CVE-2025-61156

CVE-2025-61156 A vulnerability was discovered in the ThreatFire System Monitor =v4.7.0.53 kernel-mode TfSysMon.sys component that allows unprivileged users to perform arbitrary process termination with kernel-mode privileges. As a result, PPL and protected system processes can be forcefully...

TospoVirus

Building TospoVirus for Distribution: ./build.sh Distribute to a working pineapple with version 2.3: ssh -oStrictHostKeyChecking=no -oUserKnownHostsFile=/dev/null [email protected] "mkdir /tospo" scp -oStrictHostKeyChecking=no -oUserKnownHostsFile=/dev/null dist/tv...

fsmon

fsmon Low level filesystem monitor utility for Linux, Android, iOS and macOS. Author : pancake @ nowsecure License : MIT Designed for System administrators and incident responders Security researchers and forensic analysts Developers debugging I/O-heavy applications Reverse engineers interested i...

airpwn-ng

Concept airpwn-ng is a framework for 802.11 wireless packet injection. It sniffs for wireless packets and if the data matches a specified trigger, custom content is injected. From the perspective of the wireless client, airpwn-ng is the server. airpwn-ng is based on the concepts laid out in Airpw...

kmon

Linux Kernel Manager and Activity Monitor 🐧💻 The kernel is the part of the operating system that facilitates interactions between hardware and software components. On most systems, it is loaded on startup after the bootloader and handles I/O requests as well as peripherals like keyboards, monitor...

hashcatch

hashcatch Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog Written by @SivaneshAshok PoC of hashcat...

jsmon

JSMon JSMon - JavaScript Change Monitor for BugBounty Using this script, you can configure a number of JavaScript files on websites that you want to monitor. Everytime you run this script, these files will be fetched and compared to the previously fetched version. If they have changed, you will b...

CVE-2026-38053---Remove-PPL

CVE-2026-38053---Remove-PPL BYOVD Remove PPL for 24H2 and 25H2 An arbitrary memory write in the handler for IOCTL 0x12C807 METHODNEITHER of Wise System Monitor v1.5.3.127 allows attackers to cause a remove PPL or Denial of Service DoS via a crafted input. Additional Information Tested on: Windows...

CVE-2026-99060

A vulnerability exists in the Linux kernel 's mt7603 driver. The driver uses a driver-private global station WCID for frames without a station or vif, such as those injected via a monitor interface . Because this WCID is published without being passed to mt76_wcid_init(), the first injected frame...

EUVD-2026-108726

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7603: initialize global station WCID mt7603 uses a driver-private global station WCID for frames that have neither a station nor a vif, including frames injected through a monitor interface. Unlike the core global...

mac-monitor

🎉 Welcome to "Mac Monitor's" official new home! Mac Monitor is an advanced, stand-alone system monitoring tool tailor-made for macOS security research, malware triage, and system troubleshooting. Leveraging Apple's Endpoint Security ES and System Extension APIs, it collects and enriches system...

CVE-2026-98890

The Linux kernel contains a vulnerability in the libertas wifi driver. Specifically, in monitor mode, the function lbs_hard_start_xmit() fails to perform sufficient length checks when casting skb->data to a radiotap TX header . Because the generic check only rejects zero-length or oversized sk...

EUVD-2026-108684

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: reject short monitor TX frames In monitor mode, lbshardstartxmit casts skb-data to a radiotap TX header, skips that header, and then copies the 802.11 destination address from offset 4 in the remaining frame. The...

CVE-2026-79417

CVE-2026-79417 Proof-of-Concept PoC exploit for CVE-2026-79417, a local Denial-of-Service DoS vulnerability affecting Argus Monitor versions Where is a path to a signed ArgusMonitor.exe binary from an affected version of Argus Monitor. Building Dependencies OpenSSL 3.x or later MSYS2 UCRT64 1...

MacMaster

MacMaster: Advanced Network Interface Management and Monitoring MacMaster is a comprehensive command-line tool crafted for network professionals and enthusiasts alike. It stands out as a powerful utility for manipulating the MAC addresses of network interfaces on various systems. Designed with bo...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

AirmonGUI

AirmonGUI A local web interface for the aircrack-ng wireless toolkit. Screenshots · Quick start · Features · Roadmap · Contributing !WARNING Use this only on networks you own or have written permission to test. Scanning, deauthenticating, or capturing traffic from networks you don't control is...

evilTrust

evilTrust Ideal tool for automated deployment of a Rogue AP with template selection + 2FA capability. This tool has several templates to use, including a custom template option, where the attacker can deploy their own template. IMPORTANT : No wired connection is required, so the attack can be...

CVE-2024-23108

CVE-2024-23108: Fortinet FortiSIEM Unauthenticated 2nd Order Command Injection Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances Blog Post Root cause and indicators of compromise here:...

CVE-2018-9276

CVE-2018-9276 PRTG 18.2.39 Authenticated Command Injection Reverse Shell https://nvd.nist.gov/vuln/detail/CVE-2018-9276 Improved version of an exploit written by https://github.com/M4LV0. I used the POST data from their script but just made it more reliable as I didnt have much success with it...