CVE-2025-5548

🚀 CVE-2025-5548 - FreeFloat FTP Server 1.0 Exploitation Professional vulnerability analysis & full remote buffer overflow exploitation 🎯 Project Highlights Complete real-world case study of CVE-2025-5548 remote stack-based buffer overflow in FreeFloat FTP Server 1.0 via NOOP command Manual tool...

bincat

Introduction What is BinCAT? BinCAT is a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation. It features: value analysis registers and memory taint analysis type reconstruction and propagation backward and forward analysis...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

reverse-captcha-eval

Reverse CAPTCHA: Evaluating LLM Susceptibility to Invisible Unicode Instruction Injection An evaluation framework that tests whether large language models follow invisible Unicode-encoded instructions embedded in otherwise normal-looking text. Where traditional CAPTCHAs exploit tasks humans can...

victorian_machinery

Victorian Machinery Victorian Machinery is a proof of concept exploit for CVE-2022-30525. The vulnerability is an unauthenticated and remote command injection vulnerability affecting Zyxel firewall's that support zero touch provisioning. Zyxel pushed a fix for this issue on April 28, 2022. The...

HackTools

¡Bienvenido a HackTools! Introducción — Vista previa — Instalar — Compilar — Apoyar !NOTE Psst... ¿Te gustó HackTools? 👀 Echa un vistazo a Penflow – ¡nuestro nuevo compañero de pruebas de seguridad! Pruébalo en map.penflow.sh 🚀 !NOTE Estimados usuarios, ¡Nos complace anunciar una importante...

logitech-ipc-protocol

protocolo-ipc-de-logitech Documentación con ingeniería inversa del protocolo IPC del agente Logi Options+. Permite el control programático de dispositivos Logitech multi-host cambio de host, consultas de dispositivos sin acceso HID en bruto, tanto en macOS como en Windows. El protocolo no había...

CVE-2019-7609

CVE-2019-7609 New CVE-2019-7609 which works with python 13 exploit CVE-2019-7609kibana RCE on right way by python3 scripts Reference: https://github.com/LandGrey/CVE-2019-7609 snapshot usage usage: python3 CVE-2019-7609-kibana-rce.py -h -u URL -host REMOTEHOST -port REMOTEPORT --shell optional...

ll-34

ll/34 ll/34 es un emulador a nivel de circuito para el PDP-11/34A 1976, que ejecuta una CPU virtual diseñada mediante ingeniería inversa a partir de los esquemas, el microcódigo y las capturas lógicas de un PDP-11/34A real. Fue diseñado originalmente como una réplica digital de la CPU real para...

rz-ghidra

rz-ghidra Esta es una integración del descompilador de Ghidra y el desensamblador Sleigh para Rizin. Está basada únicamente en la parte del descompilador de Ghidra, que está escrita completamente en C++, por lo que Ghidra en sí no es necesario en absoluto y el plugin se puede compilar de forma...

idasec

idasec Plugin de IDA para ingeniería inversa e interacciones dinámicas con la plataforma Binsec Disclaimer IDAsec es una herramienta prototipo en desarrollo, algunas características pueden tener errores y deben usarse con cuidado. Features Decodificar una instrucción en DBA IR Cargar trazas de...

CVE-2018-14772

CVE-2018-14772 info This is a PoC Remote Code Execution exploit for CVE-2018-14772, a vulnerability that I discovered in the pydio file sharing platform. It requires pydio application administrator credentials to work. You can run the exploit like so: usage $ python exploit.py -h usage: exploit.p...

CVE-2022-24834

Improvement of CVE-2022-24834 public exploit Author Conviso Research Team Description The team at Ricerca Security @RicercaSec discovered and successfully exploited a interesting vulnerability CVE-2022-24834 in the Lua interpreter included with Redis. This vulnerability is a heap overflow in the...

Limesurvey-RCE

Limesurvey-RCE LimeSurvey Authenticated RCE Proof of Concept: 1. Create your files config.xml and php reverse shell files 2. Create archive with these files 3. Login with credentials 4. Go Configuration - Plugins - Upload & Install 5. Choose your zipped file 6. Upload 7. Install 8. Activate plugi...

interactive-binary-structures

Interactive Binary Structures An interactive web-based toolkit designed to bridge the gap between theoretical documentation and practical analysis of binary formats and system memory layouts. Portable Executable PE Format Documentation This tool serves as an interactive visual map of a Windows PE...

CVE-2020-15778-Exploit

CVE-2020-15778-Exploit Exploit for CVE-2020-15778OpenSSH vul Example: python CVE-2020-15778.py -ip 192.168.11.123 -lhost 192.168.11.124 -lport 1234 You need to use netcat to listen port before use python script Example: nc -lvp 1234 1.Screenshot of using script 2.Screenshot of get shell 2021-7-21...

CVE-2024-27956

🚨POC RELEASED🚨PoC for SQL Injection leads to RCE in Wordpress released CVE-2024-27956. WordPress Admin Account Creation and Reverse Shell cve-2024-27956 Usage- sudo python3 cve.py...

CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Descripción : Explotando un ataque de falsificación de petición en sitios cruzados CSRF para crear un usuario privilegiado a través de la función de añadir usuarios de Webmin y luego obtener una shell inversa a través de la función de procesos en ejecución de...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Version: 0.4 Bytes Revealer is a powerful reverse engineering and binary analysis tool designed for security researchers, forensic analysts, and developers. With features like hex view, visual representation, string...

CVE-2019-3980-Open_Net_Admin_v18.1.1_RCE

CVE-2019-3980 – OpenNetAdmin 18.1.1 Remote Code Execution ⚠️ Disclaimer This repository is intended strictly for educational and research purposes only. The information and code provided here can be used in controlled environments , such as private lab machines. Unauthorized use of this code...