dumpguard_bof

DumpGuard BOF Beacon Object File BOF port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems. About This Project This repository contains a Beacon Object File BOF implementation of DumpGuard, ported from the original C/.NET implementation to pure C for use with Havo...

pypdf: Possible long runtimes/large memory usage when extracting XForm objects

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires extracting the text of a page with lots of XForm objects, where some of them might be re-used. Patches This has been fixed in pypdf==6.16.1. Workarounds If you...

GHSA-763M-79HH-57F2 pypdf: Possible long runtimes/large memory usage when extracting XForm objects

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires extracting the text of a page with lots of XForm objects, where some of them might be re-used. Patches This has been fixed in pypdf==6.16.1. Workarounds If you...

CVE-2026-66804

CVE-2026-66804: Cross Device Virtual Camera EoP Independently discovered and reported the issue now tracked as CVE-2026-66804. MSRC confirmed the submission as a duplicate of an earlier report with the same underlying Windows Camera FrameServer root cause. A standard Windows user can create a...

recon-ng

El Framework Recon-ng ¡Contenido de Recon-ng ya disponible en Pluralsight! Recon-ng es un framework de reconocimiento completo diseñado con el objetivo de proporcionar un entorno potente para realizar reconocimiento web basado en fuentes abiertas de manera rápida y exhaustiva. Recon-ng tiene una...

recon-ng

The Recon-ng Framework Recon-ng content now available on Pluralsight! Recon-ng is a full-featured reconnaissance framework designed with the goal of providing a powerful environment to conduct open source web-based reconnaissance quickly and thoroughly. Recon-ng has a look and feel similar to the...

linux-privilege-escalation

Linux Privilege Escalation Bash script to check and exploit the CVE-2022-0847 Linux "Dirty Pipe" vulnerability About this Proof of Concept This script allows an unprivileged user on a vulnerable system to do the following: Modify/overwrite read-only files like /etc/passwd. Obtain an elevated shel...

CVE-2025-8067

Proof of Concept for CVE-2025-8067 Details are available here: https://github.com/storaged-project/udisks/security/advisories/GHSA-742q-gggc-473g https://www.openwall.com/lists/oss-security/2025/08/28/1 https://access.redhat.com/security/cve/CVE-2025-8067 https://ubuntu.com/security/CVE-2025-8067...

EUVD-2026-69705

Vitest is a testing framework powered by Vite. From 2.1.0 until 4.1.11 and 5.0.0-rc.2, the public mockerPlugin and standalone interceptorPlugin exports in packages/mocker/src/node/interceptorPlugin.ts register the vitest:interceptor:register handler on Vite's unauthenticated HMR WebSocket without...

CVE-2026-84373 Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock

Vitest is a testing framework powered by Vite. From 2.1.0 until 4.1.11 and 5.0.0-rc.2, the public mockerPlugin and standalone interceptorPlugin exports in packages/mocker/src/node/interceptorPlugin.ts register the vitest:interceptor:register handler on Vite's unauthenticated HMR WebSocket without...

CVE-2026-84373

CVE-2026-84373 affects Vitest (a Vite-powered testing framework) versions 2.1.0 through 4.1.10 and 5.0.0-rc.1 . The vulnerability exists in the mockerPlugin and interceptorPlugin exports within packages/mocker/src/node/interceptorPlugin.ts, which register a vitest:interceptor:register handler on ...

TIWAP

Totally Insecure Web Application Project TIWAP TIWAP is a web security testing lab made using Flask for budding security enthusiasts to learn about various web vulnerabilities. Inspired by DVWA, the contributors have tried their best to regenerate various web vulnerabilities The application is...

powershell-reverse-tcp

PowerShell Reverse TCP PowerShell scripts for communicating with a remote host. Remote host will have a full control over the client and all the underlying system commands. Check shells based on: Invoke-Expression PowerShell command here, process pipes here. Tested with PowerShell v5.1.19041.2673...

CVE-2026-84637 Calendar invitation attachments could launch local executables

Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This...

CVE-2026-84637

This vulnerability affects Mozilla Thunderbird on Windows , where malicious calendar invitations could use file URI attachments to launch local or network-hosted executables, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment ...

CVE-2014-4322_poc

CVE-2014-4322poc poc code works on Nexus Android 4.4/5.0 Gain privileges:system - root,as a part of https://github.com/retme7/CVE-2014-7911poc author: retme [email protected] @returnsme on twitter & @retme on weibo website: retme.net The exploit must be excuted as system privilege and severa...

G3-Loop-DoS

G3-Loop-DoS Python Script for Automated Vulnerability Detection of Loop DoS and CVE-2024-2169 Description: This Python script automates the process of scanning for systems potentially vulnerable to the Loop DoS attack and the hypothetical CVE-2024-2169 vulnerability. It focuses on scanning ports...

AzureRedOps

AzureRedOps A Swiss Army tool for Azure / Entra ID red teaming. Author: Mr.Un1k0d3r TrueCyber Inc Version: 0.1 Language: Python 3.12+ Overview AzureRedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID and Azure tenants. It wraps the most common red-team...

publications

Publications A home for publications, including slides/papers, proof-of-concepts, videos and tools. For blog posts, see the elttam blog, and for our services, see our website. Date| Type| Event| Title| Resources ---|---|---|---|--- 2026| adv| -| Home Assistant Authenticated Arbitrary File Read vi...

move-vulnerability-database

Welcome to the Move Vulnerability Database MVD v3.0! A comprehensive collection of vulnerability patterns in the Move ecosystem. What's Inside Vulnerability Patterns - Categorized security issues with examples and severity ratings Appendix - Audit reports and protocol references Learning...