K000162606: NGINX ngx_http_ssl_module vulnerability CVE-2026-97629

Security Advisory Description When NGINX Plus or NGINX Open Source is configured with sslsessioncache shared: : without an explicit sslsessionticketkey file directive to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a...

CVE-2026-20896

Proof of Concept Code CVE-2026-20896 This script automates the exploitation of the logic flaw in Gitea's API route validation, allowing to force the server to grant a valid administrative token through a Directory Traversal attack in the authorization header. !/usr/bin/env python3 PoC: Gitea...

CVE-2021-41773

Apache HTTP Server 2.4.49 - Path Traversal & RCE CVE-2021-41773 A sophisticated Python-based proof-of-concept PoC exploit for CVE-2021-41773. This tool automates the process of testing Apache 2.4.49 servers for path traversal and remote code execution RCE vulnerabilities. ⚠️ Legal Disclaimer This...

Router-Exploit-Shovel

Router Exploit Shovel Automated Application Generation for Stack Overflow Types on Wireless Routers Router exploits shovel is an automated application generation tool for stack overflow types on wireless routers. The tool implements the key functions of exploits, it can adapt to the length of the...

CVE-2025-7775-vulnerable-lab

CVE-2025-7775 Vulnerable Lab This repository provides a vulnerable setup to test nuclei template for CVE-2025-7775. Run docker build -t vuln-app . docker run -d --name vuln-test -p 5000:5000 vuln-app Vulnerability Tests 1. Remote Command Execution RCE curl -X POST...

CVE-2026-29145-Everything

CVE-2026-29145 Everything Apache Tomcat CLIENTCERT + OCSP soft-fail bypass complete reproduction environment, exploit traffic captures, and Suricata detection rule writing materials. For authorized security research and detection rule development only. Do not use on unauthorized systems...

regipy

regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...

lisa.py

LLDB MCP Integration This project provides a Model-Context Protocol MCP integration for LLDB, allowing AI assistants like Claude to interact with your debugging sessions through a standardized interface. Overview The integration consists of two main components: 1. server.py - An MCP server that...

K000162608: NGINX ngx_http_core_module vulnerability CVE-2026-97205

Security Advisory Description NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcoremodule module. When asynchronous file I/O AIO is enabled in certain configurations, processing a Server Side Includes SSI page containing include virtual commands may trigger a Use-After-Free UAF...

UACElevator

UACElevator Passive UAC elevation using dll infection The shellcode binary is in the shellcode char array in UACElevator.cpp and the raw code is in shellcode.asm...

shim

shim, a first-stage UEFI bootloader shim is a trivial EFI application that, when run, attempts to open and execute another application. It will initially attempt to do this via the standard EFI LoadImage and StartImage calls. If these fail because Secure Boot is enabled and the binary is not sign...

BackDoorSim

BackdoorSim Overview BackdoorSim is a remote administration and monitoring tool designed for educational and testing purposes. It consists of two main components: ControlServer and BackdoorClient. The server controls the client, allowing for various operations like file transfer, system monitorin...

HostHunter

HostHunter v2.0 A tool to efficiently discover and extract hostnames providing a large set of target IPv4 or IPv6 addresses. HostHunter utilises simple OSINT and active reconaissance techniques to map IP targets with virtual hostnames. This is especially useful for discovering the true attack...

K000162416: NGINX ngx_http_core_module vulnerability CVE-2026-15176

Security Advisory Description A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $requestfilename variable. Alternatively, the same result could be achieved when...

CVE-2023-25136

CVE-2023-25136 OpenSSH 9.1 vulnerability mass scan and exploit Vulnerability Details As a reminder, OpenSSH is software that implements the SSH protocol, very frequently used to securely connect to Linux or Windows machines for remote administration. Introduced in OpenSSH 9.1, the security flaw...

DynastyPersist

DynastyPersist 1.5 DynastyPersist: A streamlined tool for achieving Linux persistence effortlessly. Supports KoTH, Battlegrounds and Pentest Operations Install • Documentation • Usage Documentation FEATURES Features| Description ---|--- SSH Key Generation| Automatically generates SSH keys for...

extended-xss-search

Extended XSS Searcher and Finder This is the extended version based on the initial idea already published as "xssfinder". This private version allows an attacker to perform not only GET but also POST requests. Additionally its possible to proxy every request through Burp or another tunnel. First...

FDD-book

FreeBSD Device Drivers From First Steps to Kernel Mastery by Edson Brandi · Version 2.0 April 2026 About This Book FreeBSD Device Drivers: From First Steps to Kernel Mastery is a free, open-source book that takes you from "I've never written kernel code" to "I can write, debug, and submit...

lupo

For instructions on how to use Lupo, visit https://github.com/malienist/lupo/wiki/Lupo-Wiki Lupo — Malware IOC Extractor Debugging module for Malware Analysis Automation For a step by step post on how to use Lupo, with images and instructions, please see this post:...

HotLoad-Driver

Hot Load Your Driver Using C++ this project was Bsides Augusta for the RAT talk. Slides can be seen bellow and are extremely helpful for understanding the execution flow. These two methods have separate projects. Demo / Slides:...