openocd

Welcome to OpenOCD OpenOCD provides on-chip programming and debugging support with a layered architecture of JTAG interface and TAP support including: XSVF playback to facilitate automated boundary scan and FPGA/CPLD programming; debug target support e.g. ARM, MIPS: single-stepping,...

CVE-2024-37888

CVE-2024-37888 This repository documents vulnerability details and exploit for CVE-2024-37888 discovered and reported by myself. Metrics CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' CVSS: 6.1 MEDIUM Vulnerability Overview This Proof of Concept POC...

CVE-2023-21739

CVE-2023-21739 Windows Bluetooth Driver Elevation of Privilege Vulnerability. authentication| complexity| vector ---|---|--- not available| not available| not available confidentiality| integrity| availability ---|---|--- not available| not available| not available CVSS Score: not available...

Stracciatella

Stracciatella v0.7 Powershell runspace from within C aka SharpPick technique with AMSI, ETW and Script Block Logging disabled for your pleasure. Nowadays, when Powershell got severly instrumented by use of techniques such as: AMSI ETW Script Block Logging Transcript file Modules logging Constrain...

frida-extract

FridaExtract FridaExtract is a Frida.re based RunPE extraction tool. RunPE type injection is a common technique used by malware to hide code within another process. It also happens to be the final stage in a lot of packers : NOTE: Frida now also supports extraction of injected PE files using the...

EXCELntDonut

root@kitploit: | \ / / | | | | || \ | | | | \ / | | | | | | ' | | | | |/ | ' | | | | | | | / \ || || || | | | || || | | | | | || | | |//\|||| |||/ /|| ||,|| by @JoeLeonJr @FortyNorthSec EXCELntDonut is a XLM Excel 4.0 macro generator. Start with C source code EXE and end with a XLM Excel...

CVE-2023-08-21-exploit

Exploit Title: Axigen if xhr1.readyState === XMLHttpRequest.DONE hcookie = new URLxhr1.responseURL.search.split"="1...

Zerodapi

Zerodai Documentation Start! root@kitploit: pip install zerodai==0.0.0.20 root@kitploit: export zerodapikey="YOURAPIKEY" Get your api key https://zerodai.com Simple Conversational Chat - No memory root@kitploit: from zerodai import zerodai import os zerodai.apiauthos.getenv"zerodapikey" messages ...

tfc

Tinfoil Chat Tinfoil Chat TFC is a FOSS+FHD peer-to-peer messaging system that relies on high assurance hardware architecture to protect users from passive collection, MITM attacks and most importantly, remote key exfiltration. TFC is designed for people with one of the most complex threat models...

Singularity

Singularity - Stealthy Linux Kernel Rootkit "Shall we give forensics a little work?" This project was inspired by a very special woman to me: Mocinha Singularity is a powerful Linux Kernel Module LKM rootkit designed for modern 6.x kernels. It provides comprehensive stealth capabilities through...

ThrottleStopPoC

ThrottleStopPoC CVE-2025-7771 : Arbitrary physical memory and I/O port read/write via ThrottleStop driver ThrottleStop is a small legitimate application used to monitor and correct CPU throttling. It has a driver that faciliates these tasks and it mostly doesn't have any sort of input validation...

D4TA-HUNTER

Video Demo: https://darkhacking.es/d4ta-hunter-framework-osint-para-kali-linux My website: https://microjoan.com My blog: https://darkhacking.es/ Buy me a coffee: https://www.buymeacoffee.com/microjoan DISCLAIMER This toolkit contains materials that can be potentially damaging or dangerous for...

CVE-2026-90792

A null pointer dereference in the gf_node_list_get_child function (file scenegraph/base_scenegraph.c) of GPAC MP4Box (affected up to commit f1219cde) allows a remote attacker to crash the application by manipulating the Target argument. User interaction is required, and the primary impact is avai...

CVE-2026-90792 GPAC MP4Box base_scenegraph.c gf_node_list_get_child null pointer dereference

A flaw has been found in GPAC up to f1219cde. This issue affects the function gfnodelistgetchild of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation of the argument Target causes null pointer dereference. The attack is possible to be carried out remotely. The exploi...

CVE-2026-90792 GPAC MP4Box base_scenegraph.c gf_node_list_get_child null pointer dereference

A flaw has been found in GPAC up to f1219cde. This issue affects the function gfnodelistgetchild of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation of the argument Target causes null pointer dereference. The attack is possible to be carried out remotely. The exploi...

EUVD-2026-77613

A flaw has been found in GPAC up to f1219cde. This issue affects the function gfnodelistgetchild of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation of the argument Target causes null pointer dereference. The attack is possible to be carried out remotely. The exploi...

DuplexSpyCS

DuplexSpy DuplexSpyCS CS stands for CSharp is a open source RAT base on C/S Continuously update: Branch-Version2.1.0 Documents The online documents are here: DuplexSpy Fileless Execution DLL and shellcode injector and loader Remote Plugin Proxy Introduction DuplexSpy is a open-source Windows RAT...

CVE-2025-55182-research

CVE-2025-55182 - React Server Components RCE NOTE: Written by AI/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 is a critical RCE vulnerability in React's Flight Protocol. The attack chains path traversal + fake chunk injection + $B handler abuse to execute...

CVE-2020-14882-WebLogic

CVE-2020-14882 WebLogic Connect with me: Check YouTube - https://youtu.be/O0ZnLXRY5Wo Screenshot:...

Prineo_RE

About PriPara internal name Prineo is an arcade rythm game developed by SynSophia. Goal The goal of this project was to reverse the model format of the arcade series in order to port exclusive characters to the newer version of game on Nintendo Switch. Screenshots Some interesting screenshots tak...