systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

CVE-2020-9442

Exploit Title: OpenVPN Connect for Windows MSI - 3.1.0.361 - Privilege Escalation Date: 2020-02-28 Author: Andrew Hess Software Link: https://openvpn.net/client-connect-vpn-for-windows/ Version: 3.1.0.361 MSI CVE: CVE-2020-9442 History 2019.12.15 - Vulnerability discovered 2019.12.15 - Initial...

Get-ReconInfo

Get-ReconInfo NAME Get-ReconInfo SYNOPSIS Lists connections and relevant info about a system Author: Chris King @raikiasec SYNTAX Get-ReconInfo DESCRIPTION This script runs the following commands on the local system, parses the output, and prints the results to the screen: netstat -ano ipconfig...

winfsp

WinFsp · Windows File System Proxy WinFsp enables developers to write their own file systems i.e. "Windows drives" as user mode programs and without any knowledge of Windows kernel programming. It is similar to FUSE Filesystem in Userspace for Linux and other UNIX-like computers. winfsp.dev...

CVE-2026-86002

Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can store arbitrary strings through the docker-options plugin, and those strings are later concatenated into DOCKERARGS an...

test-your-sysadmin-skills

:star: "A great Admin doesn't need to know everything, but they should be able to come up with amazing solutions to impossible projects. " - cwheeler33 ServerFault :star: "My skills are making things work, not knowing a billion facts. ... If I need to fix a system I’ll identify the problem, check...

CVE-Tracker

CVE-Tracker With the help of this automated script, you will never lose track of newly released CVEs. What does this powershell script do is exactly running the Microsoft Edge at system startup, navigate to 2 URLs ,and then put the browser in to full screen mode. As ethical hackers, it's vital th...

CVE-2021-21123-PoC-Google-Chrome

📝 Description Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski Total Bug Bounty Reward: $5.000 This is Proof of Concept for: Google SecuritySeverity CVE HIGH CVE-2021-21123 MEDIUM CVE-2021-21129 MEDIUM CVE-2021-21130 MEDIUM CVE-2021-21131 MEDIUM CVE-2021-2117...

PXEThief

PXEThief PXEThief is a set of tooling that implements attack paths discussed at the DEF CON 30 talk Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925 against the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager or ConfigMgr,...

LeakValue

Android 13 introduces many enhancements in order to harden Parcel serialization mechanism Here's presentation from Android Security and Privacy team on enhancements made That is great, definitely eliminates or makes unexploitable many vulnerabilities. Also they describe breaking my previous...

CVE-2023-21674

First in-the-wild 0-day of 2023 🔥 CVE-2023-21674 is a vulnerability in Windows Advanced Local Procedure Call ALPC that could lead to a browser sandbox escape and allow attackers to gain SYSTEM privileges discovered by Avast kd !analyze -v Bugcheck Analysis PAGEFAULTINNONPAGEDAREA 50 Invalid syste...

CVE-2026-110632

Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to a malicious reference server serving modified module...

KaliPackergeManager

KaliPackergeManager kalipm.sh is a powerful package management tool for Kali Linux that provides a user-friendly menu-based interface to simplify the installation of various packages and tools. It streamlines the process of managing software and enables users to effortlessly install packages from...

Palsy-Virus

Palsy Virus Python virus that will make your pc paralyzed once it opened ,hides itself and adds itself to the registry startup ^^ Platform : -- Windows only :P...

CVE-2025-70899

This repository contains the Proof of Concept demonstrating the missing CSRF protection vulnerability in PHPgurukul Online Course Registration System. 📄 View the complete PoC here: MissingCSRFprotectionpoc.md...

Snow Crash

Snow Crash This project is an introduction to computer security. Snow Crash will help you discover security in various sub-domains, with a developer-oriented approach. You will become familiar with several languages ASM, Perl, Php, etc., develop a certain logic to understand unknown programs, and...

hardcidr

hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, in CIDR notation owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries RIRs: ARIN North America RIPE...

CVE-2026-98410

In the Linux kernel, the following vulnerability has been resolved: watchdog: da9063: fix suspend/resume handling of HWRUNNING watchdog da9063wdtsuspend and da9063wdtresume only check watchdogactive, when the watchdog is left running by the driver sets WDOGHWRUNNING in da9063wdtprobe but userspac...

CVE-2026-110633

MyReport Updater through version 2.1.1 is vulnerable to a local privilege escalation flaw. The issue stems from the Updater service , where low-privileged users can manipulate UpdaterManager.exe over gRPC to specify a malicious reference server and installation location. This allows an attacker t...