engine

Droidefense Engine Advance Android Malware Analysis Framework Latest release Download What Droidefense is Droidefense originally named atom: a nalysis t hrough o bservation m achine is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and trick...

PowerShellForPentesters

PowerShellForPentesters Playlist Link - https://youtube.com/playlist?list=PLJQHPJLjSQatUsJy3O4k-VQlllquDmDr PowerShell for Pentesters is a basic introduction to using PowerShell on internal penetration tests. This course is essentially the PowerShell module from my popular Movement, Pivoting, and...

Slackor

Slackor Maintained at https://github.com/n00py/Slackor A Golang implant that uses Slack as a command and control channel. This project was inspired by Gcat and Twittor. This tool is released as a proof of concept. Be sure to read and understand the Slack App Developer Policy before creating any...

mbadanoiu

Welcome to the Weekend Retreat of Matei "Mal" Badanoiu This GitHub is used to post my CVEs and Security Research during my free time/weekends. All materials present in this GitHub profile are meant for security research and etichal hacking. I do not condone malicious behavoiur such as hacking...

cve-2021-3156

sudo Heap Overflow Vulnerability CVE-2021-3156 Vulnerability Overview A foreign research team discovered a sudo heap overflow vulnerability CVE-2021-3156, which had been hidden for a decade. An ordinary user can exploit this vulnerability to gain root privileges on a sudo host with default...

CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – LangGraph SQLite Checkpoint SQL Injection CVE-2025-67644 is a SQL Injection vulnerability CWE-89 in the langgraph-checkpoint-sqlite package part of LangGraph / LangChain ecosystem. It allows an attacker to inject arbitrary SQL via unsanitized metadata filter keys passed to th...

CVE-2020-1313

CVE-2020-1313 Abstract Windows Update Orchestrator Service is a DCOM service used by other components to install windows updates that are already downloaded. USO was vulnerable to Elevation of Privileges any user to local system due to an improper authorization of the callers. The vulnerability...

CVE-2021-41773-POC

CVE-2021-41773-nse By George Labrin @creadpag Checks if Server is vulnerable to Apache 2.4.49 CVE-2021-41773. POC Open your favorite Terminal and run these commands. Use NMAP. First Tab: mv cve-2021-41773.nse /usr/share/nmap/scripts/ Second Tab: sudo nmap -Pn --script=cve-2021-41773.nse X.X.X.X -...

socgholish_finder

SocGholish Finder Simple script to scan website for SocGholish inject. It checks for and display inject if found, and it deonfuscates and display a shadowing URL domains usage: finder.py -h -url URL -ua USERAGENT -f FILENAME -p PROXY -s SocGholish finder options: -h, --help show this help message...

CVE-2024-6387_PoC

Summary This is essentially a statistical vulnerability: a large number of attempts are required to win the race condition and successfully execute arbitrary code. Attackers need to overcome many obstacles, Schwartz told SecurityWeek. "Even in the best-case scenario, the most well-known...

CVE-2019-17147

CVE-2019-17147: TP-Link TL-WR841N Exploitation Overview This repository documents the comprehensive reverse engineering and exploitation of CVE-2019-17147 , a critical remote code execution RCE vulnerability in the TP-Link TL-WR841N router MIPSEL architecture. The vulnerability resides in the htt...

CVE-2018-4878

Author and Credits Author: Vincent Yiu @vysecurity Credits: @evi1cg: Helping me test and keep me motivated @smgoreli: Original Calc.exe PoC @kbandla: He knows, and I know. ; Disclaimer Developed to encourage more Aggressor script development. Use only in authorized penetration testing! Descriptio...

CVE-2026-38165-SSTI-

CVE-2026-38165 SSTI Velocity Server-Side Template Injection SSTI in XDocReport allows Remote Code Execution via Apache Velocity engine Bug Definition Overview of the vulnerability Server-Side Template Injection SSTI is a web security vulnerability that allows attackers to inject malicious code in...

CVE-2023-49976

CVE-2023-49976 Customer Support System 1.0 - XSS Cross-Site Scripting Vulnerability in the "subject" at "ticketlist" Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious actor can insert JavaScri...

klar

Klar Integration of Clair and Docker Registry supports both Clair API v1 and v3 Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using Clair https://github.com/coreos/clair. Klar is designed to be used as an integration tool so it...

opmonster

OpMonster CVE-2020-8636 — authenticated remote code execution exploit for Opmon About • Install • Usage • License About OpMonster is a proof-of-concept exploit for CVE-2020-8636 , a remote code execution vulnerability in the Opmon monitoring platform. It abuses the nettools.php endpoint, which le...

wisp

wisp Script to automatically deauth 802.11 clients en masse. Captures packets for later nefariousness. Great conversation starter in your local coffee shop. Hardware Raspberry Pi This script was designed to run on a Raspberry Pi 3 or above. It will also run on similar hardware with the same or...

log4shell-mitigation-tester

Log4Shell Mitigation tester This is an example application using Log4j 2.14.1 . source code: App.java The purpose of this is to be able to test different mitigation approaches. The mitigation approaches are also mentioned in Microsoft’s Response to CVE-2021-44228 Apache Log4j 2. Example usage...

React-Security-CVE-2025-55182-Exploit

⚛️ React2Shell Exploit CVE-2025-55182 A lightweight, automated Proof of Concept PoC and bulk scanner for the Critical RCE vulnerability in React Server Components React 19 / Next.js. ⚠️ Legal Disclaimer FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. This tool is designed to help security...

samsung-bixby-command-execution-cve-2026-21055-improper-component-export

CVE-2026-21055 PoC — Samsung Bixby Improper Component Export Proof of Concept for CVE-2026-21055 : Improper export of Android application components in Samsung Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege. Overview This repository...