Hunt-Weird-ImageLoads

Hunt-Weird-ImageLoads This project was created to play with different IOCs caused by Imageload events. It leverages ETW to monitor for ImageLoad events and walks the callstack to identify some possible IOCs, such as: RWX page in callstack Stomped module in callstack Module proxying ntdll -...

OurSharePoint-CVE-2025-53770

OurSharePoint — CVE-2025-53770 PoC Self-contained, single-binary SharePoint RCE tool. Generates a TypeConfuseDelegate gadget chain as raw MS-NRBF bytes no ysoserial.exe, wraps it in a DataSet deserialization payload, and delivers it over HTTP using the authentication bypass — all in one shot...

password_generator

PassForge - All-in-One Password Generator CLI A production-ready, cryptographically secure password generator CLI with 17 generation modes, entropy transparency, and comprehensive customization options. Features 17 Generation Modes Generator| Command| Description ---|---|--- Random| random, r|...

umbra

Umbra An external overlay for THE FINALS on Linux. It reads the game's memory from a separate process, draws a transparent click-through window on top of it, and provides an aim assist and a triggerbot. Nothing is injected into the game and nothing is ever written back; the tool reads memory and...

dirtyZero

dirtyZero A simple customization toolbox that utilizes CVE-2025-24203. Supports iOS 16.0 - iOS 18.3.2. Latest Release • Discord Server • Our Website Installation Please ensure that your device is supported before usage. Refer to the table below. OS Version| Status ---|--- iOS 15 and below|...

rev-dep

Rev-dep Capabilities • Installation • Documentation • Exploratory Toolkit • Newsletter Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI. About 📣 As codebases scale, maintaining...

harbian-audit

harbian-audit Hardening Introduction Hardened Debian GNU/Linux and CentOS 8 distro auditing. The main test environment is in debian GNU/Linux 9/10/11/12/13 and CentOS 8 and ubuntu 22, and other versions are not fully tested. There are no implementations of desktop related items in this release. T...

xtride

XTRIDE: N-gram-based Practical Type Recovery Introduction We present XTRIDE, an improved n-gram-based cf. STRIDE approach on type recovery for binaries that focuses on practicality: highly optimized throughput and actionable confidence scores allow for deployment in automated pipelines. When...

yari

YARI - YARA Interactive Interactive debugger for the YARA language written in Rust. Debugger directly calls libyara avoiding emulation to get the most accurate results. 🚀 Features: Call functions from modules Get the value of module constants Evaluate complex expressions Check the matches of...

zeek-quasarrat-detector

A Zeek Based QuasarRAT Malware Detector Malware often hides communications with its command and control C2 server over HTTPS. The encryption in HTTPS usually conceals the compromise long enough for the malware to accomplish its goal. This makes detecting malware that uses HTTPS challenging, but...

CVE-2026-40175-poc

CVE-2026-40175 — Axios CRLF Injection / HTTP Request Smuggling PoC Overview A CRLF injection vulnerability caused by AxiosHeaders.set in the Axios HTTP client =1.0.0 =1.0.0 1.15.0, axios 0.31.0 Patched Versions| 1.15.0, 0.31.0 CWE| CWE-93 Improper Neutralization of CRLF Sequences Root Cause...

CVE-2026-44825-Apache-Solr-Scanner

CVE-2026-44825 Apache Solr Scanner This repository contains a Go-based scanner for detecting and testing Apache Solr instances that may be affected by CVE-2026-44825, related to Velocity Template Remote Code Execution RCE conditions. The tool can scan a single target or a list of targets, detect...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

Grouper

Grouper DONT USE GROUPER ANY MORE. USE GROUPER2! https://github.com/l0ss/Grouper2 A PowerShell script for helping to find vulnerable settings in AD Group Policy. Photo by Jon Hanson - https://www.flickr.com/people/61952179@N00?rb=1 - https://creativecommons.org/licenses/by-sa/2.0/ Summary Grouper...

CopyFail-Exploits-CVE-2026-31431

CVE-2026-31431 — Copy Fail Educational repository with multi-language implementations of the Copy Fail exploit. Created and maintained by @shotafry — because reading the CVE is not enough. You have to reproduce it. 📖 Leer en Español Table of Contents What is Copy Fail? Who discovered it? Severity...

CVE-2025-69985

CVE-2025-69985: Exploit for Authentication Bypass to RCE in FUXA ≤1.2.8 📌 General Description This repository contains a Proof of Concept PoC and detailed technical documentation about the vulnerability CVE-2025-69985 , which affects FUXA versions ≤1.2.8. The vulnerability allows an unauthenticat...

jshound

jshound Recover every request a web app is built to make from the JavaScript it ships: method, URL, body, content type and headers. A single page app's JavaScript bundle contains every API request the app can make. Given a URL, jshound finds the app's bundle, crawls all of it, lazily loaded chunk...

CVE-2026-0006-openapv-poc

CVE-2026-0006: Heap Buffer Overflow in libopenapv Android APV Codec Patch Analysis & Reproduction by Mobile Hacking Lab CVSS 9.8 Critical | Actively exploited in the wild | Patched March 2026 Note: We did not discover this vulnerability. All credit for finding and responsibly reporting...

zeek-asyncrat-detector

A Zeek Based AsyncRAT Malware Detector Malware often hides communications with its command and control C2 server over HTTPS. The encryption in HTTPS usually conceals the compromise long enough for the malware to accomplish its goal. This makes detecting malware that uses HTTPS challenging, but on...

ultrasploiter

UltraSploiter port scanner, the full exploit-db index and a set of runnable exploits in one binary. single file, no dependencies. linux, windows and macos. if you'd normally reach for nmap + searchsploit + metasploit, this is all three behind one command: normally| here ---|--- nmap| UltraSploite...