CVE-2024-23334-PoC

Path Traversal PoC CVE-2024-23334 This script is a proof of concept PoC for vulnerability CVE-2024-23334 related to a Path Traversal. The script attempts to access files outside the allowed root directory by manipulating paths in HTTP requests. Requirements To run this script, you will need to ha...

CVE-2026-58635-PoC

CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation Proof of concept for CVE-2026-58635 , a command-injection vulnerability in Windows Narrator Braille. A local authenticated user can abuse a writable BrlAPI parameter to make the privileged BRLTTY service execute an arbitrary...

gerobug

Gerobug: The First Open Source Bug Bounty Platform. Gerobug The first open source self-managed bug bounty platform. Are you a company, planning to have your own bug bounty program, with minimum budget? WE GOT YOU! We are aware that some organizations have had difficulty establishing their own bug...

webcvescanner

shitsniffer Gather a list of Citrix appliances in a country / state pair, and check if they're vulnerable to CVE-2019-19781. Results are output as JSON which can be wrangled quite nicely into a meaningful PowerBI report. It does this by querying Shodan for all results in a particular country...

whatfiles

whatfiles Whatfiles is a Linux utility that logs what files another program reads/writes/creates/deletes on your system. It traces any new processes and threads that are created by the targeted process as well. Rationale: I've long been frustrated at the lack of a simple utility to see which file...

whatfiles

whatfiles Whatfiles एक Linux उपयोगिता है जो आपके सिस्टम पर किसी अन्य प्रोग्राम द्वारा पढ़ी/लिखी/बनाई/हटाई गई फ़ाइलों को लॉग करती है। यह लक्षित प्रक्रिया द्वारा बनाई गई किसी भी नई प्रक्रिया और थ्रेड को भी ट्रेस करती है। तर्क: मैं लंबे समय से एक सरल उपयोगिता की कमी से निराश हूँ जो यह देख सके कि कोई...

deREferencing

deREferencing deReferencing is an IDA Pro plugin that implements new registers and stack views. Adds dereferenced pointers, colors and other useful information, similar to some GDB plugins e.g: PEDA, GEF, pwndbg, etc. Supports following architectures: x86, x86-64, ARM, ARM64, MIPS32 and MIPS64...

Venom

Venom - A Multi-hop Proxy for Penetration Testers 简体中文 ｜ English Venom is a multi-hop proxy tool developed for penetration testers using Go. You can use venom to easily proxy network traffic to a multi-layer intranet, and easily manage intranet nodes. This tool is limited to security research and...

pixiewps

Overview Pixiewps is a tool written in C used to bruteforce offline the WPS PIN exploiting the low or non-existing entropy of some software implementations, the so-called "pixie-dust attack" discovered by Dominique Bongard in summer 2014. It is meant for educational purposes only. As opposed to t...

SigFlip

यह क्या है? SigFlip एक उपकरण है जो प्रमाणित authenticode हस्ताक्षरित PE फ़ाइलों exe, dll, sys ..etc में इस तरह से पैच करने के लिए है कि यह मौजूदा प्रमाणीकरण हस्ताक्षर को प्रभावित या तोड़ता नहीं है, दूसरे शब्दों में आप फ़ाइल हस्ताक्षर, अखंडता जांच या PE फ़ाइल कार्यक्षमता को तोड़े बिना PE फ़ाइल...

CVE-2024-6387_Check

CVE-2024-6387Check 📜 Description CVE-2024-6387Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH, specifically targeting the recently discovered regreSSHion vulnerability CVE-2024-6387. This script facilitates rapid scanning of multiple IP...

CVE-2024-2387

CVE-2024-2387 Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms = 1.82.0 - SQL Injection to Reflected Cross-Site Scripting via integrationid Description The Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets an...

winfsp

WinFsp · Windows File System Proxy WinFsp enables developers to write their own file systems i.e. "Windows drives" as user mode programs and without any knowledge of Windows kernel programming. It is similar to FUSE Filesystem in Userspace for Linux and other UNIX-like computers. winfsp.dev...

firmware

🦈 Bruce Bruce is a versatile ESP32 firmware packed with offensive-security tools, built to make Red Team operations fast and portable. It also supports M5Stack, LILYGO , RockBase IoT and Elecrow products, and works great with the Cardputer, Sticks, M5Cores, T-Decks and T-Embeds. ⚡ Get Our Officia...

Security Bulletin: Multiple Vulnerabilities in IBM Event Streams

Summary Multiple vulnerabilities were addressed in IBM Event Streams version 13.0.2 Vulnerability Details CVEID:CVE-2026-44249 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15.Final, ...

logira

logira OS-level runtime auditing for unpredictable automation. logira is an observe-only Linux CLI that records runtime exec, file, and net events via eBPF. It helps you see what actually happened during AI agent runs and other forms of automation, with per-run local storage for auditing, post-ru...

CVE-2024-6387

CVE-2024-6387 यह स्क्रिप्ट, R4Tw1z द्वारा बनाई गई है, IP पतों को स्कैन करने के लिए डिज़ाइन की गई है ताकि यह जांचा जा सके कि वे OpenSSH का संभावित रूप से असुरक्षित संस्करण चला रहे हैं। यह स्क्रिप्ट OpenSSH भेद्यता स्कैनर का एक तेज़ और सरल संस्करण है। यह उपकरण स्कैनिंग प्रदर्शन को अनुकूलित करने और ...

msploitego

msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...

Active-Directory-Exploitation-Cheat-Sheet

Active Directory Exploitation Cheat Sheet This cheat sheet contains common enumeration and attack methods for Windows Active Directory. ℹ️ This repository was created by Nikos Katsiopis and Nikos Vourdas. This cheat sheet is inspired by the PayloadAllTheThings repo. Summary Active Directory...

CVE-2022-35899

CVE-2022-35899 अनक्वॉटेड सर्विस पथ Asus GameSdk एक्सप्लॉइट शीर्षक: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' अनक्वॉटेड सर्विस पथ विशेषाधिकार वृद्धि दिनांक: 07/14/2022 एक्सप्लॉइट लेखक: Angelo Pio Amirante संस्करण: 1.0.0.4 परीक्षण किया गया: Windows 10 पैच किया गया संस्करण: 1.0.5.0 अनक्वॉटेड सर्विस पथ...