CVE-2020-25705

CVE-2020-25705 PoC for CVE-2020-25705 POC-2020-25705 This is a work in progress. I'll finish it on Monday :p but there is likely enough here already for you to complete it...

hosting

General Information: This is a setup for a Tor based shared hosting server. It is provided as is and before putting it into production you should make changes according to your needs. This is a work in progress and you should carefully check the commit history for changes before updating. For a...

XeytanWin32-RAT

WARNING This is a buggy RAT, not completed, not stable. It still a "work in progress" application. Introduction Project created to kill some of my free time, It is not actively maintained. There are a lot of things to improve/fix, and it will take time to reach a stability on this project. Featur...

sshhipot

La versión 2 está en desarrollo. Cambie a la rama v2, compile y ejecute con -h. SSHHiPot Honeypot SSH de alta interacción vale, en realidad es un proxy SSH de registro. Todavía más o menos un trabajo en progreso. Siéntase libre de go install este repositorio si quiere probarlo. Ejecútelo con -h...

MalvexC2

!WARNING Work in Progress: This is a WIP side project that is incomplete and insecure! It is only meant to be used as a playground for myself !CAUTION Use at your own risk: Code in this repository might be harmful. Only run and use things you understand! Malvex C2 Welcome to the repository of the...

dumpulator

dumpulator Note: This is a work-in-progress prototype, please treat it as such. Pull requests are welcome! You can get your feet wet withgood first issues An easy-to-use library for emulating code in minidump files. Here are some links to posts/videos using dumpulator: Introduction video with...

CVE-2017-13089

CVE-2017-13089 wget v1.19.1 for exploit dev. NOTE This is not a working exploit - under development. Usage Build the container docker build -t cve201713089 . OR ... docker pull robertcolejensen/cve201713089 Play around in the container, src will be mounted at /opt/CVE-2017-13089/src ./run.sh...

CVE-2022-32981

CVE-2022-32981 poc for CVE-2022-32981 under work needs testing + adjusting the offset to the correct one for exploit function...

CVE-2019-0709

CVE-2019-0708 Exploit In Progress It hits the Vulnerable Function...

centipede

Centipede - un motor de fuzzing distribuido. Trabajo en curso. Por qué Centipede ¿Por qué no? Actualmente intentamos fuzzear objetivos muy grandes y muy lentos para los que libFuzzer, AFL y similares no escalan necesariamente bien. Para uno de nuestros ejemplos motivadores, ver SiliFuzz. Mientras...

Purpleteam

Purpleteam work in progress Scripts que hice para generar eventos para detecciones del SOC, mapeados a técnicas de MITRE ATT&CK...

how_to_become_a_malware_analyst

How to Study to Become a Malware Analyst work-in-progress This is @PINKSAWTOOTH's personal opinion and may not necessarily be the best method for you. I hope you can refer to it as one example of a study method. Before reading this, the malware analyst I respect, @hasherezade, has written a blog...

CVE-2026-24061

Exploit CVE-2026-24061 - Versión funcional v0.1 Uso Ejecute el script con un host objetivo: python3 exploit.py 192.168.1.1 -p 2323 --debug Argumentos argumentos posicionales: target IP o nombre de host del objetivo opciones: -h, --help muestra este mensaje de ayuda y sale -p, --port PORT Puerto p...

Automated-blind-xss-search-for-Burp-Suite

Femida-xss WIP Un plugin automatizado de búsqueda de blind-xss para Burp Suite. Instalación Git clone https://github.com/ianxtianxt/Automated-blind-xss-search-for-Burp-Suite.git Burp - Extender - Add - busca y selecciona blind-xss.py Cómo usar Configuración En primer lugar, debes configurar tu UR...

CVE-2023-0386

CVE-2023-0386 WIP...

certipy-merged

certipy-merged Este repositorio contiene un fork de ly4k/Certipy con muchos pull requests abiertos fusionados, hechos compatibles entre sí y probados hasta cierto punto. Como esto es un trabajo en curso , algunas funciones pueden o no funcionar como se espera y las cosas podrían romperse...

CVE-2026-19219: Insufficient Verification of Data Authenticity

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

CVE-2026-18672: Improper Limitation of a Pathname to a Restricted Directory

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an attacker to influence which file is returned by the control's image cache, potentially exposing file contents outside the intended image directories...

CVE-2026-16139: Improper Limitation of a Pathname to a Restricted Directory

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

CVE-2026-18050

The Events Manager WordPress plugin before 7.4 does not perform any authorization check on a REST route that serves temporarily stored file uploads, allowing unauthenticated users to retrieve another user's in-progress upload when its temporary identifier is known. The identifier is high-entropy,...