NextRce

NextRce - Next.js RSC Exploit Tool CVE-2025-55182 Advanced Vulnerability Scanner & Exploiter for Next.js App Router Developed byMitsec 🔥 New Feature: WAF Bypass Mode UTF-16LE Standard payloads containing keywords like childprocess or execSync are often blocked by Web Application Firewalls WAFs...

randy

Randy What This is a pre-authenticated RCE exploit for Inductive Automation Ignition that impacts versions = 8.1.16. We failed to exploit the bugs at Pwn2Own Miami 2022 because we had a sloppy exploit and no debug environment, but since then we have found the time and energy to improve it! Author...

CVE-2021-22555-PipeVersion

CVE-2021-22555 pipe version Using pipe-primitive to exploit CVE-2021-22555, so no kaslr leak nor smap smep ktpi bypass is needed : Q: What is pipe-primitive? A: https://github.com/veritas501/pipe-primitive Tested on both Linux 4.15 and Linux 5.8...

awesome-websocket-security

Awesome WebSockets Security A collection of CVEs, research, and reference materials related to WebSocket security Contents WebSocket Library Vulnerabilities Conference Talks Common WebSocket Weaknesses WebSocket Security Tools Bug Bounty Writeups Useful blog posts WebSocket Library Vulnerabilitie...

frida-wshook

frida-wshook frida-wshook is an analysis and instrumentation tool which uses frida.re to hook common functions often used by malicious script files which are run using WScript/CScript. The tool intercepts Windows API functions and doesn't implement function stubs or proxies within the targeted...

RIPPL

RIPPL Manipulating PPL protected processes without using a driver This tool implements a userland exploit to manipulate Windows PPL protected processes. The technique was initially discussed by James Forshaw a.k.a. @tiraniddo and Clément Labro a.k.a. @itm4n in the following blogposts. Blog post...

payloads

payloads Git All the Payloads! A collection of web attack payloads. Pull requests are welcome! Usage run ./get.sh to download external payloads and unzip any payload files that are compressed. Payload Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...

universal-flutter-ssl-pinning

universal-flutter-ssl-pinning Reverse-engineers libflutter.so with PyGhidra to locate the SSL certificate verification function, then emits ready-to-use bypass scripts for both Frida and Renef. How it works 1. PyGhidra loads libflutter.so headlessly and scans all defined strings for sslclient 2...

GetBlocked

GetBlocked! Cleaner pages. Fewer trackers. Local-only. GetBlocked! is a lightweight, local-only Chrome extension that helps reduce common third-party website tracking by blocking known tracker requests, cleaning tracking links, and explaining tracking attempts. An optional experimental Decoy Mode...

skyhook

Skyhook Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It comes with a pre-packaged web client that uses a blend of React, vanilla JS, and web assembly to manage file transfers. Key Links Download here See the user documentation to...

bypass-url-parser

Bypass URL Parser A tool that tests MANY URL bypasses to reach a 4xx-protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most Python HTTP clients perform URL/path/parameter encoding and decoding, and I hate this. If I submit raw chars, I want raw chars to ...

Furtex

Furtex Post-exploitation and evasion research toolkit for Linux, built around iouring and eBPF. No liburing, no frameworks, raw syscalls throughout. More tools soon. PRs are welcome. 🇧🇷 Join in Rootkit Researchers https://discord.gg/66N5ZQppU7 For authorized research and red team engagements only...

DumpBrowserSecrets

DumpBrowserSecrets Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi. Quick Links Maldev...

quill-router

TrustedRouter End-to-end encrypted LLMs. One API. Privacy with proof. Stop worrying about who can see your prompts. Tell your coding agent to move your project over, pick how private you want to be, pick a model, drop in a key — done. Same API, 30+ models, one key. The gateway runs in hardware...

CVE-2025-29927

Next.js CVE-2025-29927 This repository contains a proof of concept for CVE-2025-29927 vulnerability in Next.js, where the internal header x-middleware-subrequest can be exploited to bypass middleware checks such as authentication. Affected Versions Next.js 15.x 🧪 This project was tested with...

CocoaDebug

| Introduction Installation Usage Parameters ---|--- Version| Platform| Languages| Screenshot Introduction As similar with Charles in your App. Shake to hide or show the black bubble. Support iPhone device and simulator Share network details via email or copy to clipboard when y...

WhatsMyName

WhatsMyName WhatsMyName WMN is a community-maintained dataset that lets you find out if a username exists across hundreds of websites. If you're investigating a person of interest, verifying an online identity, or simply curious about your own digital footprint, this project powers the tools that...

Blackash-CVE-2025-53770

🧠 CVE-2025-53770 : Critical SharePoint RCE Vulnerability Exploited via ViewState Forgery 📌 Vulnerability Overview Type : Remote Code Execution RCE CVSS Score : 9.8 Critical Component : Microsoft SharePoint Server on-prem Root Cause : Insecure deserialization of ViewState data using stolen ASP.NET...

Apache-OFBiz-Authentication-Bypass

Apache OFBiz Authentication Bypass Vulnerability CVE-2023-51467 and CVE-2023-49070 This exploit script and PoC are written for an in-depth CVE analysis on vsociety. The Apache OFBiz Enterprise Resource Planning ERP system, a versatile Java-based web framework widely utilized across industries, is...

breakcyserver

breakcyserver Full post in: https://waawaa.github.io/ 1. Kill EDR services by killing all the opened handles of the EDR process. 2. Bypass PPL by abussing some Process Explorer drivers functionalities. 3. Bypass ObRegisterCallbacks implementation by abussing Process Explorer driver...