Flerken

Flerken Introduction Command Line Obfuscation CLOB has been proved to be a non-negligible factor in fileless malware or malicious actors that are "living off the land". With dozens of obfuscation tools seen in the wild, by contrast few proper countermeasures can be found. In this talk, we present...

CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

🤝 Show your support - give a ⭐️ if you liked the content | SHARE on Twitter | Follow me on CVE-2022-0337 System environment variables leak on Google Chrome, Microsoft Edge and Opera 📝 Description Successful exploitation of this vulnerability can lead to the leak of user's secrets stored inside a...

CVE-2025-4138-4517-POC

CVE-2025-4138 / CVE-2025-4517 Обход фильтра tarfile в Python через символьную ссылку PATHMAX Произвольная запись файлов при извлечении сfilter="data" / filter="tar" Содержание Обзор Детали уязвимости Как это р...

CVE-2025-68613

CVE-2025-68613 n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution RCE vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by...

C4

C4 C yberdelia, a C ollection of C ommand and C ontrol frameworks Table of Contents C4 Table of Contents What is this? Cyberdelia? What is a C2 framework? Why create this repo? Format Plan for this repo Github Specific content Contribute to project Resources used...

chiasmodon

Chiasmodon Chiasmodon is an OSINT tool that allows users to gather information from various sources and conduct targeted searches based on domains, Google Play applications, email addresses, IP addresses, organizations, URLs, and more. It provides comprehensive scanning capabilities, customizable...

chiasmodon

Chiasmodon Chiasmodon es una herramienta OSINT que permite a los usuarios recopilar información de diversas fuentes y realizar búsquedas dirigidas basadas en dominios, aplicaciones de Google Play, direcciones de correo electrónico, direcciones IP, organizaciones, URL y más. Proporciona capacidade...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

mcp-server-attestation

Part of theStudioMeyer MCP Stack — Built in Mallorca 🌴 · ⭐ if you use it mcp-server-attestation Layer-2 supply-chain hardening for Model Context Protocol servers. Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Direct response to: OX Security...

WMEye

WMEye WMEye is an experimental tool that was developed when exploring about Windows WMI. The tool is developed for performing Lateral Movement using WMI and remote MSBuild Execution. It uploads the encoded/encrypted shellcode into remote targets WMI Class Property, create an event filter that whe...

arkime

Arkime Arkime — это масштабируемая система с открытым исходным кодом для анализа сети и захвата пакетов. Arkime дополняет вашу текущую инфраструктуру безопасности, сохраняя и индексируя сетевой трафик в стандартном формате PCAP, обеспечивая быстрый индексированный доступ. Предоставляется интуитив...

Linpmem

Linpmem -- a physical memory acquisition tool for Linux Linpmem is a Linux x64-only tool for reading physical memory. Like its Windows counterpart, Winpmem, this is not a traditional memory dumper. Linpmem offers an API for reading from any physical address, including reserved memory and memory...

CVE-2020-1066-EXP

Reference This vulnerability belongs to the Windows CardSpace service that does not properly handle symbolic link objects, leading to a local privilege escalation via arbitrary file replacement. Disclaimer The author's PoC is for research purposes only. If readers use this PoC for other activitie...

SharpCovertTube

SharpCovertTube SharpCovertTube is a program created to control Windows systems remotely by uploading videos to Youtube. The program monitors a Youtube channel until a video is uploaded, decodes the QR code from the thumbnail of the uploaded video and executes a command. The QR codes in the video...

java-stager

java-stager A PoC Java Stager which can download, compile, and execute a Java file in memory. This is for research purposes only, do not use this where you are unauthorised to do so. What is this? This is based on the work of James Williams from his talk "Next Gen AV vs My Shitty Code" available...

pidrila

PIDRILA Current Release: v0.1.0 2020.11.08 Overview PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer is really fast async web path scanner prototype developed by BrightSearch team for all ethical netstalkers. Installation & Usage root@kitploit: git clone...

pidrila

PIDRILA Текущий релиз: v0.1.0 2020.11.08 Обзор PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer — это действительно быстрый асинхронный прототип сканера веб-путей, разработанный командой BrightSearch для всех этичных нетсталкеров. Установка и использование...

blueshrimp

Proof-of-concept for CVE-2025-48593 based on examining the patch. You shouldn't worry about this. As far as I can tell, phones are NOT vulnerable to CVE-2025-48593. The issue only affects Android devices that support acting as Bluetooth headphones / speakers, such as some smartwatches, smart...

blueshrimp

Доказательство концепции для CVE-2025-48593 на основе изучения патча. Вам не стоит беспокоиться об этом. Насколько я могу судить, телефоны НЕ уязвимы для CVE-2025-48593. Проблема затрагивает только устройства Android, которые поддерживают работу в качестве Bluetooth-наушников / динамиков, наприме...

cornershot

What is CornerShot In warfare, CornerShot is a weapon that allows a soldier to look past a corner and possibly take a shot, without risking exposure. Similarly, the CornerShot package allows one to look at a remote host’s network access without the need to have any special privileges on that host...