GO-RPCBOMB

Description: CVE-2017-8779 rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service memory consumption with ...

CVE-2025-59712_CVE-2025-59713

PoC for CVE-2025-59712 and CVE-2025-59713 This PoC provides an automated script to exploit CVE-2025-59712 XSS in User-Agent header and CVE-2025-59713 unsafe deserialization. Context These two vulnerabilities were discovered by Synacktiv during vulnerability research on the Snipe-IT software...

CVE-2018-6789

CVE-2018-6789 Environment Setup Install dependencies apt-get install gcc net-tools vim gdb python wget git make procps libpcre3-dev libdb-dev libxt-dev libxaw7-dev Download an old version of exim wget ftp://mirror.easyname.at/exim-ftp/exim/exim4/old/exim-4.89.tar.gz tar -xvzf ./exim-4.89.tar.gz c...

cupcake

Cupcake Make AI agents follow the rules. Policy enforcement layer for AI agents; yielding better performance and security without consuming model context. Deterministic rule-following for your agents. Interactive Examples Better performance by moving rules out of context and into policy-as-code...

BOF_RunPe

BOFRunPE BOF RunPE is a Beacon Object File for Cobalt Strike that executes PE files entirely in-memory within the beacon process. Unlike traditional fork&run, no child process is spawned, no console is created, and no pipe is used - all output is captured via IAT hooking and redirected to the...

relay_bible

Relay Bible — Internal Penetration Testing Relay Guide A comprehensive reference for NTLM relay attacks during authorized internal penetration tests. Covers authentication fundamentals, coercion techniques, per-protocol relay targets, tooling, advanced chaining, and defensive mitigations...

CVE-2023-22432

CVE-2023-22432 PoC verification of web2py vulnerability CVE-2023-22432 A vulnerability CVE-2023-22432 in web2py was disclosed on Jan 31, 2023 US time. This article describes our discussion of this vulnerability and the results of our verification. Vulnerability Summary This vulnerability is an op...

resmack-fuzz-test

Resmack Fuzz Test This project is an exploration of a feedback-driven fuzzer that uses: ptrace for instrumentation with dynamic memory breakpoints specified by the target process process snapshotting/restoring using /proc/pid/map, /proc/pid/clearrefs, and /proc/pid/pagemap using processvmwritev...

grepmarx

Grepmarx - Application Security Platform Grepmarx is a web application providing a single platform to quickly understand, analyze and identify vulnerabilities in possibly large and unknown code bases. Features SAST Static Analysis Security Testing capabilities: Multiple languages support: C/C++, ...

ConcoLLMic

ConcoLLMic: Agentic Concolic Execution Paper : IEEE S&P 2026 ConcoLLMic is the first language- and theory-agnostic concolic executor powered by LLM agents. Unlike traditional symbolic execution tools that require language-specific implementations and struggle with constraint solving, ConcoLLMic:...

dncil

dncil is a Common Intermediate Language CIL disassembly library written in Python that supports parsing the header, instructions, and exception handlers of .NET managed methods. Parsed data is exposed through an object-oriented API to help you quickly develop CIL analysis tools using dncil. Why...

tinyos-rtos

TinyOS — Ultra-Lightweight RTOS for IoT An ultra-lightweight real-time operating system for resource-constrained IoT and embedded devices. Kernel footprint under 10 KB, 2 KB minimum RAM, preemptive priority-based scheduling. Features Category| Details ---|--- Kernel| Preemptive priority-based...

PoC-for-CVE-2025-9074

CVE-2025-9074 - Docker API Unauthenticated Access PoC 📌 Overview This repository provides a Proof-of-Concept PoC exploit for CVE-2025-9074 , which involves unauthenticated exposure of the Docker Engine API on TCP port 2375. An attacker who can access this exposed API can: Interact with the Docker...

accfly

How secure is your "security" camera? Executive summary In the beginning of 2020, at my former workplace, I had a chance to take part in an internal pwn2own style event. There were several targets available, but I was interested the most in Accfly Wireless Security camera. Unfortunately I had not...

CVE-2023-6634

CVE-2023-6634 Exploit Script Description This repository contains a Python script designed to exploit the CVE-2023-6634 vulnerability found in the LearnPress plugin for WordPress, versions up to and including 4.2.5.7. The vulnerability allows for remote code execution RCE due to improper input...

CVE-2021-43811

CVE-2021-43811 awslabs/sockeye Code injection via unsafe YAML loading CVE-2021-43811 NVD Description Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 us...

OpenContacts

OpenContacts for Android Privacy to your contacts. Translation Do you want to see this app in your own language, contribute the translations About This app saves contacts in its own database seperate from android contacts. This way no other app would be able to access contacts. Can be used in pla...

PF_RING

PFRING™ Introduction PFRING™ is a Linux kernel module and user-space framework that allows you to process packets at high-rates while providing you a consistent API for packet processing applications. Who needs PFRING™? Basically everyone who has to handle many packets per second. The term ‘many’...

printerbugnew

Pure RPC over TCP Printer Spooler Trigger For Windows 11 22H2+ / Windows Server 2025 Usage printerbugnew.py username password domain attackerhost tcpport Examples Anonymous connection printerbugnew.py 192.168.1.100 With credentials printerbugnew.py 192.168.1.100 admin Password123 DOMAIN Trigger...

Nidhogg

Nidhogg Nidhogg is a multi-functional rootkit to showcase the variety of operations that can be done from kernel space. The goal of Nidhogg is to provide an all-in-one and easy-to-use rootkit with multiple helpful functionalities for operations. Besides that, it can also easily be integrated with...