juicy-potato

Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...

SwiftBelt

SwiftBelt 关于 SwiftBelt 是一个 macOS 枚举工具，灵感来源于 @harmjoy 基于 Windows 的 Seatbelt 枚举工具。SwiftBelt 不使用任何命令行实用程序，而是使用 Swift 代码（利用 Cocoa 框架、Foundation 库、OSKit 库等）执行系统枚举。这可以在攻击侧用于在获取 macOS 主机访问权限后执行枚举。我特意没有包含任何会导致弹出窗口的功能（例如：钥匙串枚举）。 感谢 Ramos04 贡献代码以查找各种 Objective See 工具，以及 mattreduce 贡献的 zshell 历史和 azure 凭据代码...

CVE-2022-43144-Stored-XSS

CVE-2022-43144 : Stored-XSS Description A cross-site scripting XSS vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Impact Allowing an attacker to hijack the user's session and take over the account. To exploit this...

Disk-Arbitrator

Introduction Disk Arbitrator is a Mac OS X forensic utility designed to help the user ensure correct forensic procedures are followed during imaging of a disk device. Disk Arbitrator is essentially a user interface to the Disk Arbitration framework, which enables a program to participate in the...

WSUS-CVE-2025-59287-RCE

WSUS-CVE-2025-59287-RCE CVE-2025-59287 is a critical CVSS 9.8 remote code execution vulnerability affecting ALL Microsoft Windows Server Update Services aka WSUS, and has been exploited in the wild. The vulnerability exploits insecure deserialization in the GetCookie endpoint, allowing...

log4j-detector

Log4j-检测器 扫描器，用于检测易受攻击的 Log4J 版本，帮助团队评估其对 CVE-2021-44228（严重）、CVE-2021-45046、CVE-2021-45105 和 CVE-2021-44832 的暴露程度。可通过仔细检查整个文件系统（包括所有已安装的应用程序）来搜索 Log4J 实例。它能够找到隐藏多层深处的 Log4J 实例。适用于 Linux、Windows 和 Mac，以及 Java 能运行的任何地方！ 目录 简介 使用示例 更多使用示例 理解结果 用法 从源码构建 测试 许可证 常见问题解答 它是如何工作的？ 此扫描仪仅报告对 log4j-core...

CVE-2026-105706

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attac...

CVE-2026-105704

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument userid leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and migh...

CVE-2026-105705

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...

zelos

Zelos Zelos（Z eropoint E mulated L ightweight O perating S ystem 的缩写，即零起点模拟轻量级操作系统）是一个基于 Python 的二进制模拟平台。其用途之一是通过命令行或 Python 脚本快速评估二进制文件的动态行为。所有系统调用都被模拟，以隔离目标二进制文件。支持 Linux x8664（32 位和 64 位）、ARM 和 MIPS 二进制文件。Unicorn 提供 CPU 模拟。 完整文档可在此获取。 安装 使用包管理器 pip 安装 zelos。 pip install zelos 基本用法 命令行...

zelos

Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

SysWhispers2

SysWhispers2 SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported and example generated files available in the example-output/ folder. Difference Between SysWhispers 1 and 2 The usage is almost identical to...

CVE-2022-38766

CVE-2022-38766 PoC for vulnerability in Renault ZOE Keyless System CVE-2022-38766 Introduce Companylogo AUTOCRYPT MalHyuk Overview This vulnerability raised the question of whether ZOE electric vehicles are safe form RF hacking. For this reason, the actual ZOE vehicle released this year was...

Antecursor

Antecursor Antecursor 项目是一个开源和开放硬件的项目，由信息安全专业学生创建，目标是为基于网络的信息收集和利用开发一个自主且模块化的系统。 受众 Antecursor 旨在帮助蓝队和红队双方，可用于不同目的： 作为自动化网络侦查/扫描的多功能工具 作为网络设备行为验证的验证工具 作为安全系统（如 SIEM、IPS 和 IDS 传感器）的培训工具，进行信息收集和漏洞利用 原则 Antecursor 是一个开放项目，遵循强原则，旨在模块化、灵活且合法。 模块化：Antecursor 旨在包含大量具有明确定义功能的组件 可用安全：Antecursor...

CVE-2026-105706

A cross-site request forgery (CSRF) vulnerability exists in the SourceCodester Drug Recommendation System 1.0 . The flaw is located in an unspecified function, allowing a remote attacker to perform unauthorized actions. The documents indicate that a proof-of-concept exploit is publicly available,...

EUVD-2026-92947

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attac...

CVE-2026-105706 SourceCodester Drug Recommendation System cross-site request forgery

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attac...

apache__rocketmq_CVE-2019-17572_4-6-0

Apache RocketMQ Apache RocketMQ is a distributed messaging and streaming platform with low latency, high performance and reliability, trillion-level capacity and flexible scalability. It offers a variety of features: Pub/Sub messaging model Financial grade transactional message A variety of cross...

CVE-2019-1388

CVE-2019-1388 UAC提权 nt authority\system 0x01 demo SERVER ====== Windows 2008r2 7601 link OPENED AS SYSTEM Windows 2012r2 9600 link OPENED AS SYSTEM Windows 2016 14393 link OPENED AS SYSTEM Windows 2019 17763 link NOT opened WORKSTATION =========== Windows 7 SP1 7601 link OPENED AS SYSTEM Windows ...