282607 matches found
EvilAbigail
Initrd encrypted root fs attack Scenario Laptop left turned off with FDE turned on Attacker boots from USB/CD/Network Script executes and backdoors initrd User returns to laptop, boots as normal Backdoored initrd loads: Debian/Ubuntu/Kali .so file into /sbin/init on boot, dropping a shell...
minisign
Minisign A dead simple tool to sign files and verify signatures. Table of Contents Minisign Table of Contents Overview Documentation Installation Prebuilt Packages Building with Zig Building with CMake and GCC or Clang Usage Generating a Key Pair Signing Files Verifying Signatures Verification of...
LinkScope_Client
LinkScope Client Installer Download Get the installer for LinkScope Client from here: https://accentusoft.com/downloads/ Description This is the repository for the LinkScope Client Online Investigation software. LinkScope allows you to perform online investigations by representing information as...
AutoTTP
AutoTTP Automated Tactics Techniques & Procedures. Re-running complex sequences manually for regression tests, product evaluations, generate data for researchers & so on can be tedious. I toyed with the idea of making it easier to script Empire or any frameworks/products/toolkits that provide API...
CVE-2025-22710
CVE-2025-22710 1οΈβ£ Component type WordPress plugin 2οΈβ£ Component details Component name WooCommerce Advanced Bulk Edit Products, Orders, Coupons, Any WordPress Post Type β Smart Manager Vulnerable version β οΈ At least one post must exist to observe the difference in response values based on...
exploits
Exploits Exploits and proof-of-concept code from the team at Hacker House. Filename| Description ---|--- AirWatchMDMJailbreakBypass.txt| Bypass jailbreak detection on mobile device management AirWatch for IOS adobe-psp.tgz| Adobe CoolType SING Table "uniqueName" Stack Buffer Overflow PSP bypass...
zeek-plugin-roca
Johanna::ROCA This plugin implements detection of CVE-2017-15361 keys; it is a reimplementation of the source available at https://github.com/crocs-muni/roca. This plugin provides two new BIFs that can check public keys: rocavulnerablecert checks if a certificate is vulnerable rocavulnerablemod...
box-js
box.js A utility to analyze malicious JavaScript. Installation Simply install box-js from npm: npm install box-js --global box-js is also available: as a Cuckoo module see the integrations directory and Nwinternights/CuckooBoxjs; as a Dockerfile see integrations/README.md; as a package in distros...
CVE-2017-15944
CVE-2017-15944 CVE-2017-15944 Module for Router Scan Project How To Use prepare pip3 install ipcalc,requests usage python3 scanner.py Copyright some part of this repository is inspired by paper.seebug.org with some changes for APIs of Router Scan Project...
CVE-2014-3704
Code Conversion to Python 3 This code is taken from "Drupal 7.0 7.31 - 'Drupalgeddon' SQL Injection Add Admin User" and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Drupal". The original code was written in Python 2,...
my-CVE-2021-1675
= Print Nightmare Analysis Report :imagesdir: Figures :toc: :icons: font :figure-caption: Figure :xrefstyle: short :pdf-theme: basic-theme.yml On June 29, 2021, a very severe Windows Print Spooler vulnerability was exposed as a 0-day, with a base score of 8.8, and was published on GitHub now...
CVE-2026-25643
Frigate NVR β€ 0.16.3 Blind RCE Exploit CVE-2026-25643 PoC π Description This Python exploit targets a critical configuration manipulation vulnerability in Frigate NVR versions up to 0.16.3 both authenticated and unauthenticated paths. By injecting a malicious go2rtc stream and a fake camera entry...
corsair_scan
Welcome to Corsairscan Corsairscan is a security tool to test Cross-Origin Resource Sharing CORS misconfigurations. CORS is a mechanism that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served. If this is not...
React2Shell
React2Shell - CVE-2025-55182 & CVE-2025-66478 Author: LAKSHMIKANTHAN K letchupkt Instagram: @letchupkt Version: 2.0.0 Obfuscated Date: 2025-12-07 π Quick Start Run the Scanner python react2shell.py That's it! The scanner will: 1. Verify its integrity 2. Decompress the code 3. Execute normally All...
PowerShellForPentesters
PowerShellForPentesters Playlist Link - https://youtube.com/playlist?list=PLJQHPJLjSQatUsJy3O4k-VQlllquDmDr PowerShell for Pentesters is a basic introduction to using PowerShell on internal penetration tests. This course is essentially the PowerShell module from my popular Movement, Pivoting, and...
CVE-2026-46595-proof
CVE-2026-46595 proof https://vulners.com/cve/CVE-2026-46595 is https://pkg.go.dev/vuln/GO-2026-5023 a vulnerability in golang.org/x/crypto/ssh NewServerConn symbol as noted in the seocnd link. This repo contains a simple program which demonstrates a positive vulnerability check. A minimal...
CVE-2026-31431_je_sappelle_RoOt
CVE-2026-31431 - Copy Fail - Je s'appelle ROOT ! π Repository Purpose This repository documents the CVE-2026-31431 vulnerability, nicknamed Copy Fail , and provides a defensive remediation procedure for potentially exposed Linux systems. β οΈ This repository is strictly focused on defense, authorize...
PortGuard
Port-Guard Port-Guard is a USB port management and security tool designed for Debian. It allows you to control access to USB devices , maintain a custom whitelist , and run an automatic background scan to detect any unauthorized connection. β οΈ Beta version : The software is functional, but...
pentmenu
pentmenu δΈζθ―΄ζ A bash select menu for quick and easy network recon and DOS attacks Sudo is implemented where necessary. Tested on Debian and Arch. Contributions and pull requests are most welcome! Requirements: bash sudo curl netcat must support '-k' option, openbsd variant recommended hping3 or...