4780319 matches found
ipxe
iPXE network bootloader iPXE is the leading open source network boot firmware. It provides a full PXE implementation enhanced with additional features such as: boot from a web server via HTTP or HTTPS, boot from an iSCSI, FCoE, or AoE SAN, control the boot process with a script, create interactiv...
firecrawl-mcp-server
Firecrawl MCP Server A Model Context Protocol MCP server that brings Firecrawl to MCP-compatible AI agents β search, scrape, and interact with the live web for clean, agent-ready context. Big thanks to @vrknetha, @knacklabs for the initial implementation! Features Search the web and get full page...
searxng
.. SPDX-License-Identifier: AGPL-3.0-or-later .. metasearch engine: https://en.wikipedia.org/wiki/Metasearchengine .. Installation guide: https://docs.searxng.org/admin/installation.html .. Configuration guide: https://docs.searxng.org/admin/settings/index.html .. CONTRIBUTING:...
js-driveby-download-CVE-2006-4777
js-driveby-download-CVE-2006-4777 client-side malware exploiting vulnerability in Internet Explorer 6.0 SP1 on Windows XP SP2. Requires no user consent and does not download any file. Shell Code Injection into RAM from JavaScript with IE on Windows XP. Fileless, drive-by-download, client side...
Pwn ARM NFC
Challenge ARM buffer overflow via NFC tag This project is an open-source and funny to make low-level challenge. Feel free to improve it or use it in your own projects. Each file is distributed "as is" in the hope that it will be useful, but without any warranty expressed or implied. File tree...
CVE-2023-35078
CVE-2023-35078 shodan dorks You can use the following shodan dorks to find public targets. http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs You can use the following to transform data from shodan API to format suitable for the checking script: jq -cr 'select.http.favicon.hash ==...
CVE-2025-24893-POC
CVE-2025-24893 Install bun: curl -fsSL https://bun.com/install | bash To install dependencies: bun install To run: bun run CVE-2025-24893.ts This project was created using bun init in bun v1.2.19. Bun is a fast all-in-one JavaScript runtime. How to use: Usage: bun CVE-2025-24893.ts options Option...
ScannerCVE-2021-3156
ScannerCVE-2021-3156 Script to scan a list of hosts to check if they are vulnerable to CVE-2021-3156. If not vulnerable, the output is as follows: sudoedit: a terminal is required to read the password; either use the -S option to read from standard input or configure an askpass helper sudoedit: a...
safer-dependencies
Safer Dependencies for Claude Code When AI coding assistants like Claude add packages to your project, they often pick whatever version sounds right β without checking whether it has known security vulnerabilities, whether the package is still actively maintained, or whether the name is a typo aw...
preflight
Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...
CVE-2018-6574-POC
This repository does not have a README...
google_explorer
Welcome to Google Explorer Special thanks to ArchStrike and BlackArch for supporting ; + Google Mass Explorer PYTHON 3.6 This is a automated robot for google search engine and a massive exploitation tool. Make a google search and run a specific --plugin on the results. The dork you use is the key...
CVE-2019-12189
CVE-2019-12189 - Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability Information Description:XSS was discovered in ManageEngine ServiceDesk Plus version Versions Affected: 9.3 Researcher: Dang The Tuyen Proof-of-concept The vulnerability stems from the confusion of both single quotes and...
CVE-2025-57520-Stored-XSS-in-Decap-CMS-3.8.3-
CVE-2025-57520 β Stored XSS in Decap CMS Steps 1. Login as Contributor/Editor low privilege. 2. Create a new blog entry. 3. Insert the payload into one of the vulnerable fields e.g., title. 4. Save the entry. 5. Login as Admin high privilege. 6. Open the entry in Preview. 7. Payload executes in t...
cve-2022-0847dirtypipe-exploit
cve-2022-0847dirtypipe-exploit...
CVE-2023-38829-NETIS-WF2409E
CVE-2023-38829-NETIS-WF2409E NETIS SYSTEMS Router WF2409E Command Injection PoC Vulnerability Description: The ping and traceroute functions of the NETIS SYSTEMS Router WF2409E version V3.6.42541 are susceptible to command injection attacks. Malicious input can be crafted in the parameters of the...
CVE-2019-0708
This repository does not have a README...
Linux-for-a-Pentester
π§ Linux for a Pentester π "Theory is great, but the shell is where the magic happens." This repository is a curated collection of Linux command notes built from real-world labs, CTFs, and hands-on practice. No fluff, just the raw commands and practical notes needed for a Pentester. π Repository...
Netryx-OpenSource-Next-Gen-Street-Level-Geolocation
NETRYX Open-Source Street-Level Geolocation Engine Upload any street photo. Get precise GPS coordinates. Sub-50m accuracy. No landmarks needed. Runs entirely on your hardware. Demos Β· How It Works Β· Getting Started Β· Usage Β· FAQ THIS VERSION IS OLD, USE THIS INSTEAD NEW REPO What is Netryx? Netry...
brash
Brash Chromium Browser DoS Attack via document.title Exploitation Brash is a critical vulnerability in Blink , the rendering engine that powers Google's Chromium-based browsers. It allows any Chromium browser to collapse in 15-60 seconds by exploiting an architectural flaw in how certain DOM...