hazel-cve-2026-43499

Hazel Fire TV temporary root Temporary root exploit for the Amazon hazel Fire TV platform, based on CVE-2026-43499. The exploit is is intended for the ARM32 Linux 4.9 firmware shared by Hazel televisions from several manufacturers. Profiles currently cover firmware from PS7657.3645N through...

CVE-2022-37017

CVE-2022-37017 Authentication bypass for Symantec Endpoint Protection 14.3.5351 Client User Interface Password Symantec Endpoint Protection allows setting a password protection on its UI to prevent configuration changes. This password check in implemented by logic that is neither in a Protected...

Windows10_Cumulative_Updates_PowerShell

Just use this - https://github.com/aaronparker/LatestUpdate Updates everything if ENTERPRISE or EDU Win 10. If PRO only 1809 , 1903 & 1909 are patched. Windows10CumulativeUpdatesPowerShell This powershell script can be ran on a system and will identify if a system is patched for CVE-2020-0601...

sh4d0wup

sh4d0wup % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low level tampering,...

snuffleupagus

Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...

snuffleupagus

Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...

Amsi-Bypass-Powershell

Sponsored by Amsi-Bypass-Powershell This repo contains some Antimalware Scan Interface AMSI bypass / avoidance methods i found on different Blog Posts. Most of the scripts are detected by AMSI itself. So you have to find the trigger and change the signature at the part via variable/function...

DirtyClone

DirtyClone DirtyClone is a diagnostic, proof-of-concept local privilege escalation tool written in C. It targets a kernel/XFRM-related exploit path described in the source as CVE-2026-43503 and is intended only for authorized security research in controlled environments. Overview This repository...

ofrak

OFRAK OFRAK Open Firmware Reverse Analysis Konsole is a binary analysis and modification platform. OFRAK combines the ability to: Identify and Unpack many binary formats Analyze unpacked binaries with field-tested reverse engineering tools Modify and Repack binaries with powerful patching...

patchkit

patchkit Patches an ELF binary using one or more simple Python scripts. Usage: patch patchdir|file... patchdir Contains one or more Python patch files, which will be executed in alphabetical order against a binary. Patch Examples Nopping an address, injecting an assembly function, and hooking the...

seal-security-nuget-demo-net7

Browser + CLI Demo NuGet/C — .NET 7 Edition Why a .NET 7 fork? This is a retargeted fork of the canonical seal-security-nuget-demo which targets net9.0. The exploit story, the controllers, and the sealed-package list are identical — only theTargetFramework differs. It exists because most enterpri...

rop-tool

rop-tool v2.4.2 A tool to help you write binary exploits OPTIONS rop-tool v2.4.2 Help you make binary exploits. Usage: rop-tool OPTIONS Commands : gadget Search gadgets patch Patch the binary info Print info about binary heap Display heap structure disassemble Disassemble the binary search Search...

Eneio64-LPE

Opens a handle to the vulnerable driver 2. Maps physical memory into userspace 3. Opens a handle to the System process 4. Queries the SystemHandleInformation table of the current process for the obatined system handle leaking its EPROCESS address. 5. Walks System EPROCESS ActiveProcessLinks...

Amsi-Killer

Lifetime AMSI bypass Opcode Scan we get the exact address of the jump instruction by searching for the first byte of each instruction this technique is effective even in the face of updates or modifications to the target data set. for example : | 48:85D2 | test rdx, rdx | | 74 3F | je...

Log4j-Updater

Log4j Updater With the inevitable need to update the famous Java framework called Log4j, numerous companies are needing to update Log4j on several computers at the same time, which takes time and cost, and that's where the Log4j Updater comes in. log4jupdater.sh is a simple bash script with the a...

Py-RDP-Patcher

Py-RDP-Patcher Py-RDP-Patcher is a tool made in python to patch the termsrv file to allow simultaneous RDP sessions Setup Guide: This script only requires the art library which is installed by executing : pip install art Requirements: Python3, Windows Limitations: For now this script only support...

donut

Current version: v1.1 Table of contents 1. Introduction 2. How It Works 3. Building 4. Usage 5. Subprojects 6. Developing with Donut 7. Questions and Discussions 8. Disclaimer 1. Introduction Donut is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL file...

Amsi_Bypass_In_2023

Amsi Bypass on Windows 11 In 2023 Technical details can be found in the article: https://medium.com/@gustavshen/bypass-amsi-on-windows-11-75d231b2cac6 AttackAmsiOpenSession.ps1 HRESULT AmsiOpenSession in HAMSICONTEXT amsiContext, out HAMSISESSION amsiSession ; This powershell script can be used t...

CVE-2020-5902

CVE-2020-5902 POC code for checking for this vulnerability. Since the code has been released, I decided to release this one as well. Patch Immediately! Usage: python3 CVE-2020-5902.py -u https://big-ip.com -o check 2/dev/null...

SigFlip

What is it ? SigFlip is a tool for patching authenticode signed PE files exe, dll, sys ..etc in a way that doesn't affect or break the existing authenticode signature, in other words you can change PE file checksum/hash by embedding data i.e shellcode without breaking the file signature, integrit...