XPEViewer

PE file viewer/editor for Windows, Linux and MacOS. Download: https://github.com/horsicq/XPEViewer/releases How to run: https://github.com/horsicq/XPEViewer/blob/master/docs/RUN.md How to build: https://github.com/horsicq/XPEViewer/blob/master/docs/BUILD.md Changelog:...

prey-android-client

Here you will find all the source code for the current and in development releases of the Prey client for Android devices. Prey is a SaaS platform for device tracking, monitoring, data protection, and device management. Its open-source agent runs on endpoints and connects to a centralized control...

ethr

Ethr Ethr is a cross platform network performance measurement tool written in golang. The goal of this project is to provide a native tool for comprehensive network performance measurements of bandwidth, connections/s, packets/s, latency, loss & jitter, across multiple protocols such as TCP, UDP,...

Supershell

Supershell is a C2 remote control platform accessed through WEB services. By establishing a reverse SSH tunnel, a fully interactive shell can be obtained, and it supports multi-platform architecture Payload Features • Platform • Architecture • Build • Document • Demo • Disclaimer • Thanks 简体中文 •...

Vulnerability-scanner

With the increasing reliance of organizations on digital technologies to carry out communication, data storage, and business operations, the threats to cybersecurity have significantly increased. Given the critical role that endpoint security software plays in securing networks and systems, such...

minisign

Minisign A dead simple tool to sign files and verify signatures. Table of Contents Minisign Table of Contents Overview Documentation Installation Prebuilt Packages Building with Zig Building with CMake and GCC or Clang Usage Generating a Key Pair Signing Files Verifying Signatures Verification of...

CVE-2025-24893

CVE-2025-24893 PoC | XWiki Platform 15.10.10 - Remote Code Execution An RCE Remote Code Execution category vulnerability, found when unauthenticated attackers can execute arbitrary Groovy code remotely without authentication or prior access Guest User. Below is a PoC Proof-Of-Concept in Python fo...

garble

garble go install mvdan.cc/garble@latest or @master Obfuscate Go code by wrapping the Go toolchain. Requires Go 1.27 or later. garble build build flags packages The tool also supports garble test to run tests with obfuscated code, garble run to obfuscate and execute simple programs, garble revers...

Xenotix-xBOT

Xenotix-xBOT Xenotix xBOT is a proof of concept cross platform Linux, Windows, Mac bot written in Python that abuse certain Google Services to implement Command & Control Center for the botnet. The Google Apps Data API, Google Forms and Google Spreadsheet is abused to implement C2 for a bot...

Palsy-Virus

Palsy Virus Python virus that will make your pc paralyzed once it opened ,hides itself and adds itself to the registry startup ^^ Platform : -- Windows only :P...

TCL-xss-Labs

XSS Lab — The Cyber Ledger 💸 If this project helps you, consider supporting it with a $10 donation to keep it growing. Link: https://rzp.io/rzp/zgkC6h5B An interactive, self-hosted XSS training platform with 33 progressively harder challenges — designed for hackers, pentesters, and developers who...

OpenCRE

OpenCRE Go to https://www.opencre.org to see OpenCRE working and more explanation. OpenCRE stands for Open Common Requirement enumeration. It is an interactive content linking platform for uniting security standards and guidelines. It offers easy and robust access to relevant information when...

CVE-2024-50967

CVE-2024-50967 DATAGERRY Broken Access Control This vulnerability affects DATAGERRY platform in all versions up to and including 2.2.0 ≤2.2.0...

CVE-2026-85254

CVE-2026-85254 — camel-platform-http: request-header echo suppression bypass header-name case Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the guard that stops a request header being reflected into the response compared header names case-sensitively , while HTTP...

CVE-2024-48307POC

jeecg-boot getDictItemsByTable interface exists SQL injection vulnerability Parameters: options: -h, --help show this help message and exit -u URL, --url URL Please enter the URL to be detected -f FILE, --file FILE Please enter the file path containing one URL per line -c CONTENT, --content CONTE...

CVE-2025-32433

Working PoC for CVE-2025-32433 Blog post: https://platformsecurity.com/blog/CVE-2025-32433-poc...

OpenSC

OpenSC documentation Manual pages for the OpenSC command line tools as well as for the OpenSC configuration files are available online and typically distributed along with your installation. The OpenSC Wiki includes, among others, information for: Windows Quick Start macOS Quick Start Compiling a...

GhostESP

The ESP-IDF-native wireless security platform for ESP32. Deep Wi-Fi and BLE assessment, research-grade capture and export, and a real app ecosystem. Built directly on Espressif's ESP-IDF rather than through the Arduino core, so new silicon and radio features land first and there is no abstraction...

syzkaller

syzkaller - kernel fuzzer syzkaller siːzˈkɔːlə is an unsupervised coverage-guided kernel fuzzer. Supported OSes: FreeBSD, Fuchsia, gVisor, Linux, NetBSD, OpenBSD, Windows. Mailing list: [email protected] join on web or by email. Found bugs: Darwin/XNU, FreeBSD, Linux, NetBSD, OpenBSD, Window...

CVE-2020-13654

CVE-2020-13654 - XWiki Platform Discovered & reported by: Astaruf Full writeup: https://nstsec.com/en/posts/xwiki-xss-cve-2020-13654/ NVD entry: https://nvd.nist.gov/vuln/detail/CVE-2020-13654 Vulnerability XWiki Platform before version 12.8 does not apply HTML encoding to user-controlled fields ...