Eagle

Project Eagle Alpha Project Eagle is a plugin based vulnerabilities scanner with threading support used for detection of low-hanging bugs on mass scale .---. .----------- / \ / ------ / / \ / ----- ////// ' / --- Multipurpose vulnerability scanner //// / // : : --- v1.0b / / / / '-- 2019-2020...

CVE-2026-1122-IoT-Firmware-Update-Signature-Bypass-via-Low-Order-Point-Injection

5. CVE-2026-1122 – IoT Firmware Update Signature Bypass via Low‑Order Point Injection Overview An IoT device’s OTA firmware verification uses a flawed Ed25519 implementation that does not reject public keys with small‑order components, allowing an attacker to forge a valid signature for malicious...

CVE-2024-57394

CVE-2024-57394 A vulnerability was identified in the Qi-ANXIN Tianqing Endpoint Security Management System tested on version 10.0. This vulnerability allows low-privilege users to restore a quarantined file to an arbitrary location, such as C:\Windows\System32. An attacker can craft a malicious D...

CVE-2026-20805-POC

CVE-2026-20805 PoC Proof of concept for the information disclosure vulnerability in Microsoft's Desktop Window Manager dwm.exe. 📋 Vulnerability Summary ID: CVE-2026-20805 Product: Microsoft Windows Component: Desktop Window Manager dwm.exe CWE-ID: CWE-200 Exposure of Sensitive Information to an...

ciscoasa_honeypot

Cisco ASA honeypot Cymmetria Research, 2018. https://www.cymmetria.com/ Contact: [email protected] A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability It is released under the MIT license for the use of the...

CVE-2025-0054

CVE-2025-0054 – SAP NetWeaver Stored XSS Scanner 🕷 A lightweight Python tool to detect stored Cross-Site Scripting XSS vulnerabilities in SAP NetWeaver Application Server Java , specifically targeting CVE-2025-0054. ⚠️ For educational and authorized security testing only. Do not use on systems...

ble-cve2025-attack-new-version

ble-cve2025-attack-new-version android-ble-cve-2025-4866 🔐 PoC for CVE-2025-4866 — Android BLE Vulnerability public version 📡 Exploitation of BLE authorization weakness on Android devices public PoC only. 👨💻 Developed by BloodCode Labs — 2025...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

CVE-2022-48429_poc

CVE-2022-48429 - YouTrack Stored XSS The reported description of the CVE on the NVD database lacks accuracy. This is a more accurated description: Youtrack version = 2022.3.65373 has a stored Cross-Site Scripting XSS in dashboards. A malicious low-privileged user can create and share a malformed...

HASH

HASH HTTP Agnostic Software Honeypot HASH is a framework for creating and launching low interactive honeypots. 🌟 Why HASH? The main philosophy of HASH is to be easy to configure and flexible to mimic any software running on HTTP/HTTPs. With the minimum footprint possible to avoid being detected a...

BTLE

BTLE BTLE is a free and open-source Bluetooth Low Energy BLE Software Defined Radio software suite and open BTLE chip design. It includes: BTLE baseband algorithms description, Python and Verilog implementation, FPGA and SkyWater 130 PDK OpenLane2 workflow results. Analog Devices AD9361 + Xilinx...

spraycharles

Spraycharles hey, yo I'm feeling like spraycharles - Chiddy Bang Low and slow password spraying tool, designed to spray on an interval over a long period of time. Includes spraying plugins for Office365, OWA, EWS, Okta, ADFS, Cisco SSL VPN, Citrix Netscaler, Sonciwall, NTLM over HTTP, and SMB...

HosTaGe

HosTaGe - Honeypot-To-Go Copyright C 2013-2021, Aalborg University Denmark and Technische Universität Darmstadt Germany HosTaGe is a lightweight, low-interaction, portable, and generic honeypot for mobile devices that aims on the detection of malicious, wireless network environments. As most...

CVE-2023-33253

CVE-2023-33253 LabCollector 6.0 though 6.15 allows remote code execution An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file such as...

TruffleSnout

TruffleSnout Iterative AD discovery toolkit for offensive operators. Situational awareness and targeted low noise enumeration. Preference for OpSec. Discover: Forests and Trusts Domains and Trusts GCs/DCs Search and Query AD: For objects and data Limits to avoid triggering defensive circuit...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

proxmark3

proxmark3: the official Proxmark repository! ⚠️ This repository has been archived. It is no longer maintained. Active development has moved over to RRG Proxmark3 - Iceman Fork The proxmark3 is a powerful general purpose RFID tool, the size of a deck of cards, designed to snoop, listen and emulate...

CVE-2025-63666

CVE-2025-63666 — Tenda AC15 Summary Tenda AC15 firmware V15.03.05.18multi issues an authentication cookie in the form password= and returns it without HttpOnly, Secure, or SameSite flags, exposing the password hash to the client. The low-entropy suffix acts as a predictable session identifier,...

claude-awm

claude-awm: can you scrub a SynthID text watermark by editing the text? Yes, but only one family of attack works, and it isn't the one everyone assumes. Unicode variation selectors category Mn, U+FE00 to U+FE0F and U+E0100 to U+E01EF drive the detector below threshold and stay there. Every other...

binaryalert

BinaryAlert: Serverless, Real-Time & Retroactive Malware Detection .. image:: https://travis-ci.org/airbnb/binaryalert.svg?branch=master :target: https://travis-ci.org/airbnb/binaryalert :alt: Build Status .. image:: https://coveralls.io/repos/github/airbnb/binaryalert/badge.svg?branch=master...