CVE-2024-20154

CVE-2024-20154: NB-IoT SIB1-NB Stack Overflow in MediaTek MT6769 Baseband Classification: CWE-121 — Stack-based Buffer Overflow Severity: Critical MediaTek bulletin · 8.8 High, Attack Vector: Adjacent CISA-ADP Type: Remote Code Execution — no user interaction, no prior association Disclosure:...

TakeOver-v1

TakeOver-v1 What is Subdomain Takeover? Subdomain Takeover is a type of vulnerability that arises when a subdomain points to an external service that has been deleted or is no longer in use. Common examples of these external services include Github, Heroku, Gitlab, and Tumblr. In this scenario, a...

macos-collector

macos-collector macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR macos-collector.sh is a Shell script utilized to collect macOS Forensic Artifacts from a compromised macOS endpoint using primarily Aftermath by Jamf Threat Labs. Download Download the latest version of...

CVE-2020-0022

CVE-2020-0022 Seems like Android 9-6 have similar Bluetooth subsystem, Android 5 and 4 are different. Android 9.0 BlueFrag experiments Patch: https://android.googlesource.com/platform/system/bt/+/3cb7149d8fed2d7d77ceaa95bf845224c4db3baf Below I hit the patched condition. OK I think I got it, but...

turbinia

Turbinia Resumen Nota: Turbinia ya no desarrollará nuevas funcionalidades y se encuentra en modo de mantenimiento. Los usuarios deberían echar un vistazo aOpenRelik. Turbinia es un framework de código abierto para desplegar, gestionar y ejecutar cargas de trabajo forenses distribuidas. Su objetiv...

modelscan

ModelScan: Protection Against Model Serialization Attacks Machine Learning ML models are shared publicly over the internet, within teams and across teams. The rise of Foundation Models have resulted in public ML models being increasingly consumed for further training/fine tuning. ML Models are...

CVE-2026-43499-S26

CVE-2026-43499 — Android GKI 6.12 pselect / configfs kernel exploit A Linux kernel exploit for the Android GKI 6.12 line Samsung and Pixel devices targeting CVE-2026-43499 : a buggy removewaiter rollback in rtmutexstartproxylock that uses current instead of waiter::task, leaving a waiter's...

inspector v2.6.0

MCP Inspector A developer tool for inspecting Model Context Protocol MCP servers. It ships as a single package, @modelcontextprotocol/inspector, that provides three ways to inspect a server: Web — a Vite + React + Mantine single-page app with a Node backend. CLI — a scriptable command-line client...

CVE-2020-1313

CVE-2020-1313 Abstract Windows Update Orchestrator Service is a DCOM service used by other components to install windows updates that are already downloaded. USO was vulnerable to Elevation of Privileges any user to local system due to an improper authorization of the callers. The vulnerability...

Maverick

Maverick An Adaptix C2 agent built with Crystal Palace — a custom PIC Position Independent Code linker and PICO module system. Demonstrates how to build modular shellcode agents where each component transport, tasks, obfuscation is a separate PICO blob loaded at runtime. Note This agent does not...

challenge_repo

🎲 The Entropy Challenge 🇬🇧 Read in English | 🇹🇷 Türkçe Oku Introduction We have developed a next-generation random number generator that processes Radio Frequency RF Noise through a proprietary Neural Network architecture , followed by SHA-3 post-processing. We claim this source provides True...

Karkinos

Disclaimer This is an OLD project I did in university... all code was improvised as I progressed, and hardly anything was planned. This tool should be used on applications/networks that you have permission to attack only. Any misuse or damage caused will be solely the users’ responsibility. What ...

DeepTrap

DeepTrap English | 中文 Open-world security evaluation for OpenClaw agents under adversarial execution contexts. DeepTrap is a security benchmark for evaluating whether OpenClaw agents can complete benign user tasks while resisting malicious execution-context pressure: poisoned workspace files,...

attack-attention

Attacking Attention of Foundation Models Effectively Disrupts Downstream Tasks Official PyTorch implementation of the paper "Attacking Attention of Foundation Models Effectively Disrupts Downstream Tasks" , accepted in the Adversarial Machine Learning on Computer Vision: Foundation Models + X ADV...

CVE-2023-0045

Bypassing Spectre-BTI User Space Mitigations on Linux This is a working document, please send us feedback if you think we got something wrong or if we missed a citation Version 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introduction When testing the success rate of Spectre-BTI attacks, we...

CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE Split-Controller Upload Bypass → Direct Write Task → /downloads/shell.php → RCE Overview CVE-2026-57827 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in RSFiles! comrsfiles, a widely...

ghost

ghost ghost is a light RAT that gives the server/attacker full remote access to the user's command-line interpreter cmd.exe. They are allowed to execute commands silently without the client/zombie noticing. The server/attacker is also given the ability to download and execute files on the...

geiger

geiger A Geiger counter for AI agents. One read-only command that inventories every AI agent, harness, MCP server, plugin, and AI extension on a machine — and tells you, in plain language, what each one can touch. root@kitploit: npx geiger-scan No install. No account. No telemetry. Reads configs...

ConTroll_Remote_Access_Trojan

DISCLAIMER ConTroll is for education/research purposes only. The author takes NO responsibility and/or liability for how you choose to use any of the tools/source code/any files provided. The author and anyone affiliated with will not be liable for any losses and/or damages in connection with the...

endgame

ENDGAME C2 FRAMEWORK ENDGAME is a professional command and control framework built for authorized red team engagements, penetration testing, and educational security research. Designed to simulate realistic adversary techniques, assess detection coverage, and help security teams understand their...