frida-ipa-extract

frida-ipa-extract This project was inspired by frida-ios-dump. Since I recently encountered problems with that tool, I decided to create frida-ipa-extract with greater robustness and additions to address problems we face today. Extract a decrypted .ipa from a jailbroken iOS device using Frida...

gitjacker

gitjacker Gitjacker downloads git repositories and extracts their contents from sites where the .git directory has been mistakenly uploaded. It will still manage to recover a significant portion of a repository even where directory listings are disabled. For educational/penetration testing use...

uefi-firmware-parser

UEFI Firmware Parser .. image:: https://travis-ci.org/theopolis/uefi-firmware-parser.svg?branch=master :target: https://travis-ci.org/theopolis/uefi-firmware-parser The UEFI firmware parser is a simple module and set of scripts for parsing, extracting, and recreating UEFI firmware volumes. This...

CVE-2022-34265

CVE-2022-34265 PoC for CVE-2022-34265 Description An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc and Extract database functions are subject to SQL injection if untrusted data is used as a kind/lookupname value. Applications that constrain the lookup name and...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example $...

nuubi

Nuubi Tools Scanner, Recon. Details Options: -h/--help | Show help message and exit Arguments: -b/--banner | Banner grabing of target ip address -s/--subnet | Subnetlookup of target -c/--cms | Cms detect with headers -d/--dns | Dnslookup of target domain -e/--extract | Extract links from target...

CVE-2026-115909

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 1.3.0 until 9.0.0, ZipArchive::extract in src/read/mod.rs calls Vec::withcapacity for a symbolic link target using the attacker-controlled ZIP64 uncompressedsize before reading entry data. A small archive can...

CVE-2026-115907

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9.0.0, applications built with the legacy-zip feature can reserve output capacity from an attacker-controlled ZIP64 uncompressed size before validating the compressed stream. The ShrinkDecoder path ...

CVE-2026-115909

The zip library for Rust (versions 1.3.0 through 9.0.0 ) is vulnerable to a denial of service (DoS) during archive extraction. The root cause is located in src/read/mod.rs within the ZipArchive::extract function, where the library calls Vec::with_capacity for a symbolic link target using an attac...

EUVD-2026-109987

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 1.3.0 until 9.0.0, ZipArchive::extract in src/read/mod.rs calls Vec::withcapacity for a symbolic link target using the attacker-controlled ZIP64 uncompressedsize before reading entry data. A small archive can...

CVE-2026-115909 zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 1.3.0 until 9.0.0, ZipArchive::extract in src/read/mod.rs calls Vec::withcapacity for a symbolic link target using the attacker-controlled ZIP64 uncompressedsize before reading entry data. A small archive can...

CVE-2026-115908

The zip library for Rust (versions 7.2.0 through 9.0.0 ) is vulnerable to an arbitrary file write due to a regression in how symbolic links are validated. Specifically, ZipArchive::extract and ZipArchive::extract_unwrapped_root_dir use lexical prefix comparisons instead of resolving each intermed...

CVE-2026-115908 zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. (The defense against CVE-2025-29787 was broken in v7.2.0)

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 7.2.0 until 9.0.0, ZipArchive::extract and ZipArchive::extractunwrappedrootdir use safepreparepath in src/read/zipfile.rs and simplifiedcomponents in src/path.rs to validate symbolic link targets with a lexical...

CVE-2022-34265

CVE-2022-34265 Usage start docker-compose build docker-compose up -d stop docker-compose down PoC verification of Django vulnerability CVE-2022-34265 A vulnerability CVE-2022-34265 in Django was disclosed on July 5, 2022 US time. This article describes our discussion of this vulnerability and the...

Email-Extract

Email-Extract - Tool for extracting emails from enumerated websites! UPDATE : Converted to CLI tool, added format option to format lists other than dirb generated ones, Email-Extract is a simple tool I wrote to help extract emails from websites for OSINT research. Simply enumerate it with a commo...

CVE-2026-23907

Apache PDFBox Path Traversal Vulnerability Vulnerability Summary Description Apache PDFBox's ExtractEmbeddedFiles example code does not sanitize filenames when extracting embedded files from PDFs. An attacker can embed files with path traversal sequences ../ to write files to arbitrary filesystem...

teams_dump

PoC for dumping and decrypting cookies in the latest version of Microsoft Teams extract.py just dumps without arguments extract.exe is just extract.py packed into an exe teamsdump.py List values in the database python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key, value...

CVE-2022-34265

CVE-2022-34265 Vulnerability Summary This vulnerability is due to improper string processing when executing SQL for the arguments of the functions Trunc and Extract used for date data in Django. By specifying the request parameters as is in the kind argument of Trunc or the lookupname argument of...

Premium Packages – Sell Digital Products Securely - SQL Injection

Premium Packages – Sell Digital Products Securely WordPress plugin = 6.2.0 contains a SQL injection caused by insufficient escaping of 'code' parameter in CouponCodes::find method, letting unauthenticated attackers extract sensitive database information via crafted SQL queries. id: CVE-2026-12800...

WeGIA < 3.6.5 - Unauthenticated Authentication Bypass via extract()

WeGIA 3.6.5 contains an authentication bypass caused by unsafe use of extract on $REQUEST, letting unauthenticated attackers bypass authentication and access protected areas, exploit requires no authentication. id: CVE-2026-28411 info: name: WeGIA 3.6.5 - Unauthenticated Authentication Bypass via...