blind-ssrf-chains

Introducción ¿Qué es Server Side Request Forgery SSRF? Server Side Request Forgery ocurre cuando puedes obligar a un servidor a realizar solicitudes arbitrarias en tu nombre. Como las solicitudes las realiza el servidor, es posible acceder a recursos internos debido a la posición del servidor en ...

reconix

Reconix 侦察情报引擎 | 泄漏扫描器 | 威胁情报套件 🔍 深度暴露情报 • ⚡ 高信号侦察引擎 ⚠️ 法律免责声明 Reconix 专为授权的安全测试、漏洞赏金计划和防御性研究而设计。 ✅ 可以 扫描您拥有的目标 ✅ 可以 扫描拥有明确书面许可的目标 ✅ 可以 在CTF比赛中使用 ❌ 不要 未经授权扫描系统 ❌ 不要 用于恶意目的 未经授权的扫描是非法的，将受到计算机欺诈法的惩罚。 请阅读 DISCLAIMER.md 中的完整免责声明。 🔥 Reconix 的强大之处 与仅进行正则匹配并转储发现的普通扫描器不同，Reconix： 实时验证密钥 — 调用实际...

Exploits

Este repositorio contiene una colección personal de CVE de Windows que he convertido en código de exploit, así como una colección de payloads que he escrito para usarse junto con estos exploits. Algunos de estos CVE se han combinado en cadenas de exploits para RCE, escapes de sandbox y escalada d...

PT-2026-63398

Name of the Vulnerable Software and Affected Versions Telerik UI for AJAX versions prior to 2026.2.708 Description When the Telerik.Upload.ConfigurationHashKey is absent and the machineKey is not explicitly configured, the integrity protection for upload metadata may revert to a predictable defau...

Exploit-Chain-Suggestor

Exploit Chain Suggestor A CLI tool for penetration testers an...

Exploit-Chain-Suggester

Exploit Chain Suggester v2.0.0 A CLI tool for penetration tes...

ctf-writeups

ctf-writeups Retos de HTB, TryHackMe y DFIR — documentado...

coruna-exploit-kit-analysis

Coruna iOS Exploit Kit — Reverse Engineering Analysis Def...

vulnswarm

VulnSwarm AI-powered vulnerability discovery using multi-agen...

Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in Recent Mass Attacks

The kernel exploit for two security vulnerabilities used in the recently uncovered Apple iOS exploit kit known as Coruna is an updated version of the same exploit that was used in the Operation Triangulation campaign back in 2023, according to new findings from Kaspersky. "When Coruna was first...

exploit-chain-generator

Exploit Chain Generator Turn Noise into Signal: Correlate...

PT-2026-1006

CVE-2025-34464 + CVE-2025-34465 reserved for preauth exploit-chains among the last of the year 🥳 Thanks to @catc0n & @VulnCheckAI !...

PT-2026-1005

CVE-2025-34464 + CVE-2025-34465 reserved for preauth exploit-chains among the last of the year 🥳 Thanks to @catc0n & @VulnCheckAI !...

cve-exploit-chain-analyzer

🔐 CVE Exploit Chain Analyzer Automated vulnerability scanner...

LegalSim: Multi-Agent Simulation of Legal Systems for Discovering Procedural Exploits

We present LegalSim, a modular multi-agent simulation of adversarial legal proceedings that explores how AI systems can exploit procedural weaknesses in codified rules. Plaintiff and defendant agents choose from a constrained action space for example, discovery requests, motions, meet-and-confer,...

Exploit for CVE-2025-2783

ChromSploit Framework v2.2 🚀 !Python Versionhttps://img...

Google Reports 75 Zero-Days Exploited in 2024 — 44% Targeted Enterprise Security Products

Google has revealed that it observed 75 zero-day vulnerabilities exploited in the wild in 2024, down from 98 in 2023 but an increase from 63 the year before. Of the 75 zero-days, 44% of them targeted enterprise products. As many as 20 flaws were identified in security software and appliances...

Experts Detail Multi-Million Dollar Licensing Model of Predator Spyware

A new analysis of the sophisticated commercial spyware called Predator has revealed that its ability to persist between reboots is offered as an "add-on feature" and that it depends on the licensing options opted by a customer. "In 2021, Predator spyware couldn't survive a reboot on the infected...

Hacks at Pwn2Own Vancouver 2023

An impressive array of hacks were demonstrated at the first day of the Pwn2Own conference in Vancouver: On the first day of Pwn2Own Vancouver 2023, security researchers successfully demoed Tesla Model 3, Windows 11, and macOS zero-day exploits and exploit chains to win $375,000 and a Tesla Model ...

New Wave of Cyberattacks Targeting MS Exchange Servers

By Waqas Cybercriminals are leveraging two exploit chains ProxyNotShell/OWASSRF to target Microsoft Exchange servers, as warned by Bitdefender Labs. This is a post from HackRead.com Read the original post: New Wave of Cyberattacks Targeting MS Exchange Servers...