blackout-public

ZoomInfo GTM Studio: Pre-Consent Tracking Documentation "You can block the researcher. You can't block the evidence." What Happened On November 25, 2025, ZoomInfo CEO Henry Schuck posted a product demo of GTM Studio on LinkedIn — their AI-powered platform that "identifies person-level website...

CVE-2024-35250-BOF

CVE-2024-35250-BOF Implementación del Beacon Object File BOF para CVE-2024-35250, para Cobalt Strike. Compilado con Visual Studio. Agradecimientos Todo el mérito del código de la vulnerabilidad es del autor original varwara. Descargo de responsabilidad No me hago responsable de ningún crimen cont...

xori

Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...

studio

ShipSec Studio Open-Source Security Workflow Orchestration Platform. ShipSec is currently in active development. We are optimizing the platform for stable production use and high-performance security operations. ShipSec Studio provides a visual DSL and runtime for building, executing, and...

EUVD-2026-77131

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

CVE-2020-0418

CVE-2020-0418 Proyecto de Android Studio para generar las apks utilizadas para el exploit. Para generar la versión 1 de la apk basta con dejar comentadas las líneas indicadas en el AndroidManifest.xml Para generar la versión 2 de la apk basta con descomentarlas Demostración en...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

CVE-2022-24521

CVE-2022-24521 CVE-2022-24521 poc win10 21h2 19044.1620 win11 21h2 22000.593 Información básica de compilación Versión del SDK de Windows: 10.0 última versión instalada Conjunto de herramientas de plataforma: Visual Studio 2022 v143 Estándar del lenguaje C++: Predeterminado estándar ISO C++14...

CVE-2026-90602

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

power-pwn

Maintained by: Secure AI Agents Everywhere. Overview Power Pwn is an offensive and defensive security toolset for Microsoft 365 Power Platform and AI services. Key Features, among others: 💾 PowerDump : Comprehensive tenant scanning and data collection 🚪 BackDoor : Deploy backdoor flows for...

CVE-2026-90602

A cross-site scripting (XSS) vulnerability affects the renderHistory function in ImageStudio.js within the Studio Components component of Anil-matcha Open-Generative-AI (versions up to 1.0.11/2.0.0). The attack can be initiated remotely and requires low privileges and user interaction , resulting...

CVE-2026-90602 Anil-matcha Open-Generative-AI Studio Components ImageStudio.js renderHistory cross site scripting

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

tiny_tracer

tinytracer A Pin Tool for tracing: API calls, including input and output of selected functions defined local functions, and functions from statically linked libraries selected instructions: RDTSC, CPUID, INT inline system calls, including parameters of selected syscalls transition between section...

apkstudio

APK Studio IDE de código abierto y multiplataforma basado en Qt6 para la ingeniería inversa de paquetes de aplicaciones Android. Ofrece un diseño similar a un IDE con editor de código y resaltado de sintaxis para archivos de código .smali. Características Multiplataforma , funciona en Linux , Mac...

CVE-2025-34300POC

Sawtooth Lighthouse Studio has a template injection vulnerability CVE-2025-34300 Parameters: root@kitploit: options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 Examples: root@kitploit: 单个检测： python .\CVE-2025-34300POC.py -u URL 批量检...

pycdc-studio

pycdc-studio 中文说明 Una interfaz gráfica de escritorio con Qt Widgets para explorar bytecode de Python usando pycdc / pycdas, inspeccionar resultados de descompilación nativa, importar la salida de Pyarmor oneshot y reintentar objetos de código no soportados con respaldo de IA. La aplicación es...

kekeo

kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...