llm-circuit-finder

llm-circuit-finder I replicated Ng's RYS method and found that duplicating 3 specific layers in Qwen2.5-32B boosts reasoning by 17% and duplicating layers 12-14 in Devstral-24B improves logical deduction from 0.22→0.76 on BBH — no training, no weight changes, just routing hidden states through th...

CVE-2025-27636-Apache-Camel-PoC

Apache Camel CVE-2025–27636 & CVE-2025-29891 PoC CVE-2025–27636 and CVE-2025-29891 are vulnerabilities in Apache Camel that affect versions: 4.10.0-4.10.1, 4.8.0-4.8.4, 3.10.0-3.22.3. Exploitation of these vulnerabilities can enable attackers to execute internal Camel methods. The following is a...

RMS-Runtime-Mobile-Security

Runtime Mobile Security RMS 📱🔥 by @mobilesecurity Runtime Mobile Security RMS , powered by FRIDA, is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime. With RMS you can easily dump all loaded classes and relative methods, hook everything on the fly, trace metho...

Tomcat-CVE-2017-12615

Tomcat Arbitrary Write-file Vulnerability through PUT Method CVE-2017-12615 中文版本Chinese version Tomcat version: 8.5.19 Environment Setup docker-compose build docker-compose up -d After successfully running the commands above, you will see the example page of Tomcat through visiting the site...

CVE-2016-2098

CVE-2016-2098 Remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data. Explanation: This issue comes from the usage of the render method on user-supplied data. The method render is usually used to render a page from a template, but render method also allows...

CVE-2018-3245

CVE-2018-3245 Step 1 java -jar ysoserial-cve-2018-3245.jar WHY SO SERIAL? Usage: java -jar ysoserial-cve-2018-3245.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ CVE201828931 @mbechler CVE201828932 @mbechler CVE201828933 @mbechler...

catsploit

CATSploit🐈 CATSploit is an automated penetration testing tool using Cyber Attack Techniques Scoring CATS method that can be used without pentester. Currently, pentesters implicitly made the selection of suitable attack techniques for target systems to be attacked. CATSploit uses system...

onelinepy

onelinepy Python Obfuscator for FUD Python Code. Download & Run git clone https://github.com/spicesouls/onelinepy cd onelinepy chmod +x setup.sh ./setup.sh onelinepy Usage Guide | || | . | | -| | | | -| . | | |Python |||||||||| | |Obfuscator || || usage: oneline.py -h -m M -i I --script SCRIPT...

rsdl

rsdl Subdomain Scanner v.2 Subdomain Scan With Ping Method & Check HTTP/S Statuses. Flags| Value| Description ---|---|--- --hostname| example.com| Domain for scan. --output| | Records the output with the domain name. --list| /tmp/lists/example.txt| Lister for subdomains. New Features Checking...

CVE-2016-3088

Apache ActiveMQ PUT RCE One-Click GetShell usage:python3 CVE-2016-3088.py -u https://tartget.com/...

DotNetHookerToolkit

InjectorCli + ManagedHookHostProj This repository contains two projects that are designed to be used together: InjectorCli: A .NET Framework 4.8 console injector built on frida-clr Frida.dll ManagedHookHostProj: A .NET Framework 4.8 helper DLL with native exports via 3F .NET DllExport used to...

CVE-2018-16492

extend for Node.js node-extend is a port of the classic extend method from jQuery. It behaves as you expect. It is simple, tried and true. Notes: Since Node.js = 4, Object.assign now offers the same functionality natively but without the "deep copy" option. See ECMAScript 2015 ES6 in Node.js. Som...

HookCase

HookCase HookCase is a tool for debugging and reverse engineering applications on macOS aka OS X, and the operating system itself. It re-implements and extends Apple's DYLDINSERTLIBRARIES functionality. It can be used to hook any method in any module even non-exported ones, and even those that...

The vulnerability of the Enlogic SCADA system “ENTEK” virtual controller, related to the use of a dangerous method or function that allows a intruder to execute arbitrary code in the operating system.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a dangerous method or function. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system remotely...

XXEinjector

XXEinjector XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications. Options: --host Mandatory - our IP address for reverse connections. --host=192.168.0.2 --file...

mip22

mip22 mip22 v3.3 mip22 is a advanced phishing tool 83 default websites, clone any site with manual method, add any site with customize method, mask link with subdomains, url shortener, audio notice for view the credentials live, music in background etc... The program is made for educational...

forbidden

Forbidden Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client. Tested on Kali Linux v2024.2 64-bit. Made for educational purposes. I hope it will help! Future plans: Add the silent option to suppress console output. Add the no color option...

jadx-magic-strings

JADX Magic Strings Plugin A JADX plugin that extracts information from string constants. Features The plugin extracts and analyzes string constants from decompiled code to find: 1. Source File References : Detects references to Java/Kotlin source files .java, .kt, .kts, .scala, .groovy in string...

ssrf-sheriff

SSRF Sheriff This is an SSRF testing sheriff written in Go. It was originally created for the Uber H1-4420 2019 London Live Hacking Event, but it is now being open-sourced for other organizations to implement and contribute back to. Features Respond to any HTTP method GET, POST, PUT, DELETE, etc...

tc_hack

This tool uses a vulrubility within Apache Tomcat called CVE 2017 12617 to gain remote access to any server with the PUT method enabled. It can be downloaded here you will need to run it from the command line Usage: tchack target IP target port...