27594 matches found
XPRTestSuite
XProtect Remediator Test Suite A collection of scripts and documents to help future XProtect Remediator XPR research, presented at Black Hat USA 2025 About This Repository This repository contains: The scripts to create harmless minimal files and processes that reproduce the remediation of each...
ios-malicious-bithunter
iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...
trappsec
trappsec trappsec is an open-source framework that helps developers detect attackers who probe API business logic. By embedding realistic decoy routes and honey fields that are difficult to distinguish from real API constructs, attackers are nudged to authenticate β converting reconnaissance into...
ServiceCheater
ServiceCheater Poc of CVE-2020-0113 & CVE-2020-0108 Analysis of Android Foreground Service Privilege Escalation Vulnerability Vulnerability Background In the AOSP August 2020 patch, a vulnerability in the framework layer AMS was disclosed, numbered CVE-2020-0108, rated high, and another numbered...
mapchar
Generate wordlists using pattern logic and expressions Installation β’ Documentation β’ Usage β’ Contributing !NOTE This project was renamed fromfuse / fuse-generator to mapchar starting from version 7.0.2. The PyPI package, CLI command, and Python package name have all changed accordingly. If you...
physmem
physmem physmem is a physical memory inspection tool and local privilege escalation targeting macOS up through 10.12.1. It exploits either CVE-2016-1825 or CVE-2016-7617 depending on the deployment target. These two vulnerabilities are nearly identical, and exploitation can be done exactly the...
webshell-analyzer
Web Shell Analyzer Web shell analyzer is a cross platform stand-alone binary built solely for the purpose of identifying, decoding, and tagging files that are suspected to be web shells. The web shell analyzer is the bigger brother to the web shell scanner project...
PoC-in-GitHub
PoC in GitHub 2026 CVE-2026-0009 2026-06-01 In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-32413
macOS LPE CVE-2023-32413 / ZDI-23-845 / Pwn2Own Vancouver 2023 exploit This is the exploit code that has been played at Pwn2Own Vancouver 2023 https://youtu.be/c0cS4R0ja-I?t=180. This code exploits CVE-2023-32413 to gain root rights on any vulnerable macOS. The vulnerability is a logic TOCTOU tha...
Scrapegraph-ai
π Looking for an even faster and simpler way to scrape at scale only 5 lines of code? Check out our enhanced version at ScrapeGraphAI.com! π π·οΈ ScrapeGraphAI: You Only Scrape Once English | δΈζ | ζ₯ζ¬θͺ | νκ΅μ΄ | Π ΡΡΡΠΊΠΈΠΉ | TΓΌrkΓ§e | Deutsch | EspaΓ±ol | franΓ§ais | PortuguΓͺs | Italiano ScrapeGraphAI is a...
ThisSeemsWrong
Fix for this issue appeared as CVE-2024-49746: bulletin, patch "This seems wrong" Above title is the comment from Parcel::continueWrite method, which is actually responsible for resizing Parcel objects, either when explicitly request by user for example through setDataSize or when calling one of...
Adversarial-Detection-Engineering-Framework
Adversarial Detection Engineering ADE Framework Get ahead of False Negatives by understanding how detection logic fails before threat actors abuse it. Check out the website: https://adeframework.org/ What Is ADE? Adversarial Detection Engineering ADE is the discipline of reasoning about False...
pybeacon
PyBeacon PyBeacon is a collection of scripts for dealing with Cobalt Strike's encrypted traffic. It can encrypt/decrypt beacon metadata, as well as parse symmetric encrypted taskings Scripts included There is a small library which includes encryption/decoding methods, however some example scripts...
Blackash-CVE-2025-20343
π CVE-2025-20343: Cisco ISE RADIUS Suppression DoS Vulnerability π β οΈ Overview π¨ High-severity denial-of-service DoS flaw in Cisco Identity Services Engine ISE! π₯ An unauthenticated remote attacker can crash the device with crafted RADIUS packets. π Disclosed : November 5, 2025 β No known...
circuit-artist
A Digital Logic Simulation Game Every Circuit Is An Image Game Rules Little pixel triangles are NANDs. Black pixels are background. Everything else is a wire. Screenshots π Changes in 1.1 πͺ π§ I've reworked the simulation engine to use a variable-delay event-driven simulation taking into account t...
CVE-2019-11043
CVE-2019-11043 Vulnerability Description When Nginx's fastcgisplitpathinfo processes requests containing %0a, it encounters a newline \n causing PATHINFO to be empty. Meanwhile, php-fpm has a logic flaw when handling empty PATHINFO. An attacker can achieve remote code execution through careful...
CVE-2026-73708
A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to obtain elevated privileges and modify settings beyond what is authorized by the user's existing privilege level on a vulnerable...
CVE-2026-63138
Improper Neutralization of Special Elements in Data Query Logic CWE-943 in Kibana can lead to information disclosure via NoSQL Injection CAPEC-676. An authenticated user with access to the affected query functionality could submit specially crafted input that alters the intended query logic,...
EUVD-2026-69435
A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to obtain elevated privileges and modify settings beyond what is authorized by the user's existing privilege level on a vulnerable...
CVE-2026-73708 Fault in Business Logic allows Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to obtain elevated privileges and modify settings beyond what is authorized by the user's existing privilege level on a vulnerable...