PT-2026-116076

Antiword through 0.37 contains a heap out-of-bounds read vulnerability in vGet8LstInfo in prop8.c caused by an inverted bounds check on the PlcfLst record count. Attackers can supply a crafted Word 8 .doc file claiming up to 0xffff LSTF records in a tiny buffer, causing reads past the heap...

BadRentdrv2

BadRentdrv2 A vulnerable driver exploited by me BYOVD that is capable of terminating several EDRs and antivirus software in the market, rendering them ineffective, working for both x32 and x64. How does it work? Compile targeting the legacy x32 architecture for a wider attack range. In an elevate...

Loki-RS

Loki-RS A rewrite of Loki in Rust. High-performance, multi-threaded YARA & IOC scanner in a single binary. Status : Beta. Works, but still under active development. Features YARA scanning of files and process memory yara-x IOC matching MD5/SHA1/SHA256 hashes, filename patterns, C2 indicators...

frida-ui

Frida UI A modern, lightweight, web-based user interface for Frida, designed for Android application penetration testing. It allows you to interact with devices, processes, and scripts directly from your browser. Quick Start Install using uv recommended or pipx/pip uv tool install frida-ui Or: pi...

Firefox-CVE-2024-9680

Firefox CVE-2024-9680 CVE-2024-9680 Description An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox 131.0.2, Firefox E...

CVE-2020-0001

CVE-2020-0001 POC to run system component in an untrusted-app process Blog https://zachinio.com/blogs/cve-2020-0001 How to use Run the app, make sure the process "com.android.settings" does not exist, and click the "start service" button. Launch the settings app or wait for a system component to...

CVE-2025-1055-poc

CVE-2025-1055-poc PoC for CVE-2025-1055 and CVE-2025-52915 using K7RKScan.sys. This PoC use the 0x222018 IOCTL to terminate arbitrary processes. Usage Installing driver: sc.exe create K7RKScan1516.sys binPath=C:\Users\Administrator\Downloads\K7RKScan1516.sys type=kernel && sc.exe start...

pacumen

There is no nead to install. But run python setup.py build to install dependancies automatically...

CVE-2021-23758-POC

CVE-2021-23758-POC this repo has been created for training on the vulnerability in the ajaxpro. disclosed with the ID number CVE-2021-23758. POC POST /ajaxpro/CVE202123758POC.demo,CVE202123758.ashx HTTP/2 Host: localhost:44375 Content-Length: 567 Sec-Ch-Ua: " Not A;Brand";v="99", "Chromium";v="96...

DatajackProxy

Datajack Proxy Datajack Proxy a tool to intercept non-HTTP traffic between a native application and a server. This would allow for communications interception and modification, even if encryption and certificate pinning were in use. This is done by hooking the application and intercepting calls t...

DetectWindowsCopyOnWriteForAPI

Windows Process Property Enumeration Tools for Threat Hunting Background The purpose of these tools is to enumerate traits of Windows processes that support the detection of process injection tradecraft used by threat actors. Tools d-cow - Windows Copy on Write Detector for shared Windows APIs e....

insject

Insject insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces. It supports three main use-cases: LDPRELOAD-mode using libsetns.so LDPRELOAD=./libsetns.so SETNSARGS="..." Running a host command in a container insject...

KilledProcessCanary

Windows Killed Process Canary A Windows Service to detect if it has been shutdown and hibernate if multiple instances are. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com...

memgrep

Memory grep A memory searching utility across multiple processes Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/memgrep Released under AGPL see LICENSE for more information...

memscan

memscan Searches for strings, regex, credit card numbers of magnetic stripe card tracks in a process's memory space Memory/Process Scanner Written by Matt Lewis, NCC Group 2014 Updated by Tom Watson, NCC Group 2015 Thanks to Jesse Bullock for lots of great ideas Released as open source by NCC Gro...

CVE-2022-39197-RCE

CVE-2022-39197-RCE First This project was modified from @its-arun project https://github.com/its-arun/CVE-2022-39197 When I tested the script, I found that the frida script could not query the data in the normal order. The method of modifying the frida script to modify the process name. Thanks to...

WindowsJobLock

Windows Process Lockdown Using Job Objects A Microsoft Windows Process Lockdown Tool using Job Objects Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/WindowsJobLock Released...

WindowsDACLEnumProject

Windows DACL Enum Project A collection of tools to enumerate and analyse Windows DACLs Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/WindowsDACLEnumProject Released under AGPL...

CVE-2020-28243

CVE-2020-28243 A command injection vulnerability in SaltStack's Salt allows for privilege escalation via specially crafted process names on a minion when the master calls restartcheck. For a full writeup please see this blog post Affected Versions: All versions between 2016.3.0rc2 and 3002.2 Link...

PowerShell-Suite

PowerShell-Suite There are great tools and resources online to accomplish most any task in PowerShell, sometimes however, there is a need to script together a util for a specific purpose or to bridge an ontological gap. This is a collection of PowerShell utilities I put together either for fun or...