EtwLeakKernel

EtwLeakKernel Este repositorio contiene un PoC para un programa que utiliza ETW para filtrar direcciones de memoria del kernel. Lo hace creando un consumidor podría ser para casi cualquier proveedor, ya que casi todos filtran direcciones del kernel y solicitándole un seguimiento de pila. Una vez...

windows-x86-shellcode-poc

Windows x86 Buffer Overflow PoC para Principiantes Este es un tutorial simple y autocontenido sobre exploits de desbordamiento de búfer basados en la pila para Windows de 32 bits. No se necesitan guías externas: todo lo que necesitas está aquí. ¿Qué es este repositorio? vulnerable.c: Un programa...

CVE-2022-23093

CVE-2022-23093 FreeBSD Stack-Based Overflow Informations The shellcode that is used by default is FreeBSD/x86-64 - execve - 28 bytes from Gitsnik change it and put your own one for starting Details of Vulnerability The ping utility, used to solicit an ICMP ECHORESPONSE from a host or gateway, is...

H3C Magic R300-2100M - Remote Code Execution

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. id: CVE-2023-33629 info: name: H3C Magic R300-2100M - Remote Code Execution author: DhiyaneshDK severity: high description: | H3C Magic R300 version...

Microweber < 1.2.11 - CRLF Injection

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11. id: CVE-2022-0666 info: name: Microweber 1.2.11 - CRLF Injection author: ritikchaddha severity: high description: | CRLF Injection leads to Sta...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

pbscan

SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...

pbscan

RESUMEN polarbearscan es un intento de realizar un escaneo de puertos y captura de banners más rápido y eficiente. Combina dos ideas diferentes que, con suerte, lo harán merecedor de su atención y tiempo. La primera de estas ideas es utilizar escaneo SYN sin estado usando cookies criptográficamen...

CVE-2024-29671-POC

NEXTU FLETA Wifi6 Router RCE Exploit POC This document describes how the CVE-2024-29671 vulnerability was exploited in the NEXTU FLATA AX1500 Router firmware. Execution Environment This router is based on the MIPS architecture using the Realtek chipset with Little-Endian. The target router firmwa...

SilentMoonwalk

SilentMoonwalk Implementación de PoC de un spoofeador de pila de llamadas completamente dinámico TL;DR SilentMoonwalk es una implementación de PoC de un spoofeador de pila de llamadas completamente dinámico, que implementa una técnica para eliminar el llamante original de la pila de llamadas,...

security-skills

Habilidades de Seguridad para Claude Code Un mercado de plugins de habilidades de Claude Code que automatizan operaciones de seguridad. Instala habilidades individuales para automatizar plataformas específicas, o combina varias para una integración de extremo a extremo en tu stack de seguridad...

ligolo-ng

Ligolo-ng : Tunneling like a VPN An advanced, yet simple, tunneling tool that uses TUN interfaces. 📑 Ligolo-ng Documentation Setup/Quickstart !TIP Ligolo-ng 0.8 added a lot of new features, including: 🌐 API and a beautiful Web Interface thanks to L'ami du Raisin, allowing multiplayer! ⚙️ Simple...

katana

Katana A BootROM exploit for Qualcomm devices released within 2016 til 2019. Brief Explanation of the Exploit With the MSM8998 Nazgul SoC, the command 0x13 SAHARARESETSTATEMACHINEID was added. The command called into bootsaharaentry, which is supposed to reinitialize Sahara. The flaw is that each...

CVE-2013-2028-Exploit

CVE-2013-2028 Exploit Vulnerability details Vulnerable software: Nginx 1.3.9 -lp 4. Let the exploit find actual value of the canary, and start reverse-shell...

EUVD-2026-95332

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2021-31166-exploit

CVE-2021-31166 Vulnerabilidad de ejecución remota de código en la pila de protocolo HTTP Versión atacada: Microsoft:Windows 10: versión 2004 para sistemas de 32 bits versión 2004 para sistemas basados en x64 versión 2004 para sistemas basados en ARM64 versión 20H2 para sistemas de 32 bits versión...

CVE-2022-1015

CVE-2022-1015 Root Cause In the nftparseregister function, because there is no validation when the arg defaults, an out-of-bounds OOB occurs on the stack of the nftdochain function. At this point, using the payload expression allows both read and write. The payload operates as follows: That is, b...

CVE-2025-5548

🛡️ CVE-2025-5548 – Exploit de Desbordamiento de Búfer de FreeFloat FTP Server 📌 Descripción general Este repositorio documenta el descubrimiento y explotación de una vulnerabilidad de desbordamiento de búfer basada en pila en la aplicación FreeFloat FTP Server. La vulnerabilidad reside en el manej...

CVE-2026-105827

A flaw was found in ImageMagick. A remote attacker can trigger a Denial of Service DoS by providing a specially crafted image file in the Continuous Acquisition and Life-cycle Support CALS format. Because the CALS decoder fails to properly limit recursion depth, processing the malicious image...

cve-2015-7547-public

PoC attack server for CVE-2015-7547 vulnerability in glibc DNS stub resolver To test on local machine with a vulnerable glibc version: user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee -a /etc/resolv.conf...