jwt-cracker

jwt-cracker Simple HS256, HS384 & HS512 JWT token brute force cracker. Effective only to crack JWT tokens with weak secrets. Recommendation : Use strong long secrets or RS256 tokens. Install With npm: npm install --global jwt-cracker Usage From command line: jwt-cracker -t -a --max -d -f Where:...

CVE-2026-118786

The NXP MCUXpresso SDK is affected by a vulnerability in the rpmsg-lite multicore example (specifically multicore_examples/rpmsg_lite_pingpong_tzm). Due to improper input validation in non-secure-callable (NSC) veneer functions , a non-secure caller can provide unvalidated pointers and size value...

Malicious code in intercom-react-native-example-e2e-tests (RubyGems)

Source: ossf-package-analysis f17f130fc5b4fa9192f15a6e914928336f4e591d424b5bec8696923519d2793f The OpenSSF Package Analysis project identified 'intercom-react-native-example-e2e-tests' @ 1.0.1 rubygems as malicious. It is considered malicious because: - The package communicates with a domain...

MAL-2026-18462 Malicious code in intercom-react-native-example-e2e-tests (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f17f130fc5b4fa9192f15a6e914928336f4e591d424b5bec8696923519d2793f The OpenSSF Package Analysis project identified 'intercom-react-native-example-e2e-tests' @ 1.0.1 rubygems as malicious. It is considered...

Malicious code in intercom-react-native-example-e2e-tests (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e084aff68cdd6201d55d3375bbc29f6e741553d4ac083f910fc38e110ef3d1 The gem declares ext/mkrfconf.rb as an extension script, so it runs automatically on gem install. The script collects host reconnaissance data...

sub404

Sub404: A Fast Tool To Check Subdomain Takeover Vulnerability What is Sub 404 Sub 404 is a tool written in python which is used to check possibility of subdomain takeover vulnerability and it is fast as it is asynchronous. Why During recon process you might get a lot of subdomainse.g more than 10...

gdbfuzz

GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...

kcfg-bypass

kcfg-bypass kcfg bypass example - CVE-2024-21338...

CVE-2017-9805_example_build

This repository does not have a README...

pfsense-api-fleet-jwt

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-fleet-jwt pfsense-api-fleet-jwt Class: IDOR Reach: Remote pfSense Plus MIM API Netgate pin b4acd7ca - github.com/Netgate/pfsense-api One POST /login Bearer is reused for every enrolled deviceid. Official...

CVE-2020-11978

CVE-2020-11978: Remote code execution in Apache Airflow's Example DAGs Information Description: This vulnerability allows RCE when Airflow's example DAGs are loaded, potentially unauthenticated with CVE-2020-13927 CVE Credit : xuxiang of DtDream security Versions Affected: On CVE-2020-13927 If...

VULNERABLE-CVE-2024-45337

VULNERABLE-CVE-2024-45337 An example project that showcases golang code vulnerable to CVE-2024-45337. This is a companion project to: https://github.com/NHAS/CVE-2024-45337-POC So you have something to exploit. Usage go run solver.go -authorised-pubkey ided25519.pub -allowed...

gf

gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: ▶ grep -HnrE...

CVE-2025-25296

CVE-2025-25296 Proof of Concept POC Description This project demonstrates a Proof of Concept POC for the CVE-2025-25296 vulnerability affecting Label Studio, an open-source data labeling tool. The vulnerability resides in the /projects/upload-example endpoint, which fails to sanitize user-provide...

AntiDebug-AntiVM

AntiDebug/AntiVM Purpose This repository hosts the different debug/vm detection methods I have come across whilst looking through the WinAPI. This is not intended to be compiled and ran but rather to show examples of how to implement these different methods into your existing projects. Each file ...

django-xss-example

Local Testing Works only on Linux. On Windows, one of the dependencies may cause an error. Before running, you need to install the following packages: pip install -r requirements.txt Make sure the packages are installed python -m django --version pip install django==4.0.1 grammarinator-generate...

IE11SandboxEscapes

IE11SandboxEscapes Some example source code for fixed IE11 sandbox escapes. c James Forshaw 2014 For information purposes only. All files are licensed under GPLv3. See LICENSE for more information...

CVE-2022-40127-Airflow-RCE

Apache Airflow A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided runid parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0. The repo is created for a CVE...

LovelySn0w

LovelySn0w. a iOS CVE-2018-4150 Application example. if this doesn't compile in XCode please message me on twitter. it's probably my fault then! it's not completetd at the moment. if you find //ACPV ›Some version ... you are here from the PS4-Scene, waiting for me to finish my work on the PS4...

4062-1

Black Duck CoPilot Gradle/Travis CI Example Shows a working setup for using the Black Duck CoPilot integration to analyze the risk of project dependencies Travis CI Setup The .travis.yml file has been modified to upload generated dependency data to Black Duck CoPilot: aftersuccess: - bash curl -s...