injection CVE-2026-63379, CVE-2026-63382,...

libmempool

libmempool Preliminary note: we recommend you to use this as part of asatools but it can also be used standalone. libmempool is a python script and GDB analysis tool to aid in the analysis of mempool-related data structuress found inside various heaps on Cisco ASA devices. Normally this informati...

JKS-private-key-cracker-hashcat

JKS private key cracker - Nail in the JKS coffin The Java Key Store JKS is the Java way of storing one or several cryptographic private and public keys for asymmetric cryptography in a file. While there are various key store formats, Java and Android still default to the JKS file format. JKS is o...

dvcsharp-api

Damn Vulnerable C Application API Only Getting Started Note: This is a deliberately vulnerable app, please do not host it on production or Internet/public facing servers. Use with caution. Docker docker-compose up Manual Install .NET Core 2.x SDK Microsoft .NET Core SDK Install dependencies and...

CollaboratorPlusPlus

CollaboratorPlusPlus Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Corey Arthur, [email protected] http://www.github.com/nccgroup/CollaboratorPlusPlus This project is released under AGPL see LICENSE for more information Download from releases here. Backgrou...