CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access. This repository contains a working proof-of-concept exploit for CVE-2026-20127, a critical pre-authentication vulnerability in Cisco Catalyst SD-WAN Controller formerly vSmart and...

ALPC-Enumerator

PPL-Aware ALPC Port Enumerator A Windows userland tool for enumerating and classifying Advanced Local Procedure Call ALPC ports, including those owned by PPL Protected Process Light processes where standard handle duplication fails. Standard enumeration tools often skip protected or access-denied...

PoC-public

PoC-public This repository collects PoC code that we published at various security conferences. Black Hat EU 2020 CODE BLUE 2021 Black Hat Asia 2023 CODE BLUE 2023...

Covenant

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers. Covenant is an ASP.NET Core, cross-platform application that includes a...

CVE-2024-22026

CVE-2024-22026 POC de exploit para CVE-2024-22026 que afecta a Ivanti EPMM "MobileIron Core" CVE-2024-22026 es una vulnerabilidad de escalada de privilegios local en las versiones del servidor Ivanti EPMM anteriormente MobileIron anteriores a 12.1.0.0, 12.0.0.0 y 11.12.0.1. Esta vulnerabilidad...

pytm

pytm: Un marco Pythonico para modelado de amenazas Introducción El modelado de amenazas tradicional a menudo llega tarde a la fiesta, o a veces no llega en absoluto. Además, crear flujos de datos e informes manuales puede ser extremadamente lento. El objetivo de pytm es desplazar el modelado de...

lutlol

Living Under the Land on Linux Material for talks with the same name at... BSides Belfast 2025 BSides Vienna 2025 The code isn't particularly usable as-is, but may be useful for reference. Helpful things: The src/ directory - Source code for most of the things in the talk ProcrastinationEDR -...

Silent-Call

Silent;Call Pre-authentication remote root on Cisco Unified Communications Manager 15.x Three HTTP requests. Zero credentials. Root access. Every call is now yours. Kill Chain Step| Component| Description ---|---|--- 1| Spoofhack| X-Forwarded-For header spoofing bypasses localhost restriction on...

SunnyDayBPF

SunnyDayBPF SunnyDayBPF is an eBPF-based post-syscall user-buffer telemetry deception research technique originally proposed and researched by Azizcan Dastan. The technique investigates whether data observed by user-space security, logging, or telemetry agents can be altered after a read-like...

drovorub-hunt

Dispatches from Drovorub: Network Threat Hunting for Russia GRU GTsSS' Malware at Scale Recently, the National Security Agency and Federal Bureau of Investigation released a report outlining command and control capabilities leveraged by the Russian General Staff Main Intelligence Directorate GRU...

steg-tools

steg-tools This is a list of tools and resources for learning and experimenting with steganography and information hiding. Tools Exiftool is a Perl library and a command line application for the manipulation of metadata of different files, including EXIF, GPS, XMP, and ID3. Strings is part of the...

crml

CRML — Lenguaje de Modelado de Riesgo Cibernético Estado: Borrador. Este proyecto está en desarrollo intenso y puede cambiar sin previo aviso. Agradecemos sugerencias, incidencias y contribuciones. ⚠️ ADVERTENCIA Este código se está desarrollando actualmente en la rama crml-dev-1.3. Para el último...

cve-2025-48384-poc

PoC for CVE-2025-48384 See CVE-2025-48384 To run: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Example output: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning into 'test'... done. 'ubmodule...

cuckooautoinstall

About CuckooAutoinstall Cuckoo Sandbox . auto install script What is Cuckoo Sandbox? Cuckoo Sandbox is a malware analysis system. What does that mean? It means that you can throw any suspicious file at it and get a report with details about the file's behavior inside an isolated environment. We...

Monitorizer

Monitorizer The Ultimate Subdomain Monitoring Framework Installation ❗ Disclaimer --- Admin users are able to execute code on the local server make sure to change the default password at otherwise use it at your own risk Using docker $ curl...

PortWitness

PortWitness v1.1 Written in Python2 This version of PortWitness has been developed in python2 in which modules like os,subprocess and sys etc have been used.The entire code is based on the concept of socket programming.Using Sockets we establish a connection with a web application to find out if...

privacytools.io

Encryption Against Global Mass Surveillance. Contributing This project is archived. See our Welcome to Privacy Guides post for more information. Our project has now moved on to Privacy Guides. It's important for a website on privacy to be up-to-date. Keep an eye on software updates of the...

GPEWebDefender

GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...

my-little-honeypot

my-little-honeypot Description This repository aims to show how easy it is to code a telnet honeypot in order to recovering IOT malwares, and thus, active Command & Control. This code has been released espacially because of the conference I gave at the INSHACK event in Lyon, France on April 6th...

CVE-2026-0073-PoC-Exploit

CVE-2026-0073 - Android ADB Wireless Debugging Auth Bypass Zero-Click | Remote Shell | Network Scanner | Educational Security Research Tool ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only...