learn365

Learn365 This repository contains all the information shared during my Learn 365 Challenge. Learn 365 is a challenge to keep the learning spirit going on and challenge myself to learn something daily for the whole year, it can be anything from infosec to general life. Follow me on Twitter for...

ranwhat

ranwhat A flight recorder for AI agents, and a scanner for the authority they hold. AI coding agent security for Claude Code and twenty-nine other coding agents, run on your own machine. No account, no telemetry, no dependencies. Website and docs: https://ranwhat.com Your coding agent has your...

CVE-2026-85045

CVE-2026-85045 A training poc I cooked up while going after the larger chains. Maglev reuses one mutable HeapNumber while materializing recursive deoptimization frames. The exact upstream trigger produces 0,3,3,3 on both 148 builds and 152.0.7977.75, versus 0,1,2,3 on fixed 152.0.7977.82. Load...

CVE-2025-5777-CitrixBleed

CVE-2025-5777-CitrixBleed CitrixBleed-2 CVE-2025-5777 – proof-of-concept exploit for NetScaler ADC/Gateway “memory bleed” CVE-2025-5777 is a critical unauthenticated out-of-bounds read in Citrix NetScaler ADC/Gateway Gateway or AAA vServer mode. A single crafted request can dump memory containing...

CVE-2017-11610

Supervisord Remote Command Execution Vulnerability Script CVE-2017-11610 Vulnerability Overview Supervisor is a process management tool written in Python, which can be used to start, restart auto-restart programs, and stop processes not just Python processes on UNIX-like systems Windows is not...

CVE-2025-64512_PoC

CVE-2025-64512 — pdfminer.six RCE exploit Python 3, stdlib only no pip installs. For authorized security testing and CTF use only — you are responsible for complying with the law and your engagement's rules of engagement. | ---|--- CVE| CVE-2025-64512 Affected| pdfminer.six .pickle.gz inside its...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

gr-PHYSEC

gr-PHYSEC: GNU Radio Module for Physical Layer Security This GNU Radio module provides channel fingerprinting capabilities for physical layer security applications using deep learning models. Features Channel Fingerprinting : Extract unique channel characteristics from IQ samples Deep Learning...

CVE-2025-1337-PoC

PoC for CVE-2025-1337 Proof of concept for the Remote Code Execution RCE vulnerability in the LogServ v1.2 service. Vulnerability Details CVE: CVE-2025-1337 Software: LogServ v1.2 Type: Insecure deserialization of a session object in the sessiondata cookie. Impact: An unauthenticated attacker can...

CVE-2025-54135

Below is a fully functional exploit for the CVE-2025-54135 vulnerability in the Cursor IDE, designed to demonstrate a prompt-injection attack that manipulates the Model Context Protocol MCP configuration to achieve remote code execution. This code assumes the attacker has access to a public Slack...

CVE-2021-3129

CVE-2021-3129 — Laravel Ignition Remote Code Execution CVSS 9.8 Critical | Unsafe File Operations → Log Poisoning → Phar Deserialization → RCE Overview Laravel Ignition -c "whoami" References NVD — CVE-2021-3129 Ignition Patch 2.5.2...

CVE-2021-31630

CVE-2021-31630 CVE encountered while hacking HTB machines; the exploit-db exploit had some errors, so here are manual exploitation methods and an exploit. Script Usage Command execution with no output python exp.py -u http://127.0.0.1:8080 -l openplc -p openplc -c "whoami" Manual Exploit The atta...

NSE-scripts

Contains Custom NSE scripts CVE-2020-0796 NSE script to detect vulnerable CVE-2020-0796 issue, with Microsoft SMBv3 Compression aka coronablue, SMBGhost The script is a modified version of smb-protocols.nse script with a modified output data for v3.11 detection and validating CVE-2020-0796. Note:...

CVE-2022-44877

CVE-2022-44877 Overview This bash script is used to test the vulnerability of web servers to CVE-2022-44877. The script performs a curl request to a target URL with a payload encoded in base64. If the target is vulnerable to the CVE-2022-44877 vulnerability, the elapsed time of the curl request...

-exploit-lab

-exploit-lab Exploits Python cve-2019-0708 – by HackHeart 🧠 Code Review & Porting - Python 2 → Python 3 This exploit was originally written in Python 2, which is no longer supported by modern systems. To ensure compatibility and maintain future-proof tooling, the entire codebase has been carefull...

LazySign

LazySign Create fake certs for binaries using windows binaries and the power of bat files Over the years, several cool tools have been released that are capeable of stealing or forging fake signatures for binary files. All of these tools however, have additional dependencies which require...

Kestra-cve-2026-53576

Unauthenticated RCE in Kestra via a Trailing-Path Auth Bypass CVE-2026-53576 Contents Executive Summary 1. Summary 2. Affected / Fixed Versions 3. Test Environment & Pre-Flight Check 4. Root Cause 5. Attack Simulation 6. Detection Engineering 7. ATT&CK Mapping 8. Remediation & Hardening 9...

CVE-2026-77635

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-77635 CVE-2026-77635 CakePHP 5.2.13 - cakephp I am @abraxasnull. Loopback lab. The client is CVE-2026-77635-Abraxas-Labs.py. JSONVALUE is not bound. FunctionsBuilder::jsonValue with PostgresDriver rewrites to...

CVE-2024-37054

mlflow-pickle-rce Generic proof-of-concept for pickle deserialization RCE against MLflow model registries CVE-2024-37054-style. Talks only to the MLflow REST API — no assumptions about any specific client application in front of it. ⚠️ For authorized security testing only. Only run this against...