CVE-2015-6835-checker

CVE-2015-6835-checker...

POC_CVE-2025-32433

⚠️ Ethical Disclaimer This repository contains code that demonstrates a real CVE CVE-2025-32433. Use it only in environments where you have explicit authorization. Never test this exploit against systems you do not own or manage. Unauthorized use is illegal, unethical, and harmful to the...

t-reqs

T-Reqs HTTP Fuzzer T-Reqs T wo Req uests is a grammar-based HTTP Fuzzer written as a part of the paper titled "T-Reqs: HTTP Request Smuggling with Differential Fuzzing" which was presented at ACM CCS 2021. BibTeX of the paper: @inproceedingsccs2021treqs, title=T-Reqs: HTTP Request Smuggling with...

tamago

TamaGo - bare metal Go tamago | https://github.com/usbarmory/tamago Copyright c The TamaGo Authors. All Rights Reserved. Introduction TamaGo is a framework that enables compilation and execution of unencumbered Go applications on bare metal processors. The projects spawns from the desire of...

pwndbg

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...

yellowkey-bitlocker

🔑 yellowkey-bitlocker - Unlock your BitLocker encrypted computer files 📁 Project Overview The yellowkey-bitlocker tool provides a way to regain access to your Windows storage drives. Many users encounter issues with BitLocker drive encryption, which can lock files during updates or hardware...

CVE-2024-11396

CVE-2024-11396 Event monster = 1.4.3 - Information Exposure Via Visitors List Export Description The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.3 via the Visitors List Expor...

CVE-2023-22906

CVE-2023-22906 CVE-2023-22906 is a critical vulnerability that affects the Hero Qubo Smart Doorbell device running version HCD0102V1.3820220125. This particular device allows Telnet access with root privileges by default, without requiring a password. This vulnerability poses a significant securi...

rails-rce-cve-2016-0752

Exploiting CVE-2016-0752 This app serves as a vulnerable Proof of Concept for exploiting CVE-2016-0752. For more information refer to this blog post, which explains the vulnerability, the steps required to exploit, the fix, and a link to a metasploit module. Getting Started echo ""...

CVE-2018-14847

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Blogpost https://n0p.me/winbox-bug-dissection/ Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script...

cve-2025-48384

This repository does not have a README...

log4j-vuln-demo

log4j-vuln-demo Intentionally vulnerable demo image for Sysdig CNAPP scanning and remediation testing. Contains Log4j 2.14.1 — vulnerable to CVE-2021-44228 Log4Shell, CVSS 10.0 Critical. Purpose This repo exists to demonstrate Sysdig's end-to-end CNAPP workflow: 1. /sysdig-investigate — surfaces...

wireshark-forensics-plugin

wireshark-forensics-plugin Wireshark is the most widely used network traffic analyzer. It is an important tool for both live traffic analysis & forensic analysis for forensic/malware analysts. Even though Wireshark provides incredibly powerful functionalities for protocol parsing & filtering, it...

debugHunter

debugHunter Discover Hidden Debug Endpoints & Development Environments The essential Chrome extension for bug bounty hunters and penetration testers Passively detect debug parameters, sensitive headers, and exposed paths while you browse. Why debugHunter? Finding debug endpoints and exposed...

Ares

Project Ares Project Ares Injector Project Ares Injector is a Proof of Concept PoC loader written in C/C++ based on the Transacted Hollowing technique. The loader injects a PE into a remote process and features: PPID spoofing CIG to block non-Microsoft-signed binaries Dynamic function resolution...

gitls

Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline This tool is available when the repository, such as github, is included in the bugbounty scope. Sometimes specified as an org name or user name rather than a specific repository, you can use this tool to extract url...

safer-dependencies

Safer Dependencies for Claude Code When AI coding assistants like Claude add packages to your project, they often pick whatever version sounds right — without checking whether it has known security vulnerabilities, whether the package is still actively maintained, or whether the name is a typo aw...

CVE-2025-0288

This repository does not have a README...

uc_browser_poc_CVE-2022-1364

UCBrowserExploit.js Introduction All content below refers to the UC Browser exploit explored in this article posted by Interrupt Labs. Getting Started This exploit relates to previous versions of the UC Browser that include the RCE bug of CVE-2022-1364. This bug was patched in the UC browser in...

exifLooter

Exif Looter Blog Post » · Report Bug · Request Feature Table of Contents 1. Getting Started Installation 2. Usage Analyze specific image Analyze specific directory Pipe with other tools Remove metadata from Images Get Open Street Map URL 3. Reports 4. Roadmap 5. Contributing 6. License 7. Contact...