fuzzable

Fuzzable Framework for Automating Fuzzable Target Discovery with Static Analysis Introduction Vulnerability researchers conducting security assessments on software will often harness the capabilities of coverage-guided fuzzing through powerful tools like AFL++ and libFuzzer. This is important as ...

exploits

Exploits Exploits and proof-of-concept code from the team at Hacker House. Filename| Description ---|--- AirWatchMDMJailbreakBypass.txt| Bypass jailbreak detection on mobile device management AirWatch for IOS adobe-psp.tgz| Adobe CoolType SING Table "uniqueName" Stack Buffer Overflow PSP bypass...

ADCollector

ADCollector ADCollector is a lightweight tool that enumerates the Active Directory environment to identify possible attack vectors. It will give you a basic understanding of the configuration/deployment of the environment as a starting point. Notes: ADCollector is not an alternative to the powerf...

CVE-2022-45701

EN This project provides a Python script to exploit a remote code execution RCE vulnerability CVE-2022-45701 in certain Arris routers. The vulnerability allows authenticated users to execute arbitrary commands on the device by manipulating SNMP settings via the web interface. Disclaimer : This to...

CVE-2024-30088

CVE-2024-30088 Bug: Bug is inside function AuthzBasepCopyoutInternalSecurityAttributes when kernel copies the AUTHZBASEPSECURITYATTRIBUTESINFORMATION of current token object to user mode, which has structure like this: //0x30 bytes sizeof struct AUTHZBASEPSECURITYATTRIBUTESINFORMATION ULONG...

Ares

Project Ares Project Ares Injector Project Ares Injector is a Proof of Concept PoC loader written in C/C++ based on the Transacted Hollowing technique. The loader injects a PE into a remote process and features: PPID spoofing CIG to block non-Microsoft-signed binaries Dynamic function resolution...

pipelock

Open-source AI agent firewall forVerifiable Egress Control. !pipelock...

snort3

Snort++ Snort 3 is the next generation Snort IPS Intrusion Prevention System. This file will show you what Snort++ has to offer and guide you through the steps from download to demo. If you are unfamiliar with Snort you should take a look at the Snort documentation first. We will cover the...

awesome-list

Awesome Cybersecurity List My personal collection of awesome blog posts, write-ups, and papers focusing on cybersecurity. For a deeper dive into cybersecurity-related tools, check out the dedicated Cybersecurity Tools list. Outline 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2014 2011...

zeek

The Zeek Network Security Monitor A powerful framework for network traffic analysis and security monitoring. Key Features — Documentation — Getting Started — Development — License Key Features In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at...

HFS_EXPLOIT_PROJECT

HFSEXPLOITPROJECT Metasploit RCE on HFS 2.3 - CVE-2014-62 🔖 Title of the Project Remote Code Execution via HTTP File Server HFS 2.3 ⚙ Tools Used • Kali Linux • Nmap • Metasploit • Target: HFS 2.3 on Windows 7 🔐 Vulnerability Details • Name: CVE-2014-6287 • Type: Remote Code Execution • Cause:...

CVE-2021-22205

CVE-2021-22205 Description - POC for CVE-2021-22205: Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP - create by antx at 2021-10-29. Detail - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file...

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

sogen

Sogen runs Windows and Linux programs without a real operating system, and lets you see and control everything they do. Instead of reimplementing thousands of OS APIs, Sogen emulates binaries at CPU and syscall level and runs the real system DLLs , so behavior closely matches the real OS. Every...

AdGuardHome

Privacy protection center for you and your devices Free and open source, powerful network-wide ads & trackers blocking DNS server. AdGuard.com | Wiki | Reddit | Twitter | Telegram AdGuard Home is a network-wide software for blocking ads and tracking. After you set it up, it'll cover ALL your home...

CVE-2025-24893-PoC

CVE-2025-24893 - XWiki Remote Code Execution RCE An updated proof-of-concept PoC exploit for CVE-2025-24893 , a critical unauthenticated RCE vulnerability in XWiki. This version improves on the original by allowing arbitrary shell command execution and clean reverse shell injection. By:...

CVE-2023-46818-python-exploit

CVE-2023-46818 exploit This is a python version of the original php script for the vulnerability affecting ispconfig 3.2.11 and previous versions. Original PHP source: https://packetstormsecurity.com/files/176126/ISPConfig-3.2.11-PHP-Code-Injection.html This proof-of-concept is intended for...

wasmforge

WasmForge WasmForge compiles Go and C programs to WebAssembly, then packages them as single native binaries. The resulting executables sandbox guest code inside a WASM runtime a per-build fork of wazero. From inside that sandbox, guests get transparent access to networking, raw sockets, Win32 API...

alibaba__nacos_CVE-2021-44667_2-0-3

Nacos: Dynamic Na ming and Co nfiguration S ervice What does it do Nacos official site: nacos.io is an easy-to-use platform designed for dynamic service discovery and configuration and service management. It helps you to build cloud native applications and microservices platform easily. Service i...

DjVuLibre-poc-CVE-2025-53367

1- WHAT IS DJVU. DjVu pronounced "déjà vu" a set of compression technologies, a file format, and a software platform for the delivery over the Web of digital documents, scanned documents, and high resolution images. DjVu documents download and display extremely quickly, and look exactly the same ...