z3

Z3 Z3 is a theorem prover from Microsoft Research. It is licensed under the MIT license. Windows binary distributions include C++ runtime redistributables If you are not familiar with Z3, you can start here. Pre-built binaries for stable and nightly releases are available here. Z3 can be built...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

TokenTacticsV2

/ / / / / / / / | \ / / / / /// / \ / / / / / / / / | | / / / / / / / // / , / / / / / / // // / // // / / | |/ / / / // //||// // /,////// |/ TokenTactics v2 This is an updated version of TokenTactics originally written by Stephan Borosh @rvrsh3ll & Bobby Cooke @0xBoku. Azure JSON Web...

CVE-2017-8759

CVE-2017-8759 This repo contains sample exploits for CVE-2017-8759 for Microsoft PowerPoint, along with a description of how similar vulnerabilities were, and can, be exploited using the same techniques. Some background The aim of publishing this repo is to highlight alternative exploitation...

msticpy

MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...

CVE-2021-26855-exploit-Exchange

CVE-2021-26855 exploit-Exchange Auto Scan the World and auto exploit rce By EOG Team...

Security-101

🌐 Multi-Language Support Supported via GitHub Action Automated & Always Up-to-Date Arabic | Bengali | Bulgarian | Burmese Myanmar | Chinese Simplified | Chinese Traditional, Hong Kong | Chinese Traditional, Macau | Chinese Traditional, Taiwan | Croatian | Czech | Danish | Dutch | Estonian | Finni...

certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

o365-attack-toolkit

What is o365-attack-toolkit o365-attack-toolkit allows operators to perform oauth phishing attacks. We decided to move from the old model of static definitions to fully "interactive" with the account in real-time. Some of the changes Interactive E-mail Search - Allows you to search for user e-mai...

mxc

MXC SDK samples Audience: MXC consumers These samples demonstrate the supported V1 SDK surfaces in Rust, .NET, and Node. They are organized by scenario so equivalent operations are easy to compare while each implementation remains idiomatic for its language. Scenario| Purpose| Rust| .NET| Node...

check_mdi

checkmdi Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for a Microsoft Defender for Identity MDI instance. Based on: https://github.com/thalpius/Microsoft-Defender-for-Identity-Check-Instance. Usage ./checkmdi.py -d...

CVE-2024-21413-Outlook-Assessment

title: "CVE-2024-21413 Moniker Link: Microsoft Outlook Remote Code Execution Assessment" date: 2026-06-28 author: Lindon Mitchell YoguiCR role: Security Researcher / Exploit Analyst status: Completed classification: Public / Portfolio environment: TryHackMe - Moniker Link Lab Vulnerability...

CVE-2026-31431

Ubuntu 24.04.3 LTS Kernel: Linux 6.6.87.1-microsoft-standard-WSL2 Kali GNU/Linux Rolling Kernel: Linux 6.6.87.1-microsoft-standard-WSL2...

Detours

Microsoft Research Detours Package Detours is a software package for monitoring and instrumenting API calls on Windows. Detours has been used by many ISVs and is also used by product teams at Microsoft. Detours is now available under a standard open source license MIT. This simplifies licensing f...

ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

CVE-2021-34481

CVE-2021-34481 Check patch for CVE-2021-34481 Windows Print Spooler Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34481...

Vulnerability-scanner

With the increasing reliance of organizations on digital technologies to carry out communication, data storage, and business operations, the threats to cybersecurity have significantly increased. Given the critical role that endpoint security software plays in securing networks and systems, such...

PicusSecurity4.Week.Repo

githubRepo for follina vuln CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina...

CVE-2026-54998-exp

DISCLAIMER This repository is for educational and research purposes only. The author is not responsible for any misuse, damage, or illegal activities caused by the use of this material. Use at your own risk. Respect applicable laws and ethical guidelines. Overview CVE-2026-54998 is an Incorrect...

ZeroPoint

ZeroPoint.ps1 ⚠ A defensive PowerShell utility to detect and mitigate exploitation of the CVE-2025-53770 zero-day vulnerability in Microsoft SharePoint Server. 🔍 What it Does This PowerShell script is designed to: Detect compromise indicators, such as suspicious .aspx webshells Parse ULS logs to...