CVE-2014-4322_adaptation

CVE-2014-4322adaptation Just an attempt to adapt for Note 4, I do not know what I am doing. There is currently a way to write to system using ADB CVE-2014-7951 and CVE-2014-7953. zxz0O0 has confirmed writing to system works. What we needed was to gain System UID to execute CVE-2014-4322. I am...

CVE-2022-28346

CVE-2022-28346 A flaw was found in the Django package, which leads to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely. Table of Contents CVE-2022-28346 Description Environment Proof of Concept and...

etaHEN

etaHEN - AIO Homebrew enabler 🚀 Support the Project If you find this project useful and would like to support its continued development, consider buying me a coffee! Building from Source The Source code is provided in the Source code folder under GPLv3 with all the necessary files to build it as...

CanoP

CanoP CLI A fast, standalone static analysis tool for finding security risks in AI-generated code. CanoP runs locally and produces actionable findings with remediation guidance. See CanoP in Action Features High signal-to-noise : Targets AI-era risks such as SQL injection, unsafe reflection, and...

PoC-CVE-2025-12097

CVE-2025-12097 Description NI modification of Appweb server contains a directory traversal vulnerability that allows an attacker to read arbitrary files on the server. URI path /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/windows/win.ini will be converted to: pathInfo cchar...

Sharperner

Sharperner Sharperner is a tool written in CSharp that generate .NET dropper with AES and XOR obfuscated shellcode. Generated executable can possibly bypass signature check but I cant be sure it can bypass heuristic scanning. Features PE binary Process Hollowing PPID Spoofing Random generated AES...

PHP_CVE-2012-1823

PHP-CGI Remote Code Execution Vulnerability CVE-2012-1823 Principle Reference article http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ Affected versions: php Vulnerability Analysis PHP SAPI and Operation Modes First, let's introduce the operation modes of PHP. Download the PHP source...

React2Shell-Kingdom

React CVE-2025-55182 Vulnerability Demonstration Project ⚠️ SECURITY WARNING This project demonstrates a critical RCE vulnerability CVE-2025-55182 / React2Shell in React Server Components 19.1.1. FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY NEVER deploy to production or expose to untrusted...

cve-2025-63888-exploit

CVE-2025-63888 ThinkPHP 5.0.24 File Inclusion RCE Exploit A security research tool for detecting and testing the CVE-2025-63888 vulnerability in ThinkPHP 5.0.24, which allows Remote Code Execution through file inclusion attacks. ⚠️ Disclaimer This tool is for authorized security testing and...

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment Objective: Demonstrate the exploitation of the Log4Shell vulnerability CVE-2021-44228 within a simulated banking application environment. Scope: 1: Setup a vulnerable banking application using Apache Log4j. 2:Craft a payload to exploit...

local-exploits

Local Exploits Various local exploits CVE-2020-8793 opensmptd-makemap-lpe - Fedora 31 OpenSMTPD makemap local root exploit. Code mostly taken from Qualys advisory 2020-02-24 for CVE-2020-8793. opensmtpd: Reading of arbitrary file by unprivileged attacker can result in information disclosure or...

CyberStrike

English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt | हिन्दी The first open-source AI agent built for offensive security. Automated...

CVE-2022-22965

CVE-2022-22965 Spring4Shell-PoC Version Spring Framework 5.2.20 and 5.3.18 Patched version: Spring Framework 5.3.18 and 5.2.20 Spring Boot 2.6.6 and 2.5.12 Details Spring Core is the core component of Spring Framework. This is the foundation to build other components in the Spring Framework...

CVE-2024-11613-wp-file-upload

CVE-2024-11613-wp-file-upload Exploit by Chirag Artani https://3rag.com for CVE-2024-11613 in WordPress File Upload Here is information - The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in all versions up to,...

python-uncompyle6

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: uncompyle6 A native Python cross-version decompiler and fragment decompiler. The successor to decompyle, uncompyle, and uncompyle2. I gave a talk on this at BlackHat Asia 2024 . Introduction...

TarantuBench

TarantuBench v1 A benchmark for evaluating AI agents on web security challenges, generated by the TarantuLabs engine. What is this? TarantuBench is a collection of 100 vulnerable web applications, each containing a hidden flag TARANTU.... An agent's job is to find and extract the flag by...

cve-2018-1207

cve-2018-1207 Exploit iDRAC 7 & 8 firmware 2.52.52.52 Description Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote...

revsync

revsync Realtime sync plugin for IDA Pro, Binary Ninja and Vivisect Syncs: Comments Symbol names Stack var names Structs Code coverage how much time was spent looking at a block IDA Pro Installation First, clone to IDA Data Dir: Windows: %APPDATA%\Hex-Rays\IDA Pro Mac/Linux: /.idapro Now: Make a...

LdrShuffle

LdrShuffle Stealthy code execution via modification of the EntryPoint of loaded modules at runtime. Summary Windows processses have various modules loaded at runtime. Each of theses modules has a DllMain function defined, which will be invoked on process or thread creation/destruction four possib...

android-security-awesome

android-security-awesome A collection of Android security-related resources. If you find this project useful, please consider supporting it. 1. Tools 2. Academic/Research/Publications/Books 3. Exploits/Vulnerabilities/Bugs Tools Online Analyzers 1. Appknox - not free 2. Virustotal 3. NowSecure La...