Adrenaline

Adrenaline BOF Kit A C2-agnostic collection of Beacon Object Files BOFs for red team and offensive security operations. BOFs are organized by attack chain phase and designed to be small, modular, and automation-friendly for use in reconnaissance, enumeration, and post-exploitation workflows. Tabl...

ghidra-emotionengine

ghidra-emotionengine Ghidra Processor for the Play Station 2's Emotion Engine CPU. The core MIPS/FPU/COP0 instruction are based off the MIPS32/64 processor included in Ghidra, with superfluous instructions stripped out and some instructions modified. The following instuction sets are currently...

kimi

Kimi: Attack Surface Discovery Engine Developed with 💜 by @alechilczenko Project Context: This project serves as a portfolio piece demonstrating concepts in offensive security, concurrency, and distributed architecture. 1. Introducing Kimi: The Origin Story What was Kimi ? During my early days...

flawfinder

概要 これはDavid A. Wheelerによる「flawfinder」です。 Flawfinderは、C/C++ソースコードをスキャンして潜在的なセキュリティ上の欠陥を報告するシンプルなプログラムです。ソフトウェアの脆弱性を調査するための有用なツールであり、静的ソースコード解析ツールへの簡単な入門としても役立ちます。インストールと使用が簡単になるように設計されています。FlawfinderはCommon Weakness Enumeration（CWE）をサポートしており、公式にCWE互換です。SARIF、SonarQube、HTMLなど、さまざまな出力形式をサポートしています。...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

CVE-2024-37759_PoC

CVE-2024-37759 PoC Description DataGear version 5.0.0 and earlier has a SpEL expression injection vulnerability that leads to remote code execution. Exploit CVE Exploit Details When you request the /data/schemaId/tableName/view interface, if the database table does not have a primary key, an...

Zoho_CVE-2022-23779

ZohoCVE-2022-23779 内部主机名泄露漏洞 概念验证利用 步骤1：curl -ILk https://IP:port/themes 步骤2：读取 HTTP 重定向响应并分析 Location HTTP 响应头。 PoC 关注我们 Vulnmachines Platform YouTube Twitter Facebook LinkedIn...

IOCs

//////////////// ////////////////////// // //////////////////////// // /// /////// ///// /////// /////// /////// /////// //////// //////// //////// //////// //////// //////// //////// //////// //////// //////// /////// /////// /////// /////// ///// // ////// // // /////////////////////////...

Shhhloader

Shhhloader Shhhloader is a work in progress shellcode loader. It takes raw shellcode as input and compiles a C++ stub that does a bunch of different things to try and bypass AV/EDR. The included python builder will work on any Linux system that has Mingw-w64 installed. 1/25/24 EDIT: Shhhloader no...

Malimite

Description Malimite is an iOS and macOS decompiler designed to help researchers analyze and decode IPA files and Application Bundles. Built on top of Ghidra decompilation to offer direct support for Swift, Objective-C, and Apple resources. Features Multi-Platform Mac, Windows, Linux Direct suppo...

CVEs

My publicly published security advisories...

ysoserial.net

A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discovered in common .NET libraries that can, under the right conditions, exploit .NET...

ysoserial.net

安全でない .NET オブジェクトのデシリアライズを悪用するペイロードを生成するための概念実証ツールです。 説明 ysoserial.net は、一般的な .NET ライブラリで発見されたユーティリティとプロパティ指向プログラミングの「ガジェットチェーン」のコレクションであり、適切な条件下でオブジェクトの安全でないデシリアライズを行う .NET アプリケーションを悪用することができます。メインドライバプログラムは、ユーザー指定のコマンドを受け取り、それをユーザー指定のガジェットチェーンでラップし、これらのオブジェクトを stdout...

IntelOwl

Intel Owl Do you want to get threat intelligence data about a malware, an IP address or a domain? Do you want to get this kind of data from multiple sources at the same time using a single API request? You are in the right place! IntelOwl is an Open Source solution for management of Threat...

log4shell

log4shell Python Script to scan the server file system for log4j jars that are vulnerable to CVE-2021-44228 and CVE-2021-45046. The script recursively goes through the file system including zip, ear, war to find log4j versions 2. to 2.15 with org/apache/logging/log4j/core/lookup/JndiLookup.class...

Quartz-1

To compile: % mvn install -DskipTests Note: a. the final Quartz jar is found under quartz/target b. if you don't have Oracle and/or Weblogic third party libraries jars required for compilation these can't be found on public Maven repos due to licensing you can comment out those modules under the...

CVE-2026-42167

CVE-2026-42167: ProFTPD modsql 中的 SQL 注入 📋 执行摘要 CVE-2026-42167 是 ProFTPD 的 modsql 模块中的一个严重 SQL 注入漏洞，可导致身份验证绕过 、后门用户注入 和远程代码执行（RCE） 。 属性| 值 ---|--- 类型| SQL 注入（CWE-89） 严重性| 高/严重 CVSS v3| 8.1 组件| ProFTPD 1.3.9a 中的 modsql 报告方| ZeroPath Research 日期| 2026 年 4 月 28 日 🔍 技术描述 问题：isescapedtext 中的弱验证 ProFTP...

CVE-2023-20198

CVE-2023-20198 An Exploitation script developed to exploit the CVE-2023-20198 Cisco zero day vulnerability on their IOS XE Hackers have been widely exploiting the this vulnerability which creates a 15 level privilege user by bypassing the authentication Which a malicous xml content make this...

LoadReload

LoadReload Shellcode Loader based on what i did for my Master Thesis, designed for Sliver-Shellcode smaller than 25MB..... !Note Features: Multibyte-XOR Decryption of Payload Fetches Payload locally Anti-Emulation by BusySleep-Function via KUSERSHAREDDATA RW-RX-Loop for EDR-Deconditioning / Wasti...

Nimbo-C2

Nimbo-C2 Nimbo-C2 概要 機能 インストール 簡単な方法 より簡単な方法 使用方法 制限、警告、注意点 貢献 概要 Nimbo-C2 は、（シンプルで軽量な）もう一つのC2フレームワークです。 Nimbo-C2 エージェントは、x64 Windows および Linux をサポートします。Windows では Nim で記述され、.NET（CLR をプロセスに動的にロード）も一部使用しています。Nim は強力ですが、Windows とのやり取りは Powershell を使用するとより簡単で堅牢であるため、この組み合わせが作られました。Linux...