aura

.. image:: https://cdn.sourcecode.ai/imgs/logotype.png :target: https://aura.sourcecode.ai/ ====== .. class:: center |homepageflair| |docsflair| |dockerflair| |licenseflair| |travisflair| |pypiflair| Source code auditing and static code analysis Aura is a static analysis framework developed as a...

papers-we-love

Papers We Love PWL is a community built around reading, discussing and learning more about academic computer science papers. This repository serves as a directory of some of the best papers the community can find, bringing together documents scattered across the web. You can also visit the Papers...

SMB_CVE-2025-24071

CVE-2025-24071 PoC SMB + TAR Extraction Method This is a PoC for exploiting CVE-2025-24071 , a vulnerability in Windows that allows NTLM hash leakage via .library-ms files. This version diverges slightly from others by using a .tar archive instead of a .zip, which improves compatibility in SMB-on...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP,...

creadur-rat-gradle

Apache RAT Release Audit Tool Gradle Plugin This plugin allows to run the Apache RAT release audit tool, focused on licenses. Installation In your build.gradle.kts file: plugins id"org.nosphere.apache.rat" version "0.8.1" Usage The plugin registers a task named rat that you can configure in your...

gixy

GIXY Overview Gixy is a tool to analyze Nginx configuration. The main goal of Gixy is to prevent security misconfiguration and automate flaw detection. Currently supported Python versions are 2.7, 3.5, 3.6 and 3.7. Disclaimer: Gixy is well tested only on GNU/Linux, other OSs may have some issues...

firepwner

CVE-2015-6357: FirePWNER Exploit for Cisco FireSIGHT Management Center SSL Validation Vulnerability Introduction On its own the Cisco FireSIGHT Management Center Certificate Validation Vulnerability3 is a medium severity vulnerability with a CVSS of 5.1. However, this vulnerability is an example ...

hyperhives-macos-infostealer-analysis

HyperHives macOS Infostealer — Full Technical Analysis Threat intelligence: Rust-based macOS universal binary infostealer delivered through a fake job interview pipeline on Wellfound formerly AngelList. The operator persona "Felix" from "HyperHive" lured targets into running a malicious installer...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

CVE-2020-35391-POC

Welcome to CVE-2020-35391-POC 👋 Tenda N300 Authentication Bypass via Malformed HTTP Request Header Python POC Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information possibly including an httppasswd line via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, ...

CVE-2018-20250-WINRAR-ACE-GUI

CVE-2018-20250-WINRAR-ACE-GUI CVE-2018-20250-WINRAR-ACE Exploit with a UI. Original Code : https://github.com/blau72/CVE-2018-20250-WinRAR-ACE...

CVE-2026-34621

CVE-2026-34621 : Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain — Research PoC Overview This repository contains research material and proof-of-concept code developed during the analysis of the 2026 Adobe Acrobat Reader in-the-wild exploit chain involving: Prototype Pollution Interna...

claudleak

claudleak Scans public GitHub repositories for leaked credentials in AI coding tool configuration files .claude/, .cursor/, .continue/, .codex/, CLAUDE.md, AGENTS.md, etc.. Uses TruffleHog for secret detection. Example .claude/ directory: "permissions": "allow": "Bashgo build:",...

Egresser

Egresser Author: [email protected] Copyright: Cyberis Limited 2013 License: GPLv3 See LICENSE Client/server scripts designed to test outbound egress firewall rules. Description Egresser is a tool to enumerate outbound firewall rules, designed for penetration testers to assess whether egress...

r3con

R3CON Multifunctional Web Recon & Vulnerability Scanner Tool r3con is a Multifunctional Web Recon & Vulnerability Scanner Tool and incredibly fast crawler that can find multiple vulnerabilitys and gather information. Check for vulnerabilities Reflected XSS Multi-threaded crawling Open-redirection...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 is a critical security vulnerability discovered in the upstream tarballs of the xz utility, starting with version 5.6.0. This vulnerability involves malicious code that, through complex obfuscations, manipulates the build process of liblzma. What is this repo for? This...

CVE-2023-49313

CVE-2023-49313 A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data. Portable version...

CVE-2024-44902

CVE-2024-44902 Vulnerability description A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code. Affects Version Thinkphp v6.1.3 to v8.0.4 Exploit condition The thinkphp framework should have installed the Memcached extension. Vulnerability...

Shellcode-Test-Harness

Shellcode Test Harness A lightweight test harness designed to speed up shellcode development by providing an execution environment with integrated crash diagnostics and debug output redirection. Features Executes shellcode via module stomping Uses VEH to catch crashes: If the shellcode faults, it...

SilentNimvest

SilentNimvest Basically, SilentNimvest is a SAM and Security Hives parser written in Nim. SilentNimvest reads keys under these hives by using the Silent Harvest technique. With this technique, rather than a SYSTEM-level privilege, a plain Administrator account who enables SeBackupPrivilege thanks...