Harmonic

Harmonic Suite Beginning of a linux toolset for managing and interfacing with reverse shells code is still currently in a quick and dirty state, with little exception handling. With a strong inspiration in UNIX philosophy, the basic idea is to have a daemon for handling arbitrary end points connd...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...

CVE-2024-4879-ServiceNow

CVE-2024-4879-ServiceNow ServiceNow is a platform for business transformation which helps companies manage digital workflows for enterprise operations. CVE-2024-4879 could allow an unauthenticated user to remotely execute code within the Now Platform. This vulnerability exploits three issues by...

CVE-2025-40271

🔴 CVE-2025-40271: Critical Use-After-Free Vulnerability in the Linux Kernel 🛡️ Vulnerability Details CVE-2025-40271 is a critical Use-After-Free UAF vulnerability affecting the /proc filesystem of the Linux kernel. The flaw resides in the procreaddirde function, responsible for listing the content...

Project-CVE-2026-75604

Next.js Windows Cache Traversal Security Research Defensive security research and authorized validation only. This repository concerns CVE-2026-75604 , a critical vulnerability that may permit unauthenticated remote code execution on certain Windows-hosted Next.js deployments. Credits Coded by:...

CVE-2024-4879-ServiceNow

CVE-2024-4879-ServiceNow ServiceNow is a platform for business transformation which helps companies manage digital workflows for enterprise operations. CVE-2024-4879 could allow an unauthenticated user to remotely execute code within the Now Platform. This vulnerability exploits three issues by...

openwrt

OpenWrt Project is a Linux operating system targeting embedded devices. Instead of trying to create a single, static firmware, OpenWrt provides a fully writable filesystem with package management. This frees you from the application selection and configuration provided by the vendor and allows yo...

Vulnerable-Docker-Engine

CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...

fsmon

fsmon Low level filesystem monitor utility for Linux, Android, iOS and macOS. Author : pancake @ nowsecure License : MIT Designed for System administrators and incident responders Security researchers and forensic analysts Developers debugging I/O-heavy applications Reverse engineers interested i...

cve-2024-32002-poc-rce

CVE-2024-32002 RCE POC A POC for CVE-2024-32002 demonstrating Remote Code Execution RCE. See cve-2024-32002-poc-rce for the related submodule repository. What this repo contains A symlink with an arbitraty name that links to the .git directory. A .gitmodules file that defines the malicious...

sisu

sisu ⚡ Your AWS, as a filesystem. This: grep -l "AdministratorAccess" iam/users//policies.json Instead of this: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query "AttachedPolicies.PolicyArn" --output text' | \ gre...

onecli

The agent harness built for teams. A pro assistant for companies. Give every employee a secured, sandboxed personal agent. Website · Docs · Discord Quick Start Cloud-hosted: onecli.sh Self-hosted git clone https://github.com/onecli/onecli.git && cd onecli pnpm install pnpm run setup Open...

azurelinux

Azure Linux 4 An open-source Linux distribution built and optimized forAzure, with sources derived from Fedora Linux. Azure Linux provides a secured, reliable operating system for virtual machines, containers, and bare-metal platforms. Azure Linux is built on a robust open-source foundation from...

CVE-2025-6019_Exploit

CVE-2025-6019Exploit Step 1: Run 1.sh on a Linux device to build xfs.image Step 2: Transfer xfs.image to the target device and execute 2.sh. Success is indicated as shown below: neko@aosc-neko205 tmp $ bash 2.sh 当前用户: neko uid=1000neko gid=1001neko...

CVE-2026-64600

🚨 CVE-2026-64600 — RefluxFS Linux Kernel Local Privilege Escalation LPE 📖 Overview CVE-2026-64600 "RefluxFS" is a Linux kernel vulnerability affecting the RefluxFS filesystem implementation. The flaw stems from improper validation of filesystem metadata, potentially leading to kernel memory...

tird

🏠 Home 📑 Specification 📜 man page 📄 Input Options 📖 Tutorial ❓ FAQ 📥 Install tird & tirdFS tird /tɪrd/ an acronym for "this is random data" is a file encryption tool that minimizes metadata and hides encrypted data. With tird, you can: 1. Create files filled with random data to use as containers ...

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ !WARNING Gitleaks is feature complete. I'm not merging new features into Gitleaks. Future releases will be security patches only. I'm shifting my focus to Betterleaks Gitleaks is a tool for detecting secrets like passwords, API keys, and tokens in g...

CVE-2025-9074

CVE-2025-9074 – Full Docker Escape on Windows & macOS Docker Desktop 📌 Description Docker Desktop exposes the internal Docker Engine API at http://192.168.65.7:2375 to any running container — with no authentication and no access control. Because the engine itself can mount the host filesystem, a...

CVE-NetScalerFileSystemCheck

CVE-NetScalerFileSystemCheck This script checks the Citrix Netscaler if it has been compromised by CVE-2019-19781 attacks and collects all file system information. The following files and logs will be checked Latest version 1.13: Template folders for XML files Apache Access logfiles Apache Error...

CVE-2024-32002

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...