n0Mac

n0Mac Yet Another Mac Changer!!! This script changes the MAC address of the network interface to a randomly generated address on system startup using crontab. It then uses the macchanger command to generate a list of MAC address vendors and selects one at random and then combines that vendor pref...

CVE-2023-38831

CVE-2023-38831 Exploit - Bait and Switch Archive Generator Overview This Python script is designed to generate a "bait and switch" archive file. It is meant for educational and ethical hacking purposes only. Please ensure that you have the necessary permissions before using this script. A "bait a...

honeyprompt

honeyprompt Introducing honeyprompt, an LLM-first deception framework made by/for web developers. The personal passion project of @alectrocute. Supports all major cloud and local LLM providers. SSH, HTTP, TLS, TCP, telnet and more. It ships as a small container and a single static binary and keep...

react2shell

React2Shell: RCE 0-day in React Server Components CVE-2025-55182 React and CVE-2025-66478 Next.js This repository contains exploit code for authorized security testing and educational purposes only. See also: Multiple researchers have published analyses of this vulnerability. Check the References...

watermarks-remover

| | | || | | |/ |/| || |/ |/ |/ | |/| | | | | | |/ ||| | | | | | \ | | | | | \ | \ | \ | | | || / | | \ watermarks-remover Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files — for privacy and hygiene on content you own. The skill is a thin client:...

F5_RCE

Usage python3 f5rce.py -u Specify target URL -f Batch detect from file -c Execute command The effect is as follows: PS: The output is not aesthetically pleasing enough, I will modify it 😁 Issues This PoC currently only supports some commands. Executing history, ls, etc. fails for unknown reasons...

lightweight_static_analysis

Lightweight Static Analysis This repo contains the PoC code for a ShellCon 2019 talk, "Rolling Your Own: How to Write Custom, Lightweight Static Analysis Tools" slides. In a nutshell, this repo demonstrates a few concrete examples of how you can build some interesting static analyses using open...

poc-cve-2023-2868

CVE-2023-2868: Barracuda ESG Command Injection For full details, read our AttackerKB Analysis. Usage Set LHOST and RHOST variables to your listener. ruby poccve20232868.rb This will spawn a reverse shell...

SessionView

SessionView A lightweight C console application for enumerating and displaying all user sessions on Windows Server, including session GUIDs. Features Complete Session Enumeration : Lists all active sessions on the Windows server Detailed Session Information : Displays Session ID, Station Name,...

TP-Link-WDR-Router-Command-injection_POC

This repository does not have a README...

LibSSH-Authentication-Bypass

LibSSH-Authentication-Bypass LibSSH Authentication Bypass CVE-2018-10933 Usage: To use this script type in: python3 LibAuth.py –help to see all the options and parameters we need to use. So we need to specify the victim’s IP address, port no and finally the command that we want to execute in the...

WaSonar

Disclaimer : This tool is for educational purposes and security research only. The developers are not responsible for misuse. Please use responsibly and ethically. WaSonar is a powerful CLI tool designed for educational research, device tracking, and stress testing on the WhatsApp protocol. Built...

LnkMeMaybe

LnkMeMaybe A .NET 8 toolkit for creating and analysing Windows Shell Link .lnk files. Includes a command-line builder LnkMeMaybe and a graphical editor LnkUi. Intended for security research and penetration testing. Projects Project| Description ---|--- Lnk/| Core library. Parses and generates .ln...

ShadowRay-RCE-PoC-CVE-2023-48022

PoC for a remote command execution vulnerability in Ray framework CVE-2023-48022 This exploit script and PoC are written for an in-depth CVE analysis on vsociety. The Ray framework, an essential tool for Python-based AI and machine learning applications, has encountered a significant security...

TospoVirus

Building TospoVirus for Distribution: ./build.sh Distribute to a working pineapple with version 2.3: ssh -oStrictHostKeyChecking=no -oUserKnownHostsFile=/dev/null [email protected] "mkdir /tospo" scp -oStrictHostKeyChecking=no -oUserKnownHostsFile=/dev/null dist/tv...

heretic

Heretic: Fully automatic censorship removal for language models Heretic is a tool that removes censorship aka "safety alignment" from transformer-based language models without expensive post-training. It combines an advanced implementation of directional ablation, also known as "abliteration"...

samsung-bixby-command-execution-cve-2026-21055-improper-component-export

CVE-2026-21055 PoC — Samsung Bixby Improper Component Export Proof of Concept for CVE-2026-21055 : Improper export of Android application components in Samsung Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege. Overview This repository...

tanstack-shield

🛡️ tanstack-shield One-command supply-chain attack scanner for CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx Detects the "Mini Shai-Hulud" worm that compromised 42 @tanstack/ npm packages 84 malicious versions on May 11, 2026. One line — scan your project curl -fsSL...

CmdLineSpoofer

Command Line Spoofer An example of using C to inject a meterpreter shell, whilst spoofing the command line. The command line is stored in the Process Environment Block, is logged when a new process starts, and is displayed in tools such as Process Hacker and Task Manager. Introduction This code i...

jaeles

!IMPORTANT This repository has been archived and is no longer maintained. Check out github.com/vigolium/vigolium — a brand new scanner that I made that's better in every way. Jaeles is a powerful, flexible and easily extensible framework written in Go for building your own Web Application Scanner...