Titanis

View the User Guide on the documentation site Introduction Titanis is a library of protocol implementations and command line utilities, written in C, for interacting with Windows environments. It uses .NET 8 and is cross-platform Windows and Linux. Some of the protocols implemented: SMB2 MS-SMB2...

powercat

powercat Netcat: The powershell version. Powershell Version 2 and Later Supported Installation powercat is a powershell function. First you need to load the function before you can execute it. You can put one of the below commands into your powershell profile so powercat is automatically loaded...

killcast

Manipulate Chromecast Devices in your Network Available in Inspiration - Thousands of Google Chromecast Devices Hijacked to Promote PewDiePie This tool is a Proof of Concept and is for Research Purposes Only, killcast shows how Chromecast devices can be easily manipulated and hijacked by anyone...

EUVD-2026-98342

A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly an...

CVE-2026-109108

A security vulnerability exists in Wavlink WL-WN530BE1-A (version 251117) involving OS command injection in the /cgi-bin/uploadVpn.cgi file. The root cause is the improper handling of the Type argument within the popen function, which allows a remote attacker to execute arbitrary commands. Public...

CVE-2026-109108 Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection

A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly an...

awesome-dfir-skills

🔥 awesome-dfir-skills A community-driven collection of DFIR / incident response skills : reusable prompts, workflows, and helper files that help practitioners move faster, stay consistent, and maybe—just maybe—get some sleep. 🚀 Quick Start 1. Pick a skill from skills/README.md 2. Copy/paste it in...

osint_toolkit

OSINT Toolkit Warning OSINT Toolkit is not production ready yet. This is an early prototype, that still needs some work to be done. A fullstack web application built for security analysts OSINT Toolkit is a self-hostable, on-demand analysis platform designed for security specialists. It...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

BLUESPAWN

BLUESPAWN Code Status Our Mission BLUESPAWN helps blue teams monitor systems in real-time against active attackers by detecting anomalous activity What is BLUESPAWN BLUESPAWN is an active defense and endpoint detection and response tool which means it can be used by defenders to quickly detect ,...

masscan

MASSCAN: Mass IP port scanner This is an Internet-scale port scanner. It can scan the entire Internet in under 5 minutes, transmitting 10 million packets per second, from a single machine. Its usage parameters, output is similar to nmap, the most famous port scanner. When in doubt, try one of tho...

CVE-2025-32432

CraftCMS CVE-2025-32432 Exploit By Chirag Artani Overview This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution RCE vulnerability affecting CraftCMS versions 4.x and 5.x. The vulnerability exists in the asset transform generation...

HashDump-BypassEDR

1 Project Overview By leveraging the extended capabilities of the system whitelisted program Reg.exe, we cleverly bypass the interception points of antivirus software, achieving the goal of bypassing EDR to dump hashes. According to actual testing, this method is effective against Windows-series...

BinAIVulHunter

BinAIVulHunter An IDA PRO plugin to help in finding vulnerabilites in binaries. Use IDA PRO HexRays decompiler with OpenAIChatGPT to find possible vulnerabilities in binaries Disclaimer, possible replies while trying to find binary vulnerabilites using an AI may lead to false positives, however i...

CVE-2026-46442-PoC

CVE-2026-46442 Proof of Concept Academic & Defensive Research Notice This repository contains a proof-of-concept PoC developed strictly for academic analysis, defensive research, and vulnerability validation purposes. The objective of this project is to help security researchers, defenders, and...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

PersistAssist

PersistAssist PersistAssist is a fully modular persistence framework written in C. All persistence techniques contain a cleanup method which will server to remove the persistence aside from the persistence code. This is a WIP so there are many empty classes, the main object of this project...

exifLooter

Exif Looter Blog Post » · Report Bug · Request Feature Table of Contents 1. Getting Started Installation 2. Usage Analyze specific image Analyze specific directory Pipe with other tools Remove metadata from Images Get Open Street Map URL 3. Reports 4. Roadmap 5. Contributing 6. License 7. Contact...

Vulnhalla

Vulnhalla Automated CodeQL Analysis with LLM Classification For a detailed overview of the research and motivation behind Vulnhalla, see the official CyberArk Threat Research blog post: Vulnhalla: Picking the True Vulnerabilities from the CodeQL Haystack Vulnhalla automates the complete security...

Deathnote

Deathnote Proof of Concept of CVE-2022-30190 A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling...