46551 matches found
compromised-action
compromised-action Test repo: simulates CVE-2025-30066 style compromised GitHub Action for security research/testing chainradar...
challenge_repo
🎲 The Entropy Challenge 🇬🇧 Read in English | 🇹🇷 Türkçe Oku Introduction We have developed a next-generation random number generator that processes Radio Frequency RF Noise through a proprietary Neural Network architecture , followed by SHA-3 post-processing. We claim this source provides True...
reposherlock
RepoSherlock English | Türkçe Drop a GitHub repo URL or local path and get architecture, run guidance, risks, and actionable issues. Live CLI Preview Why RepoSherlock Before you run: understand architecture. Before you trust: see security and license risks. Before you waste time: start with...
ubercookie
🍪 ubercookie An educational demonstration of how websites persistently identify you — and why "clear your cookies" is no longer enough. ubercookie plants a single random id into 12 different browser storage vectors at once. Every time you visit, it reads them all, takes a consensus, and re-writes...
bepr
bepr bepr is a tiny authenticated client/server reverse shell program over outbound WebSocket connections. A single binary cover all 3 mode: server mode, client mode, and user mode. It is packaged with installation direction for rpm, deb, and pkg, it comes in 1MB. I created bepr because I'm...
PoC-CVE-2025-3914-Aeropage-WordPress-File-Upload
CVE-2025-3914 - Arbitrary File Upload in Aeropage Sync for Airtable WordPress Description The Aeropage Sync for Airtable WordPress plugin ≤ v3.2.0 is vulnerable to authenticated arbitrary file uploads due to insufficient file type validation in the aeropagemediadownloader function. Attack Vector ...
CVE-2022-1227_Exploit
CVE-2022-1227Exploit A script for exploiting CVE-2022-1227. Background Ubuntu 20.10 is recommanded. Podman TODO: add what is the principle of this vulnerability Install podman Follow the instruction in the official document: https://podman.io/getting-started/installationinstalling-on-linux For...
ZDI-CAN-16318
Exploits for CVE-2023-32162 ZDI-CAN-16318 0-day Here you can find my Local Privilege Escalation Vulnerability report. Here you can find my Arbitrary File Read Vulnerability report. Here you can find my Arbitrary File Read\Write Vulnerability report. Here you can buy me a unicorn 🦄 Share the...
Remote-Access-Trojan-Database
Remote-Access-Trojan-Database All samples in this database can only used for research purpose. the status of all RAT families including programming language used to write RAT stubs, the debut year of RAT families and source to determine the debut year. The forth column represents the source based...
CVE-2017-16995-Linux-Kernel---BPF-Sign-Extension-Local-Privilege-Escalation-
This repository does not have a README...
CVE-2023-35844
CVE-2023-35844 Lightdash file read vulnerability CVE-2023-35844...
CVE-2019-14271_Exploit
CVE-2019-14271Exploit A convenient and time-saving auto script of building environment and exploit it. References https://github.com/Metarget/metarget https://github.com/Metarget/metarget/tree/master/writeupscnv/docker-cve-2019-14271...
headerpwn
headerpwn 一个用于分析服务器对不同HTTP头响应的模糊测试工具。 🏗️ 安装 ⛏️ 使用 📡 通过Burp Suite代理HTTP请求 安装 要安装 headerpwn，请运行以下命令： root@kitploit: go install github.com/devanshbatham/[email protected] 使用 headerpwn 允许你在目标 URL 上测试各种请求头并分析响应。以下是使用该工具的方法： 1. 使用 -url 参数提供目标 URL。 2. 创建一个文件，包含要测试的请求头，每行一个。使用 -headers 参数指定该文件的路径。...
headerpwn
headerpwn A fuzzer for analyzing how servers respond to different HTTP headers. 🏗️ Install ⛏️ Usage 📡 Proxying HTTP Requests Install To install headerpwn, run the following command: root@kitploit: go install github.com/devanshbatham/[email protected] Usage headerpwn allows you to test various...
CVE-2022-2602
CVE-2022-2602 This repository contains exploits for CVE-2022-2602. There are two versions of it: Exploit using userfaultfd technique. Exploit using inode locking technique. Enjoy! : LukeGix...
ESP-RFID-Tool
ESP-RFID-Tool By Corey Harding Official website: www.rfid-tool.com April Brother is currently manufacturing this hardware and it can be purchased direct from China from their Official Store: https://blog.aprbrother.com/product/esp-rfid-tool AliExpress Store:...
CVE-2024-28715
CVE-2024-28715 CVE ID CVE-2024-28715 PRODUCT DoraCMS Version DoraCMS v2.18 and before PROBLEM TYPE Dom-based XSS. DESCRIPTION Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via the markdown0 function in the...
InfluxDB-Exploit-CVE-2019-20933
InfluxDB Exploit CVE-2019-20933 Exploit for InfluxDB CVE-2019-20933 vulnerability, InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret aka shared secret. Exploit check if serv...
ZSC
OWASP ZSC THIS SOFTWARE WAS CREATED TO CHALLENGE ANTIVIRUS TECHNOLOGY, RESEARCH NEW ENCRYPTION METHODS, AND PROTECT SENSITIVE OPEN SOURCE FILES WHICH INCLUDE IMPORTANT DATA. CONTRIBUTORS AND OWASP FOUNDATION WILL NOT BE RESPONSIBLE FOR ANY ILLEGAL USAGE. OWASP ZSC is open source software written ...