chrome_v8_cve_checker

How to use Open https://itsshotgun.github.io/chromecve-2025-5419checker/ in Chrome The page will detect your Chrome version and tell you if you’re vulnerable. If vulnerable, it’ll show a link to update Chrome immediately. Why This zero-day lets malicious websites run baaaaaaad code on your machin...

Torward

Torward Torward is an improved version based on the torghost-gn and darktor scripts, designed to enhance anonymity on the Internet. The tool prevents data leaks and forces all traffic from our computer to be routed exclusively through the Tor network, providing a high level of privacy in our...

CLR-Unhook

CLR Unhooking Tool Note: For this to have the effect of a clean CLR, you’d need to manually map the DLL from disk into memory. You cannot use LoadLibraryA/W, because antivirus solutions will detect the DLL load event and may hook it immediately. If you want this behavior, you can look up existing...

secretlint

Secretlint Secretlint is a Pluggable linting tool to prevent committing credentials. Features Scanner : Find credentials in a project and report these Project Friendly: Easy to set up your project and integrate CI services Pre-Commit Hook : Prevent committing credential files Pluggable : Allow...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

angr

angr angr is a platform-agnostic binary analysis framework. It is brought to you by the Computer Security Lab at UC Santa Barbara, SEFCOM at Arizona State University, their associated CTF team, Shellphish, the open source community, and @rhelmot. Project Links Homepage: https://angr.io Project...

log4j-rce-test

Build ./build.sh Start log4j RCE Server ./start-log4j-rce-server.sh Test Run java -cp log4j-rce-1.0-SNAPSHOT-all.jar log4j Check if you get logs in hack.log from current folder You can change this line String cmds = "sh", "-c", "echo 'Exploit at '" + getDateString + " ./hack.log" ; in file...

spider

This repository does not have a README...

EsFileExplorer-CVE-2019-6447

EsFileExplorer-CVE-2019-6447 Exploiting Android Vulnerability in ES File Explorer Vulnerability The ES file explorer was created by ES worldwide, which is a part of DO Global and is based in China. This ES file explorer is only available for use on mobile devices that run the Android operating...

credactor

Credactor Find the secret. Fix it. Commit clean. Secret scanners are good at sounding the alarm and not much help putting it out. They hand you a list of leaked credentials and leave the cleanup to you. Credactor closes the loop: it finds a hardcoded secret and rewrites it in place, so a leak goe...

SharpStat

SharpStat C utility that uses WMI to run "cmd.exe /c netstat -n", save the output to a file, then use SMB to read and delete the file remotely Description This script will attempt to connect to all the supplied computers and use WMI to execute cmd.exe /c netstat -n . The file the output is saved ...

santamon

Santamon Lightweight macOS detection sidecar for Santa that evaluates Endpoint Security telemetry locally with CEL rules and forwards only matched detection signals to a backend server. Experimental. Built for home labs and small fleets. Early release – expect bugs and API changes. What It Does...

jackdaw

jackdaw gather gather gather What is this? Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy...

Cairn

Cairn More Than Just AI Penetration Testing — Towards General State-Space Search Cairn is a general-purpose problem-solving engine. It defines no roles, no workflows. Given an origin and a goal, it searches for a path through an unknown state space. AI Penetration Testing is one such problem — an...

hackerone-reports

Live site: reddelexc.github.io/hackerone-reports Tops of HackerOne reports. All reports' raw info stored in data.csv. Scripts to update this file are written in Python 3 and require chromedriver and Chromium executables at PATH. Every script contains some info about how it works. The run order of...

XPRTestSuite

XProtect Remediator Test Suite A collection of scripts and documents to help future XProtect Remediator XPR research, presented at Black Hat USA 2025 About This Repository This repository contains: The scripts to create harmless minimal files and processes that reproduce the remediation of each...

CVE-2025-57819-poc

CVE-2025-57819 — FreePBX Unauthenticated SQLi → RCE One-shot exploit for the FreePBX Endpoint Manager unauthenticated SQL injection CVE-2025-57819, chained into remote code execution via the FreePBX cronjobs table. For authorized security testing / CTF use only. Vulnerability The endpoint module'...

cve-2017-0199

cve-2017-0199 Sample file used in the wild https://twitter.com/SyFi2k...

Antiphishing

Antiphishing — Predictive Phishing Intelligence for Suricata DONATE · DASHBOARD VECTORS · CONTRIBUTING · SUBMIT A VECTOR · REST API CTI · WIKI Predictive Phishing Intelligence for Suricata — Preemptive Defense from Day Zero Antiphishing is an open-source GPLv3 Cyber Threat Intelligence CTI...

mutiny-fuzzer

Quickstart: Mutiny tutorial Blog post here: http://blog.talosintelligence.com/2018/01/tutorial-mutiny-fuzzing-framework-and.html Links to this YouTube video demo: https://www.youtube.com/watch?v=FZyR6MgJCUs For more features geared towards fuzzing campaigns/feedback/harnesses:...