VulnReach

VulnReach Runtime-aware SCA — proves which CVEs are actually reachable, not just installed. VulnReach is now an officialOWASP Project. 🎉 Demo Step 1 — SCA surfaces 74 CVEs across dependencies Step 2 — VulnReach proves which ones are actually reachable Findings — evidence chain per CVE Dashboard —...

glassworm-hunter

glassworm-hunter Detect GlassWorm supply chain attack payloads on your machine. Scans VS Code extensions, npm packages, Python packages, and git repositories. This scanner detects the attack technique itself - invisible Unicode variation selector payloads, GlassWorm decoder patterns, C2...

sony-vp-extract

Sony WH-1000XM4 Voice Pack Extractor Decrypt and extract the voice guidance MP3 prompts from Sony WH-1000XM4 encrypted firmware files. The AES-128-CBC key was extracted by dumping the he...

CVE-2022-26809

CVE-2022-26809 This repo just simply research for the CVE, for more detailed ananlysis,please refer here. UPDATE:05/19 2022 This ananlyze hasn't been finished yet.... UPDATE:05/22 2022 HuanGMz Post and corelight blog show the real vulnerable point: OSFCASSOCIATION::ProcessBindAckOrNak This...

-CVE-2023-30845

CVE-2023-30845 This is a script for CVE 2023-30845 automatically across multiple subdomains Metódos de uso: CLONE REPOSITORY| GIVE PERMISSION TO THE FILE| RUN THE FILE ---|---|--- https://github.com/himori123/-CVE-2023-30845.git| chmod +x CVE-2023-30845.sh| ./CVE-2023-30845.sh...

CVE-2024-14027_slop

CVE-2024-14027 - SlopSploit The exploits were tested on 6.6.51 using a Qemu debian install. exploit.c - will leak the shadow file. exploitdc.c - demonstrates the double close method to drop a root shell. WRITEUP.md - LLM generated writeup. This was an experiment using LLM Opus 4.6 to exploit a...

CVE-2026-31431-CopyFail-Linux-PrivEsc

CVE-2026-31431 CopyFail Linux Local Privilege Escalation A demonstration and explanation of CVE-2026-31431, the Linux Kernel Copy Fail Local Privilege Escalation vulnerability. The vulnerability allows for files opened with read permission to have data overwritten in the page cache. This reposito...

CVE-2024-38063

CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerability. The occurrence of BSOD can lead to RCE while my code only causes BSOD. I am continuously analyzing the patch and testing to lead to the occurrence of RCE in the target system. Star History Overview CVE-2024-38063 is a critical...

witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ docker build ...

CVE-2023-50164-ApacheStruts2-Docker

CVE-2023-50164 : Apache Struts 2 vulnerable Docker container Apache has recently released an advisory regarding CVE-2023-50164, a critical vulnerability with a severity rating of 9.8 that affects Apache Struts 2. CVE-2023-50164 is intricately tied to an organization's Apache Struts architecture a...

procinfo

procinfo A portable process inspector for Linux and macOS. Get details about any running process instantly! Also see procinfominimal.sh - pure sh implementation of procinfo. Installation curl -fsSL https://raw.githubusercontent.com/wenekar/procinfo/main/procinfo.sh -o procinfo chmod +x procinfo...

CVE-2015-1328-GoldenEye

CVE-2015-1328-GoldenEye about exploit: The overlayfs implementation in the linux aka Linux kernel package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveragi...

exploit-js2py

CVE-2024-28397 - js2py Sandbox Escape Description The CVE-2024-28397 vulnerability affects versions of js2py up to v0.74, a Python library that allows JavaScript code to be executed within the Python interpreter. The flaw is in the implementation of the disablepyimport method, which should preven...

asmsense

asmsense English · Türkçe A small language model that looks at a function in a stripped binary and gives it a meaningful name and a short description. Current status The v4 dataset contains 228,177 functions from 341 projects across 5 optimization levels and is published on Hugging Face under the...

CVE-2025-29927

🔍 CVE-2025-29927 - Next.js Middleware Bypass Detector This Python-based smart scanner helps detect the CVE-2025-29927 vulnerability in Next.js applications — a critical middleware bypass that allows attackers to skip authentication using a crafted HTTP header. 🧠 The tool identifies not only HTTP...

trufflehog-explorer

TruffleHog Explorer 🕵️‍♂️ Welcome to TruffleHog Explorer, a user-friendly web-based tool to visualize and analyze data extracted using TruffleHog. TruffleHog is one of the most powerful secrets discovery, classification, validation, and analysis open source tool. In this context, a secret refers to...

mks-copy-fail-mitigation

Copy Fail Mitigation DaemonSets DaemonSets for fixing vulnerabilities of the Copy Fail family on all worker nodes of MKS clusters. Contents CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail Vulnerability Description CVE ID: CVE-2026-31431 CVE...

vuke

vuke Research tool for analyzing and reproducing vulnerable Bitcoin key generation. Features Modular architecture - pluggable sources and transforms Multiple input sources Numeric ranges test weak seeds Wordlists brainwallet analysis Timestamps time-based PRNG exploitation Stdin streaming pipelin...

readme2demo

readme2demo — verified tutorials & demo videos from your README ▶ readme2demo generating its own tutorial: an AI agent runs this repo's README in a sandbox, a fresh container replays every step, then the demo is rendered. Full self-run output in examples/readme2demo · run against another project ...

CVE-2022-23935

Introduction CVE-2022-23935 exploit PoC exiftool version 12.37 Installation git clone https://github.com/0xFTW/CVE-2022-23935 cd CVE-2022-23935 chmod +x CVE-2022-23935.py pip3 install pwntools Usage ./CVE-2022-23935...