CVE-2021-23017

CVE-2021-23017 PoC Scanner NGINX DNS Overflow Vulnerability Check - CVE-2021-23017 PoC This Python script checks if an nginx server is potentially vulnerable to the critical CVE-2021-23017 vulnerability, which affects the integrated DNS resolver in nginx and can cause a buffer overflow. 🔍 What do...

zscan

Zscan a scan blasting tool set 📄中文文档 Result output format -A partial screenshot of the output Introduce🎉 ​ Zscan is an open source collection of Intranet port scanners, blasting tools, and other utilities. Based on host discovery and port scanning, you can blow up mysql, MSSQL, Redis, Mongo,...

spd_flasher

CVE-2022-38694 Hardened Exploit — RP2350 USB Host Auto Flasher 中文版 README Tutorial UDX710 Boot Chain Reverse Engineering and RP2350 Hardened Boot Tutorial Exploiting CVE-2022-38694 Unisoc BootROM vulnerability via Raspberry Pi RP2350 USB Host to automatically send SPL Loader on boot and start...

poc-cve-2024-0132

poc-cve-2024-0132 Reproduce Env: os: ubuntu 22.04 with nvidia driver docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Reproduce Step: run the poc container image Target: Access host files in the container Call docker daemon apis via the docker.sock in the container Reproduce use the prebuilt poc...

CVE-2024-21626

Usage: 1.git clone https://github.com/cdxiaodong/CVE-2024-21626 2.docker-compose up Verification: If you can obtain the host's /etc/passwd, the vulnerability exists. Environment: runc: =v1.0.0-rc93,=1.1.11 Attack details & principle: In affected versions of runc, during initialization, some...

gobuster

Gobuster 💻 Introduction A fast and flexible brute-forcing tool written in Go Gobuster is a high-performance directory/file, DNS and virtual host brute-forcing tool written in Go. It's designed to be fast, reliable, and easy to use for security professionals and penetration testers. ✨ Features 🚀...

CVE-2024-1642470

Windows USB Generic Parent Driver Remote Code Execution Vulnerability CVE-2024-1642470 Overview This repository contains a proof-of-concept PoC exploit code and a detection script for the Windows USB Generic Parent Driver Remote Code Execution Vulnerability, identified as CVE-2024-1642470...

SourceWolf

SourceWolf ​ Tested environments: Windows, MAC, linux, and windows subsystem for linux WSL Sponsors Support this project by becoming a sponsor. Checkout these awesome sponsors: Oxylabs provides premium proxies with 100M+ IPs across 195 countries and ready-to-use Scraper APIs. You can use this...

CVE-2026-59346-POC

CVE-2026-59346 — VMXNET3 TSO Integer Overflow VMware Workstation / Fusion Proof-of-concept for a 32-bit integer overflow in the VMXNET3 virtual NIC's TSO segmentation path in vmware-vmx, reachable from a guest VM. This issue is patched. The PoC is published for research and defensive purposes onl...

KilledProcessCanary

Windows Killed Process Canary A Windows Service to detect if it has been shutdown and hibernate if multiple instances are. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

logitech-ipc-protocol

logitech-ipc-protocol Reverse-engineered documentation of the Logi Options+ agent IPC protocol. Enables programmatic control of Logitech multi-host devices host switching, device queries without raw HID access, on both macOS and Windows. The protocol has not been publicly documented before this...

CVE-2019-0708-generate-hosts

CVE-2019-0708-generate-hosts This program uses nmap to scan the CIDR addresses listed in the 3389cidrs file one per line and generates a 3389hosts file containing IP addresses of machines that are likely Windows machines with RDP 3389 enabled. This can significantly reduce the number of IPs that...

CVE-2022-3168-adb-unexpected-reverse-forwards

The reverse tunnel feature in Android Debug Bridge adb was vulnerable as it allowed malicious adb daemons to open connections to arbitrary host/ports and unix domain sockets on the host. Attacker window where the rogue daemon is running: $ ./adbroguedaemon.py Victim window a GCE VM in this exampl...

vbox_cve_2017_10235

CVE-2017-10235: VirtualBox E1000 device buffer overflow Introduction The following document details a bug found in VirtualBox v5.1.22 now fixed in v5.1.24, in the guest device emulation component DevE1000 Intel 82540EM Ethernet Controller Emulation, in the function e1kFallbackAddToFrame, which...

CVE-2024-34328

CVE-2024-34328 Open Redirection via Host Header 📝 Overview Vulnerability Title : Open Redirection via Host Header Product : Sielox AnyWare Version Affected : 2.1.2 CVE ID : CVE-2024-34328 Severity : Medium Attack Vector : Remote Impact : Open Redirection / Phishing 🧨 Description An attacker can...

CVE-2025-34159

CVE-2025-34159: Docker Compose Injection in Coolify Vulnerability Overview Field| Value ---|--- CVE ID| CVE-2025-34159 Affects| Coolify ≤ v4.0.0-beta.420.6 Fixed in| v4.0.0-beta.420.7 Severity| Critical CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE| CWE-78 OS Comma...

mal_unpack

malunpack Dynamic unpacker based on PE-sieve 📖 Read more . It deploys a packed malware, waits for it to unpack the payload, dumps the payload, and kills the original process. !CAUTION This unpacker deploys the original malware. Use it only on a VirtualMachine. ⚙ Usage Basic usage: malunpack.exe...

SeekYou

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. SeekYou Unified host intelligence across 15 sources — Query any IP, domain, or ASN f...

TPMGenie

TPM Genie TPM Genie is designed to aid in vulnerability research of Trusted Platform Modules. As a serial bus interposer, TPM Genie is capable of intercepting and modifying all traffic that is sent across the I2C channel between the host machine and a discrete TPM chip. Outside of research, the...