kin

A new foundation for code. Kin is a graph-native code repository for people and AI agents. It stores source, recorded code relationships, and versioned history as repository state. The graph is the repository model, not a search index maintained beside another repository. Functions, types, and th...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

gmailc2

gmailc2 A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the companies block unknown traffic so...

TriforceAFL

New: For those looking to play with TriforceAFL and TLSF, Richard Johnson created a Dockerfile which installs both and even builds a Linux kernel for you. It's available here https://hub.docker.com/r/moflow/afl-triforce/tags/. Also new: afl-tmin now works with the forkserver!...

es_inject

CVE-2014-3120 Ejecución Remota de Código en Elastic Search Este proyecto demuestra la vulnerabilidad/malconfiguración CVE-2014-3120. Permite leer y añadir contenido a archivos en el sistema que aloja ES, siempre que el usuario que ejecuta ES tenga acceso a ellos. Notas Esto no requiere un servido...

CVE-2022-28078

CVE-2022-28077 Home Owners Collection Management System 1.0 - Reflected XSS Exploit Title: Home Owners Collection Management System 1.0 - Reflected XSS Date: 2022-05-06 CVE: CVE-2022-28078 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Get-ReconInfo

Get-ReconInfo NOMBRE Get-ReconInfo SINOPSIS Enumera conexiones e información relevante de un sistema Autor: Chris King @raikiasec SINTAXIS Get-ReconInfo DESCRIPCIÓN Este script ejecuta los siguientes comandos en el sistema local, analiza la salida e imprime los resultados en pantalla: netstat -an...

EUVD-2026-93508

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a collection that allows downloadable SVG uploads can store a malicious SVG that bypasses sanitization and executes attacker-controlled JavaScript when a use...

CVE-2026-105862

The Payload headless content management system is vulnerable in versions before 3.90.0 and canary versions before 4.0.0-canary.34 . A collection allowing downloadable SVG uploads can store a malicious file that bypasses sanitization. When a user downloads and opens the SVG, it executes attacker-c...

CVE-2025-29017

CVE-2025-29017 - Sistema de Banca por Internet 2.0.0 Ejecución Remota de Código a través de la Carga de Foto de Perfil Descripción Existe una vulnerabilidad de Ejecución Remota de Código RCE en Code Astro Internet Banking System 2.0.0 debido a una validación incorrecta de carga de archivos en el...

NxRansomware

NxRansomware Una nueva generación de ransomware. Completamente escrito usando .Net Framework + Sistema C&C Creado por: Guilherme Bacellar Moralez Descargo de responsabilidad Este código está creado y mantenido solo con fines de investigación. Por favor, no lo uses para otros fines. Por favor, no...

awesome_windows_logical_bugs

awesomewindowslogicalbugs Created this repo for the people who want to learn about windows logical privilege escalation bugs. And also I added some of my findings. You can contact me via @404death to add good article which I missed. work in progress WIP , I'm always update this repo when the new...

AppArmor.d

apparmor.d Conjunto completo de perfiles de AppArmor !WARNING Este proyecto aún se encuentra en sus primeras etapas de desarrollo. La ayuda es muy bienvenida; consulte el sitio web de documentación, incluida su sección de desarrollo. Descripción AppArmor.d es un conjunto de más de 1500 perfiles d...

EUVD-2026-93495

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, querying a readable collection with a relationship to another collection can expose information about related documents protected by access.read where...

CVE-2026-105851 Payload: Field access control bypass on auth collections

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, the duplicate operation copies values from a source document even when a field is hidden or its access.read or access.create rule rejects that val...

Change-Lockscreen

Change-Lockscreen Change-Lockscreen is a tool to trigger network authentications as SYSTEM by changing the Windows lock screen image from the command line to perform privilege escalation attacks such as the one described in the post linked below:...

CVE-2019-9193

CVE-2019–9193 - PostgreSQL 9.6.1 Remote Code Execution Authenticated Proof of Concept PostgreSQL Database from version 9.6.1 are vulnerable to Authenticated Remote Code Execution. Even if it isn't considered to be a vulnerability itself by the development team, this could be leveraged to gain...

thrunt-god

De la señal, al enjambre. Sin dioses. Solo Thrunt. Sistema de comandos de cacería de amenazas para IDEs agénticos. Claude Code · OpenCode · Gemini · Codex · Copilot · Cursor · Windsurf /thrunt:autonomous | un comando, cacería completa Instalación · Fases · Comandos · Flujos · Artefactos Instalaci...

system_bt_AOSP10_r33_CVE-2022-20229

Pila Bluetooth Fluoride Compilación y ejecución en AOSP Simplemente compile AOSP - Fluoride está allí por defecto. Compilación y ejecución en Linux Instrucciones para Ubuntu, probado en 14.04 con Clang 3.5.0 y 16.10 con Clang 3.8.0 Descargar fuente mkdir /fluoride cd /fluoride git clone...

CVE-2022-40471

CVE-2022-40471 Remote code execution via unrestricted file upload vulnerability in the Clinic's Patient Management System v 1.0 Technical description: Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload...