CVE-2022-22057_SM-F926U

Fork My adaptation for the SM-F926U from the original exploit here HUGE thanks to m-y-mo for discovering the exploit and his extreme patience with all my questions to port this to SM-F926U and make it useable I've added a startup daemon libtimeline.so based on code from Shizuku Added a dirty tric...

CVE-2025-8088

Technical Deep Dive: CVE-2025-8088 - The Resilient Path Traversal Disclaimer: This content is for educational and research purposes only. Do not use this information for any malicious activities. Today, we're taking a deep dive into a fascinating path traversal vulnerability, tracked as...

sh4d0wup

sh4d0wup % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low level tampering,...

swarmer

swarmer A tool for sneakily adding registry keys to HKCU without EDR/AV being able to see what's happening even if you don't have administrator access. How do I use this? NOTE: You will only get to do this ONCE, afterNTUSER.MAN is your new registry hive you CANNOT change it without being an admin...

CVE-2026-116322

Improper locking in PostgreSQL startup processing allows an unauthenticated network client to trigger a server restart, via arranging for authenticationtimeout to arrive while it holds a spinlock during cancel handling. Within major version 18, minor versions before PostgreSQL 18.7 are affected...

CVE-2025-6218-POC

CVE-2025-6218 Proof of Concept POC Overview This repository contains a simple Proof of Concept POC for CVE-2025-6218 , demonstrating the exploitation of a vulnerability involving WinRAR’s handling of archive extraction paths. The POC batch script creates a ZIP archive that places a batch file int...

CVE-2025-8088-Winrar-Tool-Gui

🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ FOR EDUCATIONAL AND RESEARCH PURPOSES ONLY ⚠️ 🌐 Language / Dil 🇺🇸 English 🇹🇷 Türkçe English 📋 Table of Contents Overview Features Requirements Installation Usage Technical Details Screenshots Disclaimer Contributing 🎯 Overview CVE-2025-8088 is a fictional...

CVE-2025-8088-Multi-Document

WinRAR Path Traversal Exploit CVE-2025-8088 - Multi-Depth Payload Deployment This Python script exploits a path traversal vulnerability CVE-2025-8088 in WinRAR to deploy payloads to the Windows startup folder using multiple relative path depths. The exploit creates a malicious RAR archive that,...

WinRAR-CVE-2025-8088-PoC-RAR

WinRAR-CVE-2025-8088-PoC-RAR WinRAR 0day CVE-2025-8088 PoC RAR Archive Place the MyResumefinal.rar in the Downloads Directory and extract using "Extract to MyResumefinal" or from the UI using the Vulnerable WinRAR for now to run the exploit! : you'll see a VBScript named:...

CVE-Tracker

CVE-Tracker With the help of this automated script, you will never lose track of newly released CVEs. What does this powershell script do is exactly running the Microsoft Edge at system startup, navigate to 2 URLs ,and then put the browser in to full screen mode. As ethical hackers, it's vital th...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit Advanced WinRAR Path Traversal Exploit Tool A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088 using ADS and RAR5 header manipulation. Features ADS Exploitation - NTFS Alternate Data Streams...

RCLocals

RCLocals Inspired by 'Autoruns' from Sysinternals, RCLocals analyzes all Linux startup possibilities to find backdoors, also performs process integrity verification, scan for DLL injected processes and much more Things covered: ·List GPG keys trusted by the system ·Installed Packages ·File...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

ghost

ghost ghost is a light RAT that gives the server/attacker full remote access to the user's command-line interpreter cmd.exe. They are allowed to execute commands silently without the client/zombie noticing. The server/attacker is also given the ability to download and execute files on the...

WinRAR-Exploit-Tool---Rust-Edition

WinRAR Exploit Tool - Rust Edition Advanced WinRAR Path Traversal Exploit Tool - Written in Rust A high-performance, memory-safe implementation of the WinRAR CVE-2025-8088 exploit tool, rewritten in Rust for better reliability and performance. Features ADS Exploitation - NTFS Alternate Data...

CVE-2025-8088

POC for CVE 2025-8088 WinRAR -o...

WinRAR-CVE-2025-8088-Exploitation-Toolkit

☠️ CVE-2025-8088 WinRAR Exploit Tool ☠️ SYSTEM ACCESS: GRANTED TARGET: WINRAR VULNERABILITY A sophisticated, military-grade GUI tool designed for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088. This tool leverages advanced NTFS Alternate Data...

CVE-2025-59536

CVE-2025-59536 - the startup trust dialog implementation. Claude Vulnerability Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2025-10-03 Legal For authorized security testing only. Root Cause short version Claude Code is an agentic coding tool. Versions befor...

CVE-2025-8088-WinRAR-builder

CVE-2025-8088-WinRAR-builder A POC exploit for WinRAR vulnerability CVE-2025-8088 affecting versions 7.12 and lower 🚀 How It Works 1. Creates a Rar embed with other payloads 2. Using Multiple ADS Streams 🔄 - Attaches payload streams with different path traversal depths 3. Manipulates RAR Headers ...

mp-flipper

MicroPython Flipper Zero Allows you to use the power of Python natively on your Flipper Zero. The application is available on the official Flipper Lab. For details on how to programm your Flipper with Python, check out the documentation on GitHub pages. Disclaimer This FAP version requires about ...