CVE-2025-8088-BUILDER-Winrar-Tool

CVE-2025-8088 WinRAR path traversal tool ⚠ This tool is created solely for educational use only. Unauthorized use outside of controlled environments is strictly prohibited. A Python script that exploits CVE-2025-8088, a path traversal vulnerability in WinRAR, by generating a malicious archive tha...

sh4d0wup

sh4d0wup % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low level tampering,...

swarmer

swarmer A tool for sneakily adding registry keys to HKCU without EDR/AV being able to see what's happening even if you don't have administrator access. How do I use this? NOTE: You will only get to do this ONCE, afterNTUSER.MAN is your new registry hive you CANNOT change it without being an admin...

CVE-2025-8088-Multi-Document

Exploit de Path Traversal en WinRAR CVE-2025-8088 - Despliegue de Payload Multi-Profundidad Este script de Python explota una vulnerabilidad de path traversal CVE-2025-8088 en WinRAR para desplegar payloads en la carpeta de inicio de Windows utilizando múltiples profundidades de ruta relativa. El...

Startup-SBOM

Startup-SBOM Startup-SBOM is a universal utility designed to provide an insider view of which packages are executed during the startup of a Linux system or within a Docker container. By analyzing service files, init scripts, and container entrypoints, the tool maps every booting process to its...

CVE-2025-8088-Winrar-Tool-Gui

🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ FOR EDUCATIONAL AND RESEARCH PURPOSES ONLY ⚠️ 🌐 Language / Dil 🇺🇸 English 🇹🇷 Türkçe English 📋 Table of Contents Overview Features Requirements Installation Usage Technical Details Screenshots Disclaimer Contributing 🎯 Overview CVE-2025-8088 is a fictional...

RCLocals

RCLocals Inspired by 'Autoruns' from Sysinternals, RCLocals analyzes all Linux startup possibilities to find backdoors, also performs process integrity verification, scan for DLL injected processes and much more Things covered: ·List GPG keys trusted by the system ·Installed Packages ·File...

CVE-2022-22057_SM-F926U

Fork My adaptation for the SM-F926U from the original exploit here HUGE thanks to m-y-mo for discovering the exploit and his extreme patience with all my questions to port this to SM-F926U and make it useable I've added a startup daemon libtimeline.so based on code from Shizuku Added a dirty tric...

WinRAR-CVE-2025-8088-PoC-RAR

WinRAR-CVE-2025-8088-PoC-RAR Archivo RAR de PoC para WinRAR 0day CVE-2025-8088 Coloque el archivo MyResumefinal.rar en el directorio de Descargas y extráigalo usando "Extract to MyResumefinal" o desde la interfaz usando WinRAR vulnerable por ahora para ejecutar el exploit : Verá que un archivo...

Wormy

Wormy - The challenge In this repo I will write some functions in python3 in my free time to add "some spreading features like worms" to any python backdoor. After finishing I will make it a real worm ToDo list : 1Spread in drivers, add to startup and continuous check✓ 2Spread in python scripts b...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

CVE-2026-104019

OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might...

CVE-Tracker

CVE-Tracker With the help of this automated script, you will never lose track of newly released CVEs. What does this powershell script do is exactly running the Microsoft Edge at system startup, navigate to 2 URLs ,and then put the browser in to full screen mode. As ethical hackers, it's vital th...

BadSamba

DESCRIPCIÓN Este módulo se utiliza para explotar la ejecución de scripts de inicio mediante la configuración de directivas de grupo de Windows cuando están configuradas para ejecutarse desde un recurso compartido SMB remoto. Las directivas de grupo de Windows se pueden utilizar para configurar...

WinRAR-Exploit-Tool---Rust-Edition

WinRAR Exploit Tool - Rust Edition Herramienta avanzada de explotación de Path Traversal en WinRAR - Escrita en Rust Una implementación de alto rendimiento y segura en memoria de la herramienta de explotación WinRAR CVE-2025-8088, reescrita en Rust para mayor confiabilidad y rendimiento...

ghost

ghost ghost es un RAT ligero que le da al servidor/atacante acceso remoto total al intérprete de línea de comandos cmd.exe del usuario. Se le permite ejecutar comandos silenciosamente sin que el cliente/zombi se dé cuenta. El servidor/atacante también tiene la capacidad de descargar y ejecutar...

mp-flipper

MicroPython Flipper Zero Te permite usar el poder de Python de forma nativa en tu Flipper Zero. La aplicación está disponible en el Flipper Lab oficial. Para más detalles sobre cómo programar tu Flipper con Python, consulta la documentación en GitHub Pages. Descargo de responsabilidad Esta versió...

dnscrypt-autoinstall

dnscrypt-autoinstall This project has been archived, see last comment in 108. A script for installing and automatically configuring DNSCrypt on Linux-based systems. Description DNSCrypt is a protocol for securing communications between a client and a DNS resolver by encrypting DNS queries and...

linux-explorer

This project is no longer maintained! Linux Expl0rer Easy-to-use live forensics toolbox for Linux endpoints written in Python & Flask. Capabilities ps View full process list Inspect process memory map & fetch memory strings easly Dump process memory in one click Automatically search hash in publi...

CVE-2026-34940

CVE-2026-34940 — OS Command Injection in KubeAI via Model URL in Ollama startup probe Severity : High CVSS 8.7 CWE : CWE-78 — Improper Neutralization of Special Elements used in an OS Command Affected : github.com/kubeai-project/kubeai = 0.23.1 Fixed in : 0.23.2 Advisory : GHSA-324q-cwx9-7crr NVD...