InfoG

InfoG v2.0 InfoG se pronuncia Info-yi es una herramienta de recopilación de información. Puedes encontrar direcciones IP, detalles de números de teléfono y mucho más. Cómo usar: Primero clona el repositorio: git clonehttps://github.com/Tech-Sec/InfoG.git Cambia tu directorio a la carpeta InfoG: c...

linux-fingerprint-r503

linux-fingerprint-r503 — fingerprint login for Linux using a Grow R503 + Arduino A from-parts USB fingerprint reader for Linux desktops. Total parts cost under $15. Drop-in replacement for upstream fprintd — PAM, KDE Settings, GNOME Settings, fprintd-verify, sudo with finger, screen-unlock with...

CVE-2017-8295

CVE-2017-8295 Wordpress has a password reset feature that contains a vulnerability which might in some cases allow attackers to get hold of the password reset link without previous authentication. Such attack could lead to an attacker gaining unauthorised access to a victim's WordPress account...

tp-link-decrypt

NOTE as of 5 October 2025 this project is now depreciated. Nate Robbins has kindly taken over and added switch decryption - https://github.com/robbins/tp-link-decrypt ====================================================================================================== If you found this tool...

CVE-2020-16898-EXP-POC

CVE-2020-16898 CVE-2020-16898 Windows TCP/IP Remote Code Execution Vulnerability EXP&POC Reproduction forforever: https://www.cnblogs.com/forforever/p/13846077.html PoC CVE-2020-16898Checker-poc Command: Run PowerShell/CMD as Administrator Powershell.exe -ExecutionPolicy UnRestricted -File...

CVE-2023-36723

CVE-2023-36723 This is PoC for arbitrary directory creation bug in Container Manager service. This PoC is not thoroughly tested so it may not even work most of the time it was enough for msrc to confirm vulnerability. In order to exploit this vulnerability a Windows Sandbox feature have to be...

CVE-2024-10914

CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...

CVE-2025-40634

CVE-2025-40634 The TP-Link Archer AX50 router is vulnerable to a stack-based buffer overflow on its firmware version 1.0.14 Build 20240108 rel.426554555, leading to Remote Code Execution both in the LAN and in the WAN side. This vulnerability has the same root cause as CVE-2020-10881, found by th...

CVE-2019-17525

CVE-2019-17525 D-LINK ROUTER "MODEL NO: DIR-615" with "FIRMWARE VERSION:20.10" & "HARDWARE VERSION:T1 A vulnerability found on login-in page of D-LINK ROUTER "DIR-615" with "FIRMWARE VERSION:20.10" & "HARDWARE VERSION:T1" which allows attackers to easily bypass CAPTCHA on login page by...

CVE-2019-10092

CVE-2019-10092: Limited Cross-Site Scripting via "Proxy Error" Page in Apache HTTP Server In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the error page to be malformed and instead point t...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox Prior to 7.0.16 is vulnerable to Local Privilege Escalation via Symbolic Link Following leading to Arbitrary File Delete and Arbitrary File Move. VirtualBox attempts to move log files as NT AUTHORITY\SYSTEM in C:\ProgramData\VirtualBox which all users can write to...

linux-kernel-exploitation

Linux 内核漏洞利用 一组与 Linux 内核安全和漏洞利用相关的链接集合。 每两个月更新一次。也欢迎提交 Pull Request。 在 X 上关注 @andreyknvl，在 Mastodon 上关注 @[email protected]，或在 Bluesky 上关注 @andreyknvl，以获取更新通知。 在 Telegram、X、Mastodon、Bluesky 或 Reddit 上订阅 @linkersec，获取精选内容。 培训 参见 xairy.io/trainings/。 目录 书籍 技术 漏洞利用 保护绕过 漏洞 信息泄露 本地提权 远程代码执行 KVM ...

OSIB

OWASP Open Security Information Base OSIB Project Page: https://owasp.org/www-project-open-security-information-base Software Repository: https://github.com/OWASP/OSIB Provided Tools: mkdocsmacroosib.py manually insallable python module osibmacro.py macro to copy that imports the python module...

CVE-2020-1066-EXP

Reference This vulnerability belongs to the Windows CardSpace service that does not properly handle symbolic link objects, leading to a local privilege escalation via arbitrary file replacement. Disclaimer The author's PoC is for research purposes only. If readers use this PoC for other activitie...

CVE-2026-46552

CVE-2026-46552 NocoDB Shared-Base Links Could Invite Real Base Members and Survive Share Revocation Intro I found this issue while reviewing NocoDB , with a simple security question in mind: Can a public shared-base link cross the boundary from temporary shared access into real authenticated base...

TP-Link-defaults

TP-Link-defaults Python script for trying default passwords for some TP-Link Hotspots Inspired by Usage usage: scan.py -h -p -t TIMEOUT Python script for trying default passwords for some TP-Link Hotspots optional arguments: -h, --help show this help message and exit -p, --print-all print all fou...

rtl8812au

RTL8812AU/21AU 与 RTL8814AU 无线驱动 仅适用于 Linux 和 Android 这些驱动已弃用。 请使用 mac80211 驱动，地址为 https://github.com/lwfinger/rtw88 重要说明！ 使用 "ip" 和 "iw" 代替 "ifconfig" 和 "iwconfig" 详细说明见下文，请阅读 README！ 注意：TP-Link AC600 及其他设备存在回归问题。目前的临时解决方案是从之前的提交中拉取代码。请参阅 此评论。 IPERF3 基准测试 设备 Alfa Networks AWUS036ACH 芯片组 88XXau...

pstf2

pstf^2 Passive Security Tools Fingerprinting Framework Have you ever wanted a simple, easy and stealth bypass for multiple classes of security products? pstf^2 pronounced pstf-square is an implementation of an HTTP server capable of passive browser fingerprinting - and it might just be the thing...

CVE-2019-7642

CVE-2019-7642 D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW A1-1.04, DIR-816L...

blogpost_cve-2018-19987-analysis

CVE-2018-19987 D-Link OS command injection analysis Hello there! In this short blog post I'll break down a quick analysis that I performed to better understand the details behind CVE-2018-19987. At the beginning I went after this CVE because I thought that there wasn't any public information or...