sklad

Sklad 📦 Sklad is a cross-platform snippet manager that lives in your system tray. Store passwords, API keys, code snippets, and any text you copy frequently — encrypted and always one click away. Sklad Demo ✨ Features 🔒 Master Password Protection — Secrets are AES-256 encrypted with Argon2 key...

CVE-2022-28078

CVE-2022-28077 Home Owners Collection Management System 1.0 - Reflected XSS Exploit Title: Home Owners Collection Management System 1.0 - Reflected XSS Date: 2022-05-06 CVE: CVE-2022-28078 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

tsunami-security-scanner

Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...

System_Connectivity_Wificond_CVE-2021-0392

This repository does not have a README...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

CVE-2022-40471

CVE-2022-40471 Remote code execution via unrestricted file upload vulnerability in the Clinic's Patient Management System v 1.0 Technical description: Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload...

mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

mySCADA myPRO 7 Hardcoded Credentials CVE-2018-11311 https://vulners.com/cve/CVE-2018-11311 https://www.exploit-db.com/exploits/44656/ http://myscada.org/wp-content/uploads/downloads/BOXv7/changelog.txt Changelog v7.0.46 ----------------- - fix of possible vulnerability as described here...

hget

hget This project is my personal project to learn golang to build something useful. Build Status : Install $ go get -d github.com/huydx/hget $ cd $GOPATH/src/github.com/huydx/hget $ make clean install Binary file will be built at ./bin/hget, you can copy to /usr/bin or /usr/local/bin and even ali...

system_media_AOSP10_r33_CVE-2020-0458

This repository does not have a README...

Lenovo-CVE-2025-8061

Lenovo-CVE-2025-8061 PoC for popping a system shell against the LnvMSRIO.sys 3.1.0.36 driver. All credits go to the original author Luis Casvella from Quarkslab. This works against latest Windows 11 Version 24H2 with KVAShadowing and Core Isolation disabled! !NOTE This was compiled using latest...

vss-fr2system

vss-fr2system Two small tools that turn an arbitrary file read bug on Windows into a SYSTEM shell. vssfreeze/ — creates a Volume Shadow Copy as a standard user , then holds it open so you have time to read the SAM/SECURITY/SYSTEM hives out of it fr2system/ — takes the hives you copied out, decryp...

tiny_tracer

tinytracer A Pin Tool for tracing: API calls, including input and output of selected functions defined local functions, and functions from statically linked libraries selected instructions: RDTSC, CPUID, INT inline system calls, including parameters of selected syscalls transition between section...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 16.6.1 Refer to lunar.sh and CHANGELOG.md for more up to date version information License CC BY-NC-SA: https://creativecommons.org/licenses/by-nc-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code i...

witchcraft

🎉 Your OPSEC companion. Run witchcraft help or witchcraft manual for the complete manual 🎉 What it does? WITCHCRAFT Are much more than a simple alias, it's a init system that can works with busybox, a shell and automation's and automation's engine for hacking, osint, forensics, etc. NAME witchcra...

what-you-reveal

╦ ╦╦ ╦╔═╗╔╦╗ ╦ ╦╔═╗╦ ╦ ╦═╗╔═╗╦ ╦╔═╗╔═╗╦ ║║║╠═╣╠═╣ ║ ╚╦╝║ ║║ ║ ╠╦╝║╣ ╚╗╔╝║╣ ╠═╣║ ╚╩╝╩ ╩╩ ╩ ╩ ╩ ╚═╝╚═╝ ╩╚═╚═╝ ╚╝ ╚═╝╩ ╩╩═╝ SYSTEM ANALYSIS TOOL // BROWSER FINGERPRINT DEMO What You Reveal is a privacy analysis tool designed to show exactly what information your browser exposes to websites. It...

CVE-2024-34474

CVE-2024-34474 Clario through 2024-04-11 for Windows Desktop has weak permissions for %PROGRAMDATA%\Clario and tries to load DLLs from there as SYSTEM. Description: Clario for Windows desktop application attempts to load non existent DLLs libraries from C:\ProgramData\Clario\ and...

zen-desktop

Zen: Your Comprehensive Ad-Blocker and Privacy Guard There is, simply, no way, to ignore privacy. Because a citizenry’s freedoms are interdependent, to surrender your own privacy is really to surrender everyone’s. Edward Snowden, Permanent Record Website • Mastodon • Bluesky • Discord •...

CVE-2014-7911

CVE-2014-7911 POC for CVE-2014-7911 for Nexus5 Android 4.4.4r1 based on retme7, use different rop chain Info http://ele7enxxh.com/CVE-2014-7911-Detailed-Analysis-Of-Android-Local-Privilege-Escalation-To-System-Vulnerability.html Usage connect your phone via adb adb push jni/expolit /data/local/tm...

CVE-2025-29015

CVE-2025-29015 - Internet Banking System 2.0.0 Stored XSS in pagesaccount.php Description A Stored Cross-Site Scripting XSS vulnerability exists in Code Astro Internet Banking System 2.0.0 via the name parameter in /admin/pagesaccount.php. Malicious JavaScript code can be injected and stored in t...