voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

POC-CVE-2023-32233

Use-After-Free in Netfilter nftables nell'elaborazione di richieste batch Demo Dettagli della vulnerabilità Il codice interessato proviene dal kernel Linux ufficiale da https://kernel.org/ e fa parte del componente Netfilter nftables net/netfilter/nftablesapi.c. Netfilter nftables consente di...

copy-fail-CVE-2026-31431-detection-probe

Linux Kernel LPE Probe Suite — Copy Fail & Dirty Frag Strumenti di rilevamento sicuri per due famiglie correlate di vulnerabilità di escalation dei privilegi locali del kernel Linux — Copy Fail CVE-2026-31431 e Dirty Frag CVE-2026-43284 / CVE-2026-43500 — entrambe che interessano tutte le...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

CVE-2021-42008

CVE-2021-42008 Ausnutzen einer 16 Jahre alten Sicherheitslücke im Linux-6pack-Treiber Referenz https://syst3mfailure.io/sixpack-slab-out-of-bounds...

drow

drow Description TL;DR drow is a command-line utility that is used to inject code and hook the entrypoint of ELF executables post-build. It takes unmodified ELF executables as input and exports a modified ELF contianing an embedded user-supplied payload that executes at runtime. Slightly more...

Sinister

Sinister root@kitploit: Questo piccolo script Python può fare un lavoro davvero eccezionale. Sinister è un generatore di Keylogger per Windows/Linux, che invia key-log e screenshot tramite email insieme ad altre preziose informazioni sul bersaglio, scritto in Python 3. Disclaimer :computer: Quest...

mimic

mimic mimic is a tool for covert execution on Linux x8664. What is "covert execution"? Covert execution is the art of hiding a process. In this case, mimic hides the process in plain sight. mimic can launch any program and make it look like any other program. Any user can use it. It does not...

mimic

mimic mimic è uno strumento per esecuzione nascosta su Linux x8664. Cos'è l'«esecuzione nascosta»? L'esecuzione nascosta è l'arte di nascondere un processo. In questo caso, mimic nasconde il processo in piena vista. mimic può avviare qualsiasi programma e farlo sembrare un altro programma...

CVE-2019-7489

Este repositorio nao tem um README...

bLuEkEeP-GUI

bLuEkEeP-GUI vulnerabilità CVE-2019-0708 testing ed exploit Non mi assumo la responsabilità dell'uso improprio del software, tutto è a scopo educativo... bleukee-GUI serve sia per testare macchine con la vulnerabilità CVE-2019-0708 come si può allo stesso modo hackerare, per questo lascio il codi...

pig

Pig Pig que pode ser entendido como Packet intruder generator é uma ferramenta Linux de criação de pacotes. Você pode usar Pig para testar seu IDS/IPS entre outras coisas. Pig traz um monte de assinaturas de ataque conhecidas prontas para uso e você pode expandir essa coleção com coisas mais...

syscall_exploit_CVE-2018-8897

Questo repository non contiene un README...

CVE-2021-26084-patch-

Patch CVE-2021-26084 Patch CVE-2021-26084 fornita da "Confluence Security Advisory - 2021-08-25" questa è solo una soluzione alternativa per server basati su Linux, attlasian ha fornito una nuova versione corretta, se non vuoi aggiornare puoi semplicemente applicare la patch! installazione scaric...

lmg

Linux Memory Grabber A script for dumping Linux memory and creating VolatilityTM profiles. Hal Pomeranz [email protected], 2020-02-01 THANKS! "If I have seen further it is by standing on the shoulders of giants." Issac Newton There are a lot of people who deserve thanks for making this simpl...

dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...

killcast

Manipulate Chromecast Devices in your Network Available in Inspiration - Thousands of Google Chromecast Devices Hijacked to Promote PewDiePie This tool is a Proof of Concept and is for Research Purposes Only, killcast shows how Chromecast devices can be easily manipulated and hijacked by anyone...

linux-4.19.72_CVE-2022-29581

Linux-Kernel Es gibt mehrere Leitfäden für Kernel-Entwickler und -Benutzer. Diese Leitfäden können in verschiedenen Formaten wie HTML und PDF ausgegeben werden. Bitte lesen Sie zuerst Documentation/admin-guide/README.rst. Um die Dokumentation zu erstellen, verwenden Sie make htmldocs oder make...

CVE-2015-8660

CVE 2015-8660 Forschung Beschreibung Dies ist eine Forschung, die ich zur OverlayFS-Sicherheitslücke CVE 2015-8660 für mein abschließendes Forschungsprojekt im Kurs Betriebssystemsicherheit durchgeführt habe. Ziel dieses Projekts war es, eine Linux-Kernel-Sicherheitslücke aus den Jahren 2012-2022...

CVE-2025-55182-Attack-Analysis

Análise do Ataque CVE-2025-55182: RCE em React Server Components Análise de ataque real em uma aplicação Next.js de produção 📋 Sumário Resumo Executivo Visão Geral da Vulnerabilidade Linha do Tempo do Ataque Análise Técnica Análise do Malware Indicadores de Comprometimento IOCs Mitigação e Respos...