CVE-2024-38475

CVE-2024-38475 exploit CVE-2024-38475modrewrite weakness with filesystem path matching This repository contains a Python script for testing web server vulnerabilities, specifically targeting Apache servers. The script checks for potential issues modrewrite weakness with filesystem path matching t...

njRAT

njRAT njRAT SRC Extract All responsibilities are at your own risk. Please use it only for research purposes...

CVE-2010-2075

CVE-2010-2075 - UnrealIRCd 3.2.8.1 Backdoor Bash PoC Description Bash PoC for the backdoor introduced in the UnrealIRCd 3.2.8.1 source tarball. The compromised binary executes arbitrary commands prefixed with AB; sent to the IRC port. Usage chmod +x exploit.sh ./exploit.sh Example: ./exploit.sh...

osed-scripts

osed-scripts bespoke tooling for offensive security's Windows Usermode Exploit Dev course OSED Table of Contents Standalone Scripts egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg Scripts find-ppr.py find-bad-chars.py search.py Standalone Scripts Installation:...

FTC-Skystone-Dark-Angels-Romania-2020

NOTICE This repository contains the public FTC SDK for the SKYSTONE 2019-2020 competition season. Formerly this software project was hosted here. Teams who are competing in the SKYSTONE Challenge should use this new SKYSTONE repository instead of the older and no longer updated ftcapp repository...

Shellcrypt

Shellcrypt A single-file cross-platform quality of life tool to obfuscate a given shellcode file and output in a useful format for pasting directly into your source code. Contributors These are going here because they deserve it An00bRektn github twitter ♥ 0xtejas github Encryption Methods...

CVE_2013_2186

CVE20132186 Source code for CVE-2013-2186...

CVE-2025-55183

CVE-2025-55183 Scanner for React Server Functions source code exposure vulnerability. What is this? CVE-2025-55183: React 19.0.0-19.2.1 Server Actions can be exploited to expose their full source code including hardcoded secrets, API keys, and database credentials. References:...

svn-extractor

Svn-Extractor Many a times web application pen-testers are encountered with the presence of .svn folders. For those not aware .svn folder is used by SVN version control system to perform its operations. For a blackbox pentest this folder contains huge amount of information. Some of the key areas...

VulnHunter

VulnHunter !NOTE A maintained fork of Capital One's VulnHunter Apache-2.0 — built to run on any agent harness , not just Claude Code. This fork's focus: harness portability , sandboxed containerized exploit validation , and measured-impact PoCs. See Why the changes · What this fork changes · The...

flareon2024

Flare-On 11 solutions Source codes of my solutions for the tasks from Flare-On11 challenge. My writeups of selected tasks available here...

eos

Enemies Of Symfony EOS EOS loots information from a Symfony target in debug mode: Section| Description ---|--- General| Get general information about the target. Phpinfo| Extract Symfony environment variables from the exposed phpinfo. Routes| Get the list of registered routes. Request logs| Look...

Leaktopus

Deprecation Notice Dear Leaktopus Users, We want to inform you that the Leaktopus project will be officially deprecated. After careful evaluation, we have decided to discontinue active development and maintenance of this library. What Does This Mean for You? No New Features or Updates: We will no...

OpenPLC_v3

OpenPLC Runtime version 3 Introduction OpenPLC is an open-source programmable logic controller based on easy-to-use software. Our focus is to provide a low-cost industrial solution for automation and research. OpenPLC has been used in many research papers as a framework for industrial cybersecuri...

actions-secrets

SecureStack Secrets Analysis GitHub Action A GitHub Action that analyses your source code for secrets, credentials, API keys, server and database hostnames/URLS, and a lot more! When you add this to GitHub Actions we will analyze your source code to make sure there is no sensitive data in your...

nextjs-security-update

nextjs-security-update There are people building OSS tools to exploit the new Next.js vulnerabilities. This is a tool to fight back - makes it dumb easy to upgrade all your Next.js apps across all your GitHub accounts. Uses the official Vercel fix tool under the hood. What happened Dec 11, 2025:...

rips-scanner

RIPS A static source code analyser for vulnerabilities in PHP scripts Requirements web server: Apache or Nginx recommended PHP: latest version recommended browser: Firefox recommended Installation 1. Download the latest release 2. Extract the files to your local web server's document root 3. Make...

Sub7

Sub7 SubSeven was a backdoor program or R.A.T. remote administration tool written in Delphi by mobman, that allowed others to gain full access to Windows 9X systems through a network connection. This is the source code to Sub7 2.1.2 , and released April 2000 right before the malicious HDDKiller...

obridge

OBridge OBridge provides a simple Java source code generator for calling Oracle PL/SQL package procedures. Supported input, output parameters and return values are: BINARYINTEGER BOOLEAN CHAR CLOB BLOB DATE NCHAR NUMBER NVARCHAR2 OBJECT - Oracle Object Type PLSINTEGER TABLE - Table of Oracle Obje...

cve-2017-16995

CVE-2017-16995 Writeup The folder containes a line-by-line source code analysis for CVE-2017-16995 Linux BPF local privilege escalation. Exploit and patch tested on kernel 4.4.0.116. Credits Special thanks to difengtang who has also contributed this writeup. Exploit scripts was created by @iBearc...