vc5

VC5 This README is currently being updated to reflect recent changes - some information may not reflect the current codebase. This iteration of code is not yet battle ready - use a v0.2 release for production A horizontally scalable Direct Server Return DSR layer 4 load balancer L4LB for Linux...

How to hide vulnerability in WordPress

The developers of WordPress have uncovered a vulnerability within the software. A malicious individual could exploit this vulnerability using the identifier CVE-2026-87902, allowing them to load a local PHP file into the active theme files without authentication. Under certain conditions related ...

AV-Chaos-Monkey

AV Chaos Monkey Distributed chaos engineering platform for load testing video conferencing systems. Simulates 1500+ WebRTC participants with H.264/Opus streams and injects network chaos spikes to validate system resilience under degraded conditions Architecture 1. Media Processing Pipeline : FFmp...

CVE-2024-7591-PoC

CVE-2024-7591-PoC These PoC python scripts test the Kemp LoadMaster for remote code execution. THIS TOOL IS INTENDED FOR TESTING PURPOSES ONLY These scripts were based on Marius Walter's writeup on the specifics of this exploit. You can read their post at:...

CBM

Car Backdoor Maker The Car Backdoor Maker is a software for making attack templates and load them into The Bicho. Before starting, please read how to Get The Bicho hardware. Screnshot Install and Usage This project has its wiki where you will find the following useful documentation: Installation...

domain-protect

domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework 1. config your metasploit-framework directory root@kitploit: $ vim config/config.rb root@kitploit...

cilium

.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

Am-I-affected-by-Meltdown

我是否受到 Meltdown 影响？！Meltdown CVE-2017-5754 检查器 我是什么？ 概念验证 / 漏洞利用 / 检查系统是否受到变体 3：恶意数据缓存加载（CVE-2017-5754），又名 MELTDOWN 的影响。 其基本思路是让用户了解当前运行的系统是否已通过 KAISER 补丁集（https://lkml.org/lkml/2017/10/31/884）之类的方案正确修补。 目前仅适用于 Linux 它是如何工作的？ 它通过 /proc/kallsyms 查找系统调用表，并检查通过利用 MELTDOWN 找到的系统调用地址是否与 /proc/kallsyms...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

Wordpress-DOS

CVE-2018-6389 exploit for Wordpress sites A small DOS script targeting an unpatched vulnerability in wordpress sites. Uses /wp-admin/load-scripts.php to request additional scripts from hosting server. Includes large list of scripts as request payload This implementation is for testing purposes on...

CVE-2021-26855

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. The original repo was deleted shortly after additional features user enumeration etc. were added. Please post a pull request, if you have the latest version. CVE-2021-26855 ssrf...

podman: Arbitrary file write when importing OCI archive

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

sniffles

Sniffles--用于IDS和正则表达式评估的数据包捕获生成器 Sniffles 是一款用于创建数据包捕获的工具，可测试使用固定模式或正则表达式检测可疑行为的 IDS。Sniffles 的工作原理非常简单。它接受一组正则表达式或规则，随机选择其中一个正则表达式或规则，然后基于该规则或正则表达式生成内容。对于固定字符串，这意味着将字符串直接添加到数据中（可能带有偏移量或其他选项，如 Snort 规则）。对于正则表达式，过程稍显复杂。正则表达式被转换为 NFA，并从中选择一条随机路径（从开始到结束）。生成的数据将匹配该正则表达式。最后，Sniffles...

gobee

gobee Write your BPF programs in Go, not C. gobee transpiles a strict subset of Go into BPF C, generates typed Go bindings for the userspace side, and gates loads against the running kernel. The Go ecosystem has solid userspace tooling for BPF. The kernel side has always ended with "now write you...

podman: Arbitrary file write when importing OCI archive

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

BJ Lazy Load (Timthumb) <= 0.7.5 - Remote File Inclusion

The BJ Lazy Load plugin v0.7.5 for WordPress has a Remote File Inclusion vulnerability via TimThumb. id: CVE-2015-9415 info: name: BJ Lazy Load Timthumb = 0.7.5 - Remote File Inclusion author: s4e-io severity: high description: | The BJ Lazy Load plugin v0.7.5 for WordPress has a Remote File...

mariadb-13-rce-lab

Laboratorio de RCE MariaDB 13.0.1-rc Ejecución remota de código en la imagen Docker estándar sin modificar de MariaDB 13.0.1-rc como uid 999 mysql. Dos variantes de exploit: Variante| Archivo| Requisitos| Notas ---|---|---|--- SQL puro recomendado| exploitpuresql.py| una cuenta MariaDB de bajos...