Multimodal-Unlearnable-Examples

Multimodal Unlearnable Examples: Protecting Data against Multimodal Contrastive Learning ACM MM2024 Abstract : Multimodal contrastive learning MCL has shown remarkable advances in zero-shot classification by learning from millions of image-caption pairs crawled from the Internet. However, this...

CVE-2026-106173

CVE-2026-106173: Fortinet FortiSIEM gRPC Path Traversal File Write RCE This repository contains a proof of concept for CVE-2026-106173, an unauthenticated remote code execution vulnerability in Fortinet FortiSIEM. Vulnerability Details The FortiSIEM gRPC QueryResultReq handler processes untrusted...

CatSniffer-Firmware

CatSniffer firmware Here you will find the different firmwares for using this tool, it is important to note what CatSniffer version you own since the main microcontroller changed in v3.x we needed to keep track of compatibility between different processors and protocols. Firmware for different...

egodeath

egodeath This project does not achieve indistinguishability obfuscation. You should not be using this to product to protect secrets. It exists to deter reverse engineering, not prevent it A JavaScript obfuscator designed to make code extremely difficult to read and analyze for both humans and LLM...

LeakedHandlesFinder

LHF - Leaked Handles Finder Leaked Windows processes handles identification tool. Useful for identify new LPE vulnerabilities during a pentest or simply as a new research process. Currently supports exploiting autopwn procesess leaked handles spawning a new arbitrary process cmd.exe default. LHF...

crypter

Crypter This Crypter is written in python 3, which can be used to obfusticate, encrypt the python source code to bypass AntiVirus. Also Capable to Bypass VM such as VirtualBox, VMware, Sandboxie. Uses AES-256 bit Encryption & Base64 Encoding to Encrypt the Source Code for Twice. 3 Powerfull Metho...

Awesome-RedTeam-Cheatsheet

Red Team Techniques Initial Access Techniques soon Code Execution Techniques soon Lateral Mouvement Techniques soon Evasion Techniques soon Persistence Techniques soon Privilege Escalation Techniques soon Credential Dumping Techniques soon Pivoting Techniques soon Windows Protocols and...

wapiti

================================== Wapiti - Web Vulnerability Scanner .. image:: https://img.shields.io/pypi/v/wapiti3?label=PyPI&logo=PyPI&logoColor=white&color=blue :alt: PyPI version :target: https://pypi.python.org/pypi/wapiti3 .. image:: https://img.shields.io/pypi/pyversions/wapiti3 :alt:...

CVE-2026-10289-XSS

Hotel and Tourism Reservation System - Stored Cross-Site Scripting XSS Vulnerability Details Field| Details ---|--- Title| Hotel and Tourism Reservation System - Stored Cross-Site Scripting XSS CVE ID| Pending Assignment Vendor| code-projects.org Vendor URL|...

CVE-2025-61155

CVE-2025-61155: Arbitrary Process Termination in GameDriverX64.sys https://github.com/user-attachments/assets/baf76601-94de-49a6-b4fd-e72f63112fab Overview This repository contains the security advisory and PoC for CVE-2025-61155. The GameDriverX64.sys anti-cheat driver allows any local user to...

BridgeKeeper

BridgeKeeper Scrape employee names from search engine LinkedIn profiles Hunt for emails and username formats via Hunter.io Transform names to given username formats Usage usage: bridgekeeper.py flags BridgeKeeper - v1.0.0 options: -h, --help show this help message and exit Targets: -c COMPANY,...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

claude-awm

claude-awm: can you scrub a SynthID text watermark by editing the text? Yes, but only one family of attack works, and it isn't the one everyone assumes. Unicode variation selectors category Mn, U+FE00 to U+FE0F and U+E0100 to U+E01EF drive the detector below threshold and stay there. Every other...

BokuLoader

BokuLoader : Cobalt Strike Reflective Loader A proof-of-concept User-Defined Reflective Loader UDRL which aims to recreate, integrate, and enhance Cobalt Strike's evasion features! Contributors: Contributor| Twitter| Notable Contributions ---|---|--- Bobby Cooke| @0xBoku| Project original author...

shim

shim, a first-stage UEFI bootloader shim is a trivial EFI application that, when run, attempts to open and execute another application. It will initially attempt to do this via the standard EFI LoadImage and StartImage calls. If these fail because Secure Boot is enabled and the binary is not sign...

CVE-2025-46817-PoC

CVE-2025-46817 Redis Integer Overflow Exploit A lightweight C implementation of the CVE-2025-46817 exploit for Redis integer overflow vulnerability. 🚀 Features Lightweight : Single C file, no external dependencies beyond hiredis Fast : Native compilation for maximum performance Colorful Output :...

NeuroCore

NeuroCore High-Performance Structural Binary Analysis and Visualization Utility Abstract NeuroCore is a native macOS utility engineered for the structural analysis of binary data through high-velocity visualization. By leveraging General-Purpose Computing on Graphics Processing Units GPGPU via...

Linpmem

Linpmem -- a physical memory acquisition tool for Linux Linpmem is a Linux x64-only tool for reading physical memory. Like its Windows counterpart, Winpmem, this is not a traditional memory dumper. Linpmem offers an API for reading from any physical address, including reserved memory and memory...

scorecard

OpenSSF Scorecard Overview What Is Scorecard? Prominent Scorecard Users View a Project's Score Scorecard's Public Data Using Scorecard Scorecard GitHub Action Scorecard REST API Scorecard Badges Scorecard Command Line Interface Prerequisites Installation Authentication Basic Usage Checks Default...

CVE-2025-4578

CVE-2025-4578 File Provider = 1.2.3 - Unauthenticated SQL Injection Description The File Provider plugin for WordPress is vulnerable to SQL Injection via the 'fileId' parameter in all versions up to, and including, 1.2.3 due to insufficient escaping on the user supplied parameter and lack of...