RF-CHAOS

RF CHAOS - Chaos via BLE / BT / WiFi / NFC / Etc via Android Phones RF CHAOS is an Android-Native WiFi, Bluetooth, BLE, and NFC scanner, logger, and explotation tool. Created ByScramblr AKA @notdan AKA alotofnamesyoudontknow ℹ️ If you're itching to get the APK now, compiled releases are...

async-pico-hub

Async PICO HUB Async PICOs is a framework for running long-lived, event-driven Beacon Object Files inside a Cobalt Strike Beacon process. It provides asynchronous execution, task tracking, graceful shutdown, and safe asynchronous output by combining Crystal Palace PICOs with a Beacon-side executi...

VulnReach

VulnReach Runtime-aware SCA — proves which CVEs are actually reachable, not just installed. VulnReach is now an officialOWASP Project. 🎉 Demo Step 1 — SCA surfaces 74 CVEs across dependencies Step 2 — VulnReach proves which ones are actually reachable Findings — evidence chain per CVE Dashboard —...

donut-decryptor

donutdecryptor A configuration and module extractor for the donut binary obfuscator Description donut-decryptor checks files for known signatures of the donut obfuscator's loader shellcode. If located, it will parse the shellcode to locate, decrypt, and extract the DONUTINSTANCE structure embedde...

LazZzy_Dump

laZzzy Dump A static analysis tool for extracting encrypted shellcode from laZzzy-wrapped PE binaries without requiring dynamic execution, debugging, or emulation. Overview laZzzy Dump is a malware analysis tool which aids analysis through static extraction of shellcode from binaries compiled wit...

ParanoiDF

ParanoiDF The swiss army knife of PDF Analysis Tools. Based on peepdf - http://peepdf.eternal-todo.com. This README builds on the peepdf README. This tool was developed as part of my M.Sc dissertation/project for the School of Computing University of Kent, Canterbury, UK. The man behind the idea...

Kramer

🐸 Kramer 🐸 First of all, if you're looking for theBEST fully Python obfuscator, you should check Hyperion! Kramer is a next level obfuscation tool written in Python3 allowing you to obfuscate your Python3 code easily and securely. It uses Berserker's obfuscation but in a more advanced way making...

PoC-RCE-Rukovoditel

PoC-RCE-Rukovoditel Proof of concept for CVE-2020-11819 and CVE-2020-15946. Tested on Rukovoditel 2.4.x, 2.5.x and 2.6.1 Description: This exploit has two modes of execution, using the session fixation vulnerability CVE-2020-15946 or using the access credentials of any account under any profile...

ida_haru

+OPTIONS: ^: idaharu Scripts/plugins for IDA Pro Note: Old scripts don't work for IDA 8.x, but I leave them just for reference. esetcrackme IDA Pro loader/processor modules for ESET CrackMe driver VM stackstringstatic IDAPython script statically-recovering strings constructed in stack fnfuzzy...

CVE-2026-9830

CVE-2026-9830 BookingPress Pro API Assessment PoC This repository contains a Python proof of concept for validating a reported unauthenticated BookingPress Pro REST API exposure. A successful response may contain booking and customer information, which can include personal data. Authorization...

CVE-2022-29078

CVE-2022-29078 Simple PoC for CVE-2022-29078 vuln ejs 3.1.6 Usage git clone https://github.com/chuckdu21/CVE-2022-29078.git cd CVE-2022-29078 python3 CVE-2022-29078.py A prompt will appear to execute commands $ id uid=0root gid=0root groupes=0root...

cve-2022-22947-spring-cloud-gateway

Vulnerability Overview Spring Cloud Gateway is a new project under Spring Cloud, built on Spring 5.0, Spring Boot 2.0, and Project Reactor. It aims to provide a simple and effective unified API routing management method for microservice architectures. Recently, Spring Cloud Gateway was reported t...

glassworm-hunter

glassworm-hunter Detect GlassWorm supply chain attack payloads on your machine. Scans VS Code extensions, npm packages, Python packages, and git repositories. This scanner detects the attack technique itself - invisible Unicode variation selector payloads, GlassWorm decoder patterns, C2...

dconstruct

dconstruct Open the source MP4 dconstruct is a reverse engineering tool for the DC-Script files used in The Last of Us Part II. It features a disassembler and a decompiler. It outputs .asm files containing the disassembled structures and bytecode, aswell as .dcpl DC Pseudo Language files containi...

enumerate-iam

Enumerate IAM permissions Found a set of AWS credentials and have no idea which permissions it might have? $ ./enumerate-iam.py --access-key AKIA... --secret-key StF0q... 2019-05-10 15:57:58,447 - 21345 - INFO Starting permission enumeration for access-key-id "AKIA..." 2019-05-10 15:58:01,532 -...

vuln-bank

Vulnerable Bank Application 🏦 A deliberately vulnerable web application for practicing application security testing of Web, APIs and LLMs, secure code review and implementing security in CI/CD pipelines. ⚠️ WARNING: This application is intentionally vulnerable and should only be used for...

aws-vault

AWS Vault !WARNING This project has been abandoned and it's not receiving any more updates. If you want to continue to receive updates or contribute, please feel free to look at the active fork at: https://github.com/ByteNess/aws-vault AWS Vault is a tool to securely store and access AWS...

CVE-2023-38831_ReverseShell_Winrar-RCE

OBTAINING A REVERSE SHELL BY EXPLOITING THE WINRAR VULNERABILITY CVE-2023-38831 In this repository we are going to exploit the WinRAR vulnerability CVE-2023-38831 in order to obtain a reverse shell from the victim Windows machine to the attacker Kali Linux machine. PRELIMINARY STEPS Download the...

SuperDiagnosticTool

SuperDiagnosticTool AI-Powered Windows Diagnostic & Remediation Tool SuperDiagnosticTool collects real-time hardware telemetry, sends it to the Google Gemini API for analysis, and generates PowerShell remediation scripts to address detected issues. It includes multiple validation layers that a...

Pulsar

Pulsar Pulsar is a tool for data exfiltration and covert communication that enable you to create a secure data transfer, a bizarre chat or a network tunnel through different protocols, for example you can receive data from tcp connection and resend it to real destination through DNS packets 🎉...