kali-docker

Official Kali Linux Docker This Kali Linux Docker image provides a minimal base install of the latest version of the Kali Linux Rolling Distribution. There are no tools added to this image, so you will need to install them yourself. For details about Kali Linux metapackages, check...

CVE-2023-51518

CVE-2023-51518: Preauthenticated Java Deserialization via JMX in Apache James Apache James distribution prior to release 3.7.5 and 3.8.1 allow privilege escalation via JMX pre-authentication deserialization. Given a deserialization gadget, this could be leveraged as part of an exploit chain that...

AdGuardHome

Privacy protection center for you and your devices Free and open source, powerful network-wide ads & trackers blocking DNS server. AdGuard.com | Wiki | Reddit | Twitter | Telegram AdGuard Home is a network-wide software for blocking ads and tracking. After you set it up, it'll cover ALL your home...

CVE-2010-3490

CVE-2010-3490 FreePBX exploit = 2.8.0...

SILENTTRINITY

SILENTTRINITY SILENTTRINITY is modern, asynchronous, multiplayer & multiserver C2/post-exploitation framework powered by Python 3 and .NETs DLR. It's the culmination of an extensive amount of research into using embedded third-party .NET scripting languages to dynamically call .NET API's, a...

CVE-2026-39023

CVE-2026-39023 RCE poc - RESPONSIVE filemanager v.9.14.0 last version - not patched Github project : https://github.com/trippo/ResponsiveFilemanager Requirements: Nothing is required, this exploit is unauthenticated. The Responsive Filemanager application is a web-based file management tool used ...

CVE-2026-39387

CVE-2026-39387 — BoidCMS Authenticated File Upload to RCE via Template Injection Description BoidCMS -l -p Arguments Flag| Description| Example ---|---|--- -u, --url| Base URL of the target BoidCMS site| http://target.com -l, --user| Admin username| admin -p, --passwd| Admin password| password123...

osticket-stored-xss-security-assessment

CVE-2026-36214 - osTicket Stored XSS via Bootstrap Tooltip Consultant-Style Cybersecurity Report Professional vulnerability assessment report for osTicket stored cross-site scripting, including business impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details ---|--- Report...

CVE-2025-27581

CVE-2025-27581 Exploit scripts for CVE-2025-27581 BasicExploit.sh This just points the exploit to a file of your choice, it should set your target file to 0666 permissions but it can fail on certain files depending on applocker policies or selinux. CreateFakeRoot.sh This points the exploit to...

PXEThief

PXEThief PXEThief is a set of tooling that implements attack paths discussed at the DEF CON 30 talk Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925 against the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager or ConfigMgr,...

gef

GEF pronounced ʤɛf - "Jeff" is a set of commands for x86/64, ARM, MIPS, PowerPC and SPARC to assist exploit developers and reverse-engineers when using old school GDB. It provides additional features to GDB using the Python API to assist during the process of dynamic analysis and exploit...

CVE-2022-2274

OpenSSL-src Heap Memory Corruption with RSA Private Key Operation : CVE-2022-2274 Summary OpenSSL-src-rust is a source code and logic to build OpenSSL from source written in rust and packaged as a crate. There are currently two maintained branches, matching the two maintained OpenSSL versions whi...

eyeballer

Eyeballer Give those screenshots of yours a quick eyeballing. Eyeballer is meant for large-scope network penetration tests where you need to find "interesting" targets from a huge set of web-based hosts. Go ahead and use your favorite screenshotting tool like normal EyeWitness or GoWitness and th...

CVE-2025-7404-CalibreWeb-0.6.24-BlindCommandInjection

CVE-2025-7404-CalibreWeb-0.6.24-BlindCommandInjection CVE-2025-7404 exploit...

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

Cybersecurity researchers have released a proof-of-concept PoC exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 CVSS score: 9.4, is a critical path traversal flaw that...

check-copyfail-cve-2026-31431

check-copyfail check-copyfail.sh is a read-only Bash script that assesses host exposure to CVE-2026-31431 "Copy Fail". Author: Silent4Labs It inspects the local system for: kernel version and known upstream patch state affected distribution baselines algifaead module status active AFALG socket...

test_struts2_vulnerability_CVE-2017-5638

teststruts2vulnerabilityCVE-2017-5638inMACOSX test struts2 vulnerability CVE-2017-5638 in Mac OS X download test web app and run it in tomcat install tomcat brew install tomcat confirm where the tomcat installed ls -lF which catalina confirm tomcat home dir ls -lF...

Introspy-iOS

Introspy-iOS Blackbox tool to help understand what an iOS application is doing at runtime and assist in the identification of potential security issues. See http://isecpartners.github.io/Introspy-iOS/ for a quick introduction. Description This is the repository for the Introspy-iOS tracer. The...

Redpoint

Redpoint Digital Bond's ICS Enumeration Tools Redpoint is a Digital Bond research project to enumerate ICS applications and devices. We use our Redpoint tools in assessments to discover ICS devices and pull information that would be helpful in secondary testing. A portion of those tools will be...

ds3-nrssr-rce

Update: Dark Souls III 1.15.1 A new game update, 1.15.1, has been released for Dark Souls III on 2022/08/25, along with the restoration of online services. This update fixed both CVE-2022-24125 and CVE-2022-24126 , along with a wide variety of other potential security vulnerabilities present in t...