facedancer

Facedancer 3.0 This repository houses the next generation of Facedancer software. Descended from the original GoodFET-based Facedancer, this repository provides a python module that provides expanded Facedancer support -- including support for multiple boards and some pretty significant new...

CVE-2026-46275

CVE-2026-46725 — TYPO3 ceselector Extension RCE PHP Object Injection viaunserialize Cookie Bypass → Remote Code Execution 📋 Table of Contents About the Vulnerability Technical Details Requirements Installation Usage Examples Output Format How It Works References Legal Disclaimer 🔍 About the...

jok3r

.. raw:: html .. image:: ./pictures/logo.png .. raw:: html Jok3r v3 beta .. image:: https://img.shields.io/badge/python-3.6-blue.svg :target: https://www.python.org/downloads/release/python-366/ :alt: Python 3.6 .. image:: https://readthedocs.org/projects/jok3r/badge/?version=latest :target:...

GoReSym

GoReSym GoReSym is a Go symbol parser that extracts program metadata such as CPU architecture, OS, endianness, compiler version, etc, function metadata start & end addresses, names, sources, filename and line number metadata, and embedded structures and types. This cross platform program is based...

CVE-2025-24893-Reverse-Shell

CVE-2025-24893 - XWiki Remote Code Execution Exploit PoC for CVE-2025-24893 – XWiki Macro Remote Code Execution Inspired by Artemir's original PoC Description This is a Proof-of-Concept PoC exploit for CVE-2025-24893 , a Remote Code Execution RCE vulnerability in vulnerable versions of XWiki. The...

CVE-2026-25964

CVE-2026-25964 PoC - Tandoor Recipes Authenticated LFI Proof-of-Concept for Authenticated Local File Disclosure via Recipe Import Disclosure: Originally reported by me via GHSA-6485-jr28-52xx ⚠️ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID|...

CVE-2019-8389

CVE-2019-8389 - Arbitrary file read in Musicloud for iOS v1.6 CVE-2019-8389 An exploit code for exploiting a local file read vulnerability in Musicloud v1.6 iOS Application Description: A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the...

CVE-2024-52301

CVE-2024-52301 POC This vulnerability is based on the CVE-2024-50340 vulnerability Requirements The registerargcargv option must be enabled in the PHP configuration file php.ini. This setting loads command-line arguments and query params into $SERVER'argv'...

HiveV5_file_decryptor

HiveV5 file decryptor PoC Introduction The work done in the last few months has been necessary to reveal the malicious file encryption mechanism of Hive v5-5.2. The work was divided into two parts 1. Keystream decryption 2. File decryption using the decrypted keystream I would like to thank the...

pwn-hisilicon-dvr

= HiSilicon DVR hack Istvan Toth [email protected] v1.0, 2017-09-06 :source-highlighter: pygments :toc: preamble :toclevels: 5 :toc-title: Contents :imagewidth: 100% abstract This report discloses serious vulnerabilities with proof of concept PoC code of DVR/NVR devices built using the...

DahuaConsole

Dahua Console Version: Pre-alpha Bugs: Indeed TODO: Lots of stuff Install requirements sudo pip3 install -r requirements.txt Arguments -h, --help show this help message and exit --rhost RHOST Remote Target Address IP/FQDN --rport RPORT Remote Target Port --proto dhip,dvrip,3des,http,https Protoco...

DHEater

DHEater DHEater is the proof-of-concept implementation of the DHEat attack CVE-2002-20001. It saturates a server's CPU by enforcing Diffie-Hellman ephemeral DHE or elliptic-curve Diffie-Hellman ephemeral ECDHE key exchange over both TLS and SSH. For further information about the attack visit the...

CVE-2026-20841

CVE-2026-20841 This content corresponds to a part of what is provided through the Monthly Report for PatchPoint subscribers. Overview Microsoft disclosed a patch for an RCE vulnerability in Notepad in February 2026. The vulnerability is a Command Injection vulnerability that occurs in Notepad,...

Weblogic

English｜ 中文 Research topic on WebLogic vulnerabilities Weblogic CVE-2023-21931 vulnerability exploration technique: post-deserialization exploitation Abstract：In recent years, Weblogic deserialization vulnerabilities have been discovered and focused on the triggering point of deserialization...

AntimalwareBlight

Use this PowerShell module to execute PowerShell code at the antimalware-light protection level. This code was highlighted in the Living Off the Walled Garden: Abusing the Features of the Early Launch Antimalware Ecosystem REcon talk as well as Black Hat USA 2022. This module needs to run elevate...

cve-2019-19781

CVE-2019-19781 This was only uploaded due to other researchers publishing their code first. We would have hoped to have had this hidden for awhile longer while defenders had appropriate time to patch their systems. We are all for responsible disclosure, in this case - the cat was already out of t...

Krakatau

Krakatau provides an assembler and disassembler for Java bytecode, which allows you to convert binary classfiles to a human readable text format, make changes, and convert it back to a classfile, even for obfuscated code. You can also create your own classfiles from scratch by writing bytecode...

firmadyne

Table of Contents Table of Contents Introduction Setup Extractor Database Binaries QEMU Usage FAQ run.sh is not generated Log ends with "Kernel panic - not syncing: No working init found" A process crashed, e.g. dopagefault 2: sending SIGSEGV for invalid read access from 00000000 How do I debug t...

AsyncRAT-C-Sharp

AsyncRAT AsyncRAT is a Remote Access Tool RAT designed to remotely monitor and control other computers through a secure encrypted connection Included projects This project includes the following Plugin system to send and receive commands Access terminal for controlling clients Configurable client...

CVE-2019-3778-Spring-Security-OAuth-2.3-Open-Redirection

CVE-2019-3778-Spring-Security-OAuth-2.3-Open-Redirection Spring Security OAuth 2.3 Open Redirection 分析复现篇 Exploit Title: Open Redirector in spring-security-oauth2 Date: 17 June 2019 Exploit Author: Riemann Vendor Homepage: https://spring.io/projects/spring-security-oauth Software Link:...