subscraper

SubScraper Overview :smallbluediamond: Usage :smallbluediamond: Contribute SubScraper is a subdomain enumeration tool that uses a variety of techniques to find subdomains of a given target. Subdomain enumeration is especially helpful during penetration testing and bug bounty hunting to uncover an...

net-Shield

net-Shield An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices based on iptables/ipsets Requirements Linux System with golang, iptables/ipsets Nginx Quickstart Run the bash script install.sh to install all the required dependencies. bash install.sh You will be prompted...

TheTimeMachine

🚀 TheTimeMachine v3.0 - Weaponizing Wayback for Recon, BugBounties, OSINT & More! You’ve heard of time travel in movies and comics, right? Well, this isn’t fiction anymore 😎. TheTimeMachine lets you dig through the past of any web app by scraping archived URLs from the Wayback Machine — and helps...

CVE-2023-28252

CVE-2023-28252 The TL;DR for the learnings of Windows Vulnerability CVE-2023-28252 So this weekend I was practising the Aero machine on Hack The Box. The box is so much fun playing it when you can mimic a real-world attack to a Windows 11 machine. After completing it, I was very curious and wanti...

pywhisker

pyWhisker pyWhisker is a Python equivalent of the original Whisker made by Elad Shamir and written in C. This tool allows users to manipulate the msDS-KeyCredentialLink attribute of a target user/computer to obtain full control over that object. It's based on Impacket and on a Python equivalent o...

poc-CVE-2024-23897

poc-CVE-2024-23897 CVE-2024-23897: Jenkins Arbitrary File Read Lead to RCE 🎯 Affected Products and Versions root@kitploit: Product: Jenkins Continuous Integration/Continuous Delivery server Versions: Jenkins 2.441 and earlier, Jenkins LTS 2.426.2 and earlier Fixed in: Jenkins 2.442, Jenkins LTS...

commando-vm

What is CommandoVM? Complete Mandiant Offensive VM "CommandoVM" is a comprehensive and customizable, Windows-based security distribution for penetration testing and red teaming. CommandoVM comes packaged with a variety of offensive tools not included in Kali Linux which highlight the effectivenes...

CVE-2026-0073

🤖 CVE-2026-0073 - Wireless ADB Authentication Bypass 📌 Overview CVE-2026-0073 is a critical authentication bypass vulnerability in Android’s Wireless ADB adbd daemon. An attacker on the same network can bypass the mutual TLS authentication and connect to the device without user approval or previo...

swapgs-attack-poc

PoC for the SWAPGS attack CVE-2019-1125 This repository holds the sources for the SWAPGS attack PoC publicly shown at Black Hat USA, 2019. Contents leakgsbkva - variant 1 look for random values in kernel memory; limited to PE kernel image header leakgsbkvat - variant 2 extract random values from...

k8scout

k8scout Beta — A single-binary Kubernetes attack path engine for authorized security assessments. Drop it into a compromised pod, run it, and get a map of every realistic escalation path — from your current foothold to cluster-admin, node access, secret theft, and cloud IAM roles. The idea You ha...

EUVD-2026-71751

A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this issue is the function getJailbreak of the file server/backend.py of the component Jailbreak Mode. Executing a manipulation can lead to allocation of resources. The attack can be...

CVE-2026-85703

ramon-victor freegpt-webui (up to commit 098db3dfeb) is vulnerable to an allocation of resources flaw in the Jailbreak Mode component, specifically in the getJailbreak function of server/backend.py. The attack is remote , requires no authentication , and has low complexity . Impact is rated MEDIU...

CVE-2026-85703 ramon-victor freegpt-webui Jailbreak Mode backend.py getJailbreak allocation of resources

A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this issue is the function getJailbreak of the file server/backend.py of the component Jailbreak Mode. Executing a manipulation can lead to allocation of resources. The attack can be...

zerologon

Zerologon مجموعة من النصوص البرمجية، لاختبار واستغلال ثغرة zerologon CVE-2020-1472 ما هي؟ ZeroLogon هي ثغرة تسمح لنا باستغلال عيب في تشفير بروتوكول Netlogon Remote Protocol MS-NRPC الخاص بخدمة Active Directory من مايكروسوفت، والذي يسمح للمستخدمين بتسجيل الدخول إلى الخوادم باستخدام NTLM. الخطوات...

draytek-arsenal

Draytek Arsenal: Observability and hardening toolkit for Draytek edge devices. Advanced attackers are increasingly choosing edge devices as targets. However, these devices are controlled by closed-source software known as firmware, often distributed in a proprietary format. This is an added...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

CVE-2024-24919-Incident-Report.md

🛡️ SOC287 - Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Date: Jun 06, 2024 Investigation Type: Web Attack Platform: LetsDefend Rule Triggered: SOC287 – Arbitrary File Read Detected CVE: CVE-2024-24919 Severity: High Impact: Unauthorized access to sensitive system files via...

CVE-2023-46017-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46017-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview Code-Projects...

CVE-2023-31705

CVE-2023-31705 description A Reflected Cross-site scripting XSS vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter. Vulnerability Type Cross Site Scripting XSS Vendor of Product Sourcecodster Affected Produc...

CVE-2025-27591-below-

CVE-2025-27591 – Privilege Escalation in Below 1 Introduction Below is a Linux tool for recording and displaying system data such as hardware utilization and cgroup metrics. In versions prior to v0.9.0 , Below’s systemd service runs with root privileges and creates world-writable log directories...