CVE-2024-10605

Affected Version: BloodBank Management System : 1.0 Vulnerability Information: Vulnerability Type: Cross Site Request Forgery CSRF Severity: HIGH Status: Unpatched Vulnerable Endpoint: Path: file/request.php Vulnerability Description: There is a Cross Site Request Forgery on this endpoint...

conpot

Conpot About Conpot is an ICS honeypot with the goal to collect intelligence about the motives and methods of adversaries targeting industrial control systems. Documentation The documentation can be found here. If you are just checking out conpot, we suggest that you go for quick install. If you...

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

MaliciousBrowserExtensions

Malicious Browser Extensions Join the Discord Try our Extension Try ExterminAI Overview ❗ The owner and contributors are NOT RESPONSIBLE in any shape or form for any damage inflicted by the negligent use of samples stored in the repository, users must take necessary precautions prior to executing...

WinDbg-Samples

This is a collection of extensions and sample scripts for extending WinDbg. We'll be adding more samples and extensions over time. Getting Started To load JavaScript extensions: 1. Download the script file locally. 2. Ensure you have a recent version of WinDbg. 3. Start your debugging session. 4...

CVE-2017-4878-Samples

CVE-2017-4878-Samples CVE-2017-4878 Samples - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Flash exploits fec71b8479f3a416fa58580ae76a8c731c2294c24663c601a1267e0e5c2678a0 -...

openvpn

OpenVPN -- A Secure tunneling daemon Copyright C 2002-2026 OpenVPN Inc. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2 as published by the Free Software Foundation. To get the latest release of OpenVPN, go to:...

CVE-2021-40444-Sample

CVE-2021-40444-Sample CVE-2021-40444 Sample...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

cve-2017-0199

cve-2017-0199 Archivo de muestra utilizado en la naturaleza https://twitter.com/SyFi2k...

ph0neutria

ph0neutria rastreador de malware ph0neutria v1.0.1 https://github.com/phage-nz/ph0neutria Nota: Este proyecto no se mantiene activamente. Acerca de ph0neutria es un constructor de zoológicos de malware que obtiene muestras directamente de la naturaleza. Todo se almacena en Viper para facilitar el...

CyberMeowfiaNS

CyberMeowfia Android Kernel Research 本仓库整理 Android 内核样本分析的方法、工具和案例记录，主题沿用 CyberMeowfia。研究主线是 CVE-2026-43499 与 CVE-2026-43074。内容是概念验证与方法说明：如何判断根因、绑定精确身份、选择路线、记录证据，以及如何解释成功或失败。 This repository documents methods, tools, and case records for Android kernel sample analysis, following the CyberMeowfia...

CVE-2024-24816

CVE-2024-24816 CKEditor 4 XSS This issue was caused by a lack of sanitization of the data passed to "preview" feature. This problem has been fixed in CKEditor 4 at version 4.24.0-lts. Affected versions 4.24.0-lts Advisory Update CKEditor 4 to version 4.24.0-lts or newer...

incarcero

Incarcero: La navaja suiza para el análisis de malware El análisis de malware es como desactivar bombas. El objetivo es desmontar y comprender un programa que fue creado para causar daño, el cual a menudo está ofuscado ej: empaquetado para complicar el análisis. Incarcero es una herramienta que...

CVE-2022-44789

CVE-2022-44789 Files: PublicReferenceURL.txt: public reference for CVE writeup.md: Writeup + exploit attachment: Vulnerable MuJS version + sample exploit...

CVE-2023-4771

CKEditor cross-site scripting vulnerability in AJAX sample CVE-2023-4771 PoC CKEditor 4 Cross-site scripting XSS vulnerability in AJAX sample This document describes how to perform an XSS vulnerability CVE-2023-4771 using CKEditor. Make sure the following is done with great caution to follow...

telfhash

Trend Micro ELF Hash telfhash telfhash es un hash de símbolos para archivos ELF, al igual que imphash es un hash de importaciones para archivos PE. Con telfhash, puedes agrupar archivos ELF por similitud basada en símbolos. Esto es particularmente útil para agrupar muestras maliciosas. Si una...

snare

SNARE Super Next generation Advanced Reactive honEypot About SNARE is a web application honeypot sensor attracting all sort of maliciousness from the Internet. Documentation The documentation can be found here. Basic Concepts Surface first. Focus on the attack surface generation. Sensors and...

BruteRatel-DetectionTools

BruteRatel-DetectionTools A collection of Tools and Rules for decoding Brute Ratel C4 badgers All tools and rules are based on samples identified by PaloAlto in their report https://unit42.paloaltonetworks.com/brute-ratel-c4-tool/ Yara Rule The yara rule has been tested against the samples includ...