47779 matches found
GitDump
GitDump GitDump dumps the source code from .git when the directory traversal is disabled Requirements Python3 Tested on Windows Kali Linux What it does Dump source code from website/.git directory when directory traversal is disabled. How it works Fetch all common files .git/index, .git/HEAD,...
clawpatrol
clawpatrol The security firewall for agents. Claw Patrol sits between your agents and prod, parses their traffic at the wire, and gates each action against rules you write in HCL. For example, you can block destructive SQL, or pause kubectl delete pod until a human approves it before the request...
reko
reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...
CVE-2026-62958
A vulnerability in Libriscv allows the attacker to crash the sandbox using an Out of Bounds Read. To create Bad elf: python3 poc.py samplefile poisonedfile Results: ❯ python3 poc.py fib poisonedfile Manipulating .text section header at offset 0x250 Manipulating .symtab section header at offset...
copy-fail-zig
Copy Fail CVE-2026-31431 Zig implementation Zig implementation of the 732 Byte proof of concept for the Copy Fail Linux LPE CVE-2026-31431, which was disclosed by Theori / Xint on April 29th 2026 The writeup can be found at copy.fail. This implementation has no runtime dependencies and can be run...
cve-2019-11707
SpiderMonkey - CVE-2019-11707 Bug: https://bugs.chromium.org/p/project-zero/issues/detail?id=1820 Screenshots Files exploit.js - Actual exploit, prepended by saelo's util.js & Int64.js. stager.js - Used for creating constants, prepended by saelo's util.js & Int64.js. stager.py - Used to assemble...
cve_2016_0728
cve20160728 CVE-2016-0728 Linux Kernel Vulnerability...
Log4Shell-Payloads
🚨 Log4Shell Payloads Collection A curated list of Log4Shell / Log4J exploitation payloads targeting: CVE-2021-45046 CVE-2022-42889 🔗 By @nav1n0x 🔥 One-Liner Payloads ✅ Oneliner 1 cat vulnerable-hosts.txt | sed 's/https?:////' | xargs -I echo...
SMBScanner
SMBScanner Multithread SMB scanner to check CVE-2020-0796 for SMB v3.11 Based on ollypwn/SMBGhost https://github.com/ollypwn/SMBGhost I have added multithreading capability to make scanning faster...
tusk-cli
!IMPORTANT Previously used tusk-drift-cli? This repo has moved to tusk-cli, and older installed CLI versions may not auto-update across the rename. Please reinstall using the current install instructions below. The Tusk CLI provides tools for automated testing workflows. It supports three product...
susinternals
susinternals - back from the dead by @deft @cablethief & @randomwalksp reino This tool allows you executing commands remotely via the PSExeSVC service from a python script. It can be used to: Authenticate as a user with a primary token: Authenticate as system: Full blog post can be found here!...
ExploiteameEsta
ExploiteameEsta CVE-2021-30937 vulnerability checking app What is this? This project is an application for iOS devices dedicated to iOS 15.0-15.1.1. You will be able to test whether the vulnerability mentioned above is compatible with your device or not. You will be shown several alerts and pop-u...
WinRAR-CVE-2025-8088-Exploitation-Toolkit
☠️ CVE-2025-8088 WinRAR Exploit Tool ☠️ SYSTEM ACCESS: GRANTED TARGET: WINRAR VULNERABILITY A sophisticated, military-grade GUI tool designed for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088. This tool leverages advanced NTFS Alternate Data...
CVE-2025-68937
CVE-2025-68937 - Gitea/Forgejo Template Symlink RCE Automated proof-of-concept for CVE-2025-68937 : directory traversal via symlink dereferencing in Gitea and Forgejo template repository processing, leading to remote code execution. Any authenticated user no admin required can obtain a shell as t...
CVE-2017-10366_peoplesoft
CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java deserialization exploit This script automates the exploitation of a Java deserialization vulnerability in Oracle PeopleSoft, originally discovered by Vahagn Vardanyan. This exploit requires ysoserial.jar to generate cross-platform serialized...
dc34-vault
DC34 vault Application !WARNING Loading your own firmware onto your badge will wipe the light encryption key and cause your badge to enter developer mode. NOTICE: this repo is now orphaned and will be archived soon, as it is now merged into xous-core. It only existed in the bunnie github reposito...
masc
masc A malware web scanner developed during CyperCamp Hackathon 2017 About homepage PyPI Features At the moment, there are some features avaiable for any type of website custom or CMS and some of them only available for specific platforms: Scan any website for malware using OWASP WebMalwareScanne...
MoveKit
MoveKit - Cobalt Strike lateral movement kit Movekit is an extension of built in Cobalt Strike lateral movement by leveraging the executeassembly function with the SharpMove and SharpRDP .NET assemblies. The aggressor script handles payload creation by reading the template files for a specific...
openvas-scanner
OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...