pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

FakeImageExploiter

FakeImageExploiter v1.4 - backdoor images.jpg.ps1 CodeName: Metamorphosis Version release: v1.4 Stable Author: pedro ubuntu r00t-3xp10it Distros Supported : Linux Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 Legal Disclamer: The author does not hold any...

initroot

Exploiting CVE-2016-10277 More information at: https://alephsecurity.com/2017/06/07/initroot-moto/ If you just want to check if your device is vulnerable, it might be quicker if you just flash stock ramdisk without any modifications. If it's your case, just look for initroot--STOCK.cpio.gz...

root-s24-e1s

Root S24 e1s / S921BXXSDCZB2 Per-boot local root on Galaxy S24 SM-S921B firmware S921BXXSDCZB2 kernel 6.1.138-android14-11, then late-load KernelSU so me.weishu.kernelsu or com.rifsxd.ksunext reports Working LKM. Not affiliated with Root My Galaxy. No GitHub payload feed, no multi-device catalog...

volatility3

Volatility 3: The volatile memory extraction framework Volatility is the world's most widely used framework for extracting digital artifacts from volatile memory RAM samples. The extraction techniques are performed completely independent of the system being investigated but offer visibility into...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

BareMetal-RAM-Dumper

BareMetal RAM Dumper A simple x86 bare-metal tool designed to boot from a disk/USB and dump the system's RAM directly to the booting medium. It relies on BIOS interrupts to boot and perform disk operations, and enters unreal mode to access memory above the 1MB barrier. Background: Cold Boot Attac...

forensicscanner

This repository does not have a README...

Centry

Centry WARNING: THIS IS EXPERIMENTAL SOFTWARE. IT IS LIKELY TO CONTAIN BUGS. Updates If you have already installed Centry, please run git pull to update to the latest version. The latest updates make it much more secure against replay attacks. Introduction Centry is a panic button intended to...

LiMEaide

LiMEaide v2.0 by Daryl Bennett - kd8bnyatgmaildotcom About LiMEaide is a python application designed to remotely or locally dump RAM of a Linux client and create a volatility profile for later analysis on your local host. I hope that this will simplify Linux digital forensics in a remote...

fprobe

FProbe FProbe - Fast HTTP Probe Installation GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format with some...

Bypass-Sandbox-Evasion

Bypass-Sandbox-Evasion Sandboxes are commonly used to analyze malware. They provide a temporary, isolated, and secure environment in which to observe whether a suspicious file exhibits any malicious behavior. However, malware developers have also developed methods to evade sandboxes and analysis...

apachedos

This tool uses CVE-2016-8740 to crash servers running Apache HTTPD 2.4.17 - 2.4.23 that support HTTP2. It crashes these servers by forcing them to allocate insanely large amounts of RAM, making the computer unuasable. It can be downloaded here you will need to run it from the command line Usage:...

CVE-2026-128091

When MCUboot is built with the TinyCrypt crypto backend MCUBOOTUSETINYCRYPT, bootutilaesctrdrop in boot/bootutil/include/bootutil/crypto/aesctrtinycrypt.h was an empty stub. The AES-CTR context for this backend is the fully expanded AES-128 key schedule struct tcaeskeyschedstruct. Generic code...

CVE-2026-128091 AES key schedule not cleared by the TinyCrypt AES-CTR backend in MCUboot bootutil

When MCUboot is built with the TinyCrypt crypto backend MCUBOOTUSETINYCRYPT, bootutilaesctrdrop in boot/bootutil/include/bootutil/crypto/aesctrtinycrypt.h was an empty stub. The AES-CTR context for this backend is the fully expanded AES-128 key schedule struct tcaeskeyschedstruct. Generic code...

EUVD-2026-124811

When MCUboot is built with the TinyCrypt crypto backend MCUBOOTUSETINYCRYPT, bootutilaesctrdrop in boot/bootutil/include/bootutil/crypto/aesctrtinycrypt.h was an empty stub. The AES-CTR context for this backend is the fully expanded AES-128 key schedule struct tcaeskeyschedstruct. Generic code...

CVE-2026-128091

The MCUboot bootloader contains a vulnerability when built with the TinyCrypt crypto backend (MCUBOOT_USE_TINYCRYPT). The function bootutil_aes_ctr_drop() in boot/bootutil/include/bootutil/crypto/aes_ctr_tinycrypt.h was an empty stub, failing to clear the AES-128 key schedule from memory. This ca...

PT-2026-146109

When MCUboot is built with the TinyCrypt crypto backend MCUBOOT USE TINYCRYPT, bootutil aes ctr drop in boot/bootutil/include/bootutil/crypto/aes ctr tinycrypt.h was an empty stub. The AES-CTR context for this backend is the fully expanded AES-128 key schedule struct tc aes key sched struct...

AgentSmith-HIDS

AgentSmith-HIDS --The name of this project was inspired by the movie - The Matrix English | 简体中文 THIS REPO IS OLD RELEASE VERSION: https://github.com/bytedance/Elkeid About AgentSmith-HIDS Technically, AgentSmith-HIDS is not a Host-based Intrusion Detection System HIDS due to lack of rule engine...

bios_memimage

biosmemimage RAM imaging utility. Original code by Bill Paul [email protected] https://citp.princeton.edu/research/memory/code/...