CVE-2023-5360

CVE-2023-5360 Elementor File Upload Exploit The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE. / / | / / / / / | | / / / / / | |/ /// /...

XSS-LOADER

💎 XSS-LOADER TOOLS 💎 Written by TMRSWRR Version 1.0.0 All in one tools for XSS PAYLOAD GENERATOR -XSS SCANNER-XSS DORK FINDER Instagram: TMRSWRR 📷 Screenshots 📷 👇 💌 How to use 💌 👇 📒 Read Me 📒 This tool creates payload for use in xss injection Select default payload tags from parameter or write yo...

Lucifer

Lucifer Codacy Badge Initial Release: 09/09/2020 Setup git clone https://github.com/Skiller9090/Lucifer.git cd Lucifer pip install -r requirements.txt python main.py --help If you want the cutting edge changes add -b dev to the end of git clone https://github...

sRDI

sRDI - Shellcode Reflective DLL Injection sRDI allows for the conversion of DLL files to position independent shellcode. It attempts to be a fully functional PE loader supporting proper section permissions, TLS callbacks, and sanity checks. It can be thought of as a shellcode PE loader strapped t...

CVE-2026-63292

⚠️ CVE-2026-63292 — Apache HTTP Server Security Vulnerability 🔐 --- 🔎 Overview CVE-2026-63292 is a stack-based buffer overflow vulnerability affecting the Apache HTTP Server modvhostalias module. The issue can be triggered under specific server configurations involving oversized HTTP Host headers...

hwbp4mw

This article was origininally for VX-Underground Black Mass Halloween Edition 2022. Hooking Engines: Multi-thread safe x86/x64 hwbp hooking engine c PAGEGUARD/hwbp Breakpoint Library c++20 hwbp Library DLL example c++20 Generic x64 user-land evasion technique utilizing debug registers:...

Scavenger

Scavenger - OSINT Bot - 3.0 bot in action Intro Just the code of my OSINT bot searching for sensitive data leaks on paste sites. email:password combinations are always collected. It detects sensitive information based on the file searchterms.txt and some regexes in classes/utility.py. Search term...

CVE-2024-37054

CVE-2024-37054 — MLflow Pickle Deserialization RCE Proof-of-concept exploit for a critical pickle deserialization vulnerability in MLflow Tracking Server, enabling authenticated remote code execution. ⚠️ For educational and authorized security testing only. Do not use against systems you do not ow...

zeek-netsupport-detector

NetSupport Background https://unit42.paloaltonetworks.com/cortex-xdr-detects-netsupport-manager-rat-campaign/ Testing PCAP: https://app.any.run/tasks/b5d9853f-0dca-45ef-9532-83feeedcbf42 Example: $ zeek -Cr b5d9853f-0dca-45ef-9532-83feeedcbf42.pcap $ cat notice.log separator \x09 setseparator ,...

laurel

Linux Audit – Usable, Robust, Easy Logging LAUREL is an event post-processing plugin for auditd8 that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups. Documentation corresponding to the latest stable release can be found here. Why? TLDR: Instead of...

wordpress-CVE-2018-6389

wordpress-CVE-2018-6389 Metasploit module for WordPress DOS load-scripts.php CVE-2018-638...

CVE-2022-21587-Oracle-EBS-

Prerequirement for this exploit to run: python3 including module requests, os, sys, slipit uuencode Before you run, make sure to use for only on ethical duties if the exploit Fail to run: Make sure you already install the pre req module install requests pip3 install requests Install slipit, git...

jd

jd...

zappzarapp-php-security

⚡ zappzarapp/security Comprehensive PHP security library providing CSP, Security Headers, CSRF protection, Secure Cookies, Password Validation, Input Sanitization, Rate Limiting, SRI, Secrets Loading, Encryption, Session Security, TOTP two-factor authentication, Signed URLs, and Security Event...

CVE-2026-68376-Ubuntu-7.0.0-30-Poc

CVE-2026-68376-Ubuntu-7.0.0-30-Poc Overview This project contains a Proof-of-Concept PoC exploit for CVE-2026-68376, targeting Ubuntu kernel version 7.0.0-30. The exploit leverages a vulnerability in the SCTP Stream Control Transmission Protocol implementation to achieve privilege escalation...

CVE-2024-11393

CVE-2024-11393 Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious...

Nullify

Nullify Secure. Transparent. Nullified. Nullify is an open source, modular data retention, deletion, and lifecycle governance platform. It provides a centralized framework for discovering data, evaluating retention policies, executing controlled lifecycle actions, and maintaining verifiable audit...

ESP32Marauder

ESP32 Marauder A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32 Getting Started Download the latest release of the firmware. Check out the project wiki for a full overview of the ESP32 Marauder FCC module identifiers The Device Info screen reports the FCC ID of the radio modu...

IoT-Pentest-devices-and-purpose

IoT Pentest Devices and Their Purpose - 2025 Edition This document outlines the latest tools and hardware for IoT security testing in 2025, covering different protocols and technologies. It includes cutting-edge attacks, newly discovered vulnerabilities, and updated hardware and software tools wi...

f8x

A brand-new IaC automated deployment tool RedC, built on Terraform + Wails GUI for automated multi-cloud deployment and project orchestration—give it a try! Red/Blue team environment automation deployment tool Start • Options • Example • FAQ • License English | 简体中文 WgpSec Infra Ecosystem Within...