BlueSpy

BlueSpy - PoC to record audio from a Bluetooth device This repository contains the implementation of a proof of concept to record and replay audio from a bluetooth device without the legitimate user's awareness. The PoC was demonstrated during the talk BSAM: Seguridad en Bluetooth at RootedCON 20...

Q-DDOS-GUI

Q-DDOS-GUI DDOS WRITTEN IN C TCP/HTTP/HTTPS ddos written in c . Attack on tcp, http and https protocol. Attack with ddos choosing a random TIMEOUT between a range of seconds or with a defined Timeout. Select the number of threads you want to use. check the stop all box to stop all threads and...

CVE-2020-0683

CVE-2020-0683 Original Poc sent to MSRC. Assigned to CVE-2020-0683 - Windows Installer Elevation of Privilege https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-0683 Source code for Visual Studio C++ 2017 Please read the PDF that describes all the findings and steps to...

Log4j_CVE-2021-45046

Log4j 2.15.0 Privilege Escalation -- CVE-2021-45046 Attack Discription It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map MDC input data when the logging...

CVE-2020-17008

CVE-2020-17008 splWOW64 Elevation of Privilege C:\Windows\splwow64.exe Poc From: https://bugs.chromium.org/p/project-zero/issues/detail?id=2096 0x01 set splwow64poc.exe Low cd splwow64poc\x64\Release icacls splwow64poc.exe /setintegritylevel L /setintegritylevel CIOI级别将完整性 ACE 显式...

CVE-2023-51764-POC

based on https://github.com/duy-31/CVE-2023-51764 and https://events.ccc.de/congress/2023/hub/en/event/smtpsmugglingspoofinge-mailsworldwide/?trk=publicpostcomment-text its just some poc port to python 3.x...

investigations

Investigations This repository contains indicators of compromise extracted from some of Amnesty International's technical investigations in targeted threats against human rights defenders. These indicators are shared under the license CC-BY...

IOCs

//////////////// ////////////////////// // //////////////////////// // /// /////// ///// /////// /////// /////// /////// //////// //////// //////// //////// //////// //////// //////// //////// //////// //////// /////// /////// /////// /////// ///// // ////// // // /////////////////////////...

CVE-2025-55184-POC-Expolit

🔥 CVE-2025-55184 Advanced Exploitation Tool Professional React Server Components DoS Exploitation Framework "KEEP LEARNING KEEP HACKING" - CyberTechAjju 🚀 Quick Start • 📖 Documentation • 💻 Features • ⚠️ Disclaimer 🎯 About CVE-2025-55184 CVE-2025-55184 is a high-severity Denial of Service DoS...

CVE-2021-33739-POC

CVE-2021-26868 LPE & CVE-2021-33739 POC...

CheckHKRCE

CheckHKRCE CVE-2021-36260 Source code based on: https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py Install Python 3.8 + pip install requests Windows 10 OS, Linux Ubuntu Used python3 CheckHKRCE.py --rhost 192.168.1.11 --rport 80 --check CheckHKRCE.exe --rhost 192.168.1.11 --rport 80 --check...

phpstress

phpstress Night Lion Security proof of concept denial of service / stress tester for PHP websites running with Apache and NGINX systems PHP-FPM and PHP-CGI Using a standard cable/DSL connection, this attack can flood a Linux web server’s CPU and RAM using standard HTTP requests. This attack effec...

CVE-2019-1253

CVE-2019-1253 AppXSvc Arbitrary File Security Descriptor Overwrite EoP I have independently reported this vulnerability to MSRC, however, my submission turned out to be a duplicate due to the fact that the fix for CVE-2019-1253 also addressed this issue. My PoC differs from the ones created by...

CVE-2017-1000117

CVE-2017-1000117 PoC Repository for VulApps Fork from joernchen/CVE-2017-1000117 git clone --recursive https://github.com/VulApps/CVE-2017-1000117.git will write the output of id to a file vul in /var/www/html. See More at VulApps...

Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway

Summary Security Vulnerabilities affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-66142 DESCRIPTION: Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may...

CVE-2026-92542

A flaw was found in Moby. Firewall rules for encrypted Swarm overlay networks fail to distinguish between authentic kernel traffic and packets crafted by user processes. A local attacker can exploit this flaw by sending forged Virtual Extensible LAN VXLAN datagrams matching the overlay network...

CVE-2021-44228

CVE-2021-44228 PoC Log4Shell ⚠️ Disclaimer: This tool is intended for educational purposes, security research, and controlled test environments only. Using it against systems without explicit permission is illegal and entirely the responsibility of the user. 📌 Description This project contains a...

xpc-string-leak

xpc-string-leak xpc-string-leak is a proof-of-concept exploit for an out-of-bounds memory read in libxpc. This exploit uses the vulnerability to read out-of-bounds heap memory from diagnosticd, an unsandboxed root process with the taskforpid-allow entitlement. The vulnerability: CVE-2018-4248 On...

CrackKeyIso

CVE 2023 28229 Windows CNG KeyIso RPC EoP/SBX Discovered by: @k0shl - @Y3A Educational purposes only!...

CVE_2025_24257----NOT-MINE

🔧 CVE202524257----NOT-MINE - Run the Windows PoC Safely 🧾 Overview CVE202524257----NOT-MINE is a Windows proof of concept that shows a kernel memory bug in IOGPUFamily. It is based on a bitmapmask underflow that can lead to a kernel heap out-of-bounds write. This project is the first public PoC...