about-hmac

About HMAC An Example Implementation of Basic HMAC Hash-based Message Authentication Code Using Flask in Python. What is HMAC?! Hash-based message authentication code HMAC provides the server and the client each with a private key that is known only to that specific server and that specific clien...

CVE-2024-34833-payroll-management-system-rce

CVE-2024-34833 Payroll Management System RCE Unauthenticated PoC RCE via file upload for https://www.sourcecodester.com/php/14475/payroll-management-system-using-phpmysql-source-code.html. The filenames have timestamp prepended with a minute accuracy. The script tries to guess the filename using...

kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

CVE-2019-14537

YOURLS: CVE-2019-14537 PoC When you get a valid timestamp you will be able to make requests to the api. http://domain.com/yourls-api.php?signature=0e1&action=db-stats&timestamp=VALIDTIMESTAMP Usage usage: main.py -h --vhost VHOST --threads THREADS --path PATH --port PORT ip CVE-2019-14537 PoC...

some-tweak-to-hide-jwt-payload-values

some-tweak-to-hide-jwt-payload-values a handful of tweaks and ideas to safeguard the JWT payload, making it futile to attempt decoding by constantly altering its value, ensuring the decoded output remains unintelligible while imposing minimal performance overhead. What is a JWT Token? A JSON Web...

Stompy

Stompy A PowerShell function to perform timestomping on specified files and directories. The function can modify timestamps recursively for all files in a directory. Change timestamps for individual files or directories. Recursively apply timestamps to all files in a directory. Option to use...

token-reverser

Token Reverser Words list generator to crack security tokens. Installation $ git clone https://github.com/dariusztytko/token-reverser.git Example use case 1. You are testing reset password function 2. Reset password token was sent to your email box e.g. 582431d4c7b57cb4a3570041ffeb7e10 3. You...

Vidar-Stealer-Reverse-Engineering

Vidar Stealer 2.0 Reverse Engineering Analysis Overview This analysis covers an in-depth reverse engineering of Vidar Stealer 2.0 , a sophisticated information stealer that uses advanced evasion techniques to remain undetected. Key findings include: Task Scheduler Tampering: Modifies system task...

ICMP-Timestamp-POC

ICMP Timestamp Information Disclosure Scanner CVE-1999-0524 A set of scripts to detect and demonstrate the ICMP Timestamp Information Disclosure vulnerability CVE-1999-0524. These tools send crafted ICMP Type 13 Timestamp Request packets and analyze responses to extract remote system time...

HiveV5_keystream_decryptor

HiveV5 keystream decryptor PoC Introduction The Hive sample analyzed and referred to in this document was randomly chosen from this list created by @rivitna to which my warmest thanks go. Artifacts are available on the VirusTotal platform. In this document, file a0h2uih3d2.exe has been taken as a...

moonwalk

moonwalk Cubre tus huellas durante la Explotación de Linux / Pruebas de Penetración sin dejar rastros en los registros del sistema ni en las marcas de tiempo del sistema de archivos. 📖 Tabla de Contenidos Introducción Características Instalación Uso Contribución Licencia ℹ️ Introducción moonwalk e...

PoC-CVE-2025-69420

CVE-2025-69420 — OpenSSL TimeStamp Response type confusion PoC Crash-only laboratory reproducer for CVE-2025-69420 in OpenSSL. The PoC loads a valid RFC 3161 TimeStamp Response, changes the signed ESS attribute from VASN1SEQUENCE to VASN1NULL in memory, and calls TSRESPverifyresponse. On an...

CVE-2026-35584

CVE-2026-35584 POC - CVE-2026-35584 FreeScout Description Summary The endpoint GET /thread/read/conversationid/threadid does not require authentication and does not validate whether the given threadid belongs to the given conversationid. This allows any unauthenticated attacker to: Mark any threa...

CVE-2025-63585

CVE-2025-63585 Blind Time-Based SQL Injection in /action/rtcomments/status parameter: timestamp A blind, time-based SQL injection vulnerability was found in the timestamp parameter of the /action/rtcomments/status endpoint. An authenticated attacker who can supply this parameter may be able to...

MilkSad-Mnemonic-Generator

Milk Sad Mnemonic Generator This tool is designed to generate BIP-39 mnemonic phrases 24-word seed phrases based on Unix timestamps, specifically exploring phrases that could be generated through the "Milk Sad" vulnerability CVE2023-39910. What This Tool Does The Milk Sad Mnemonic Generator creat...

CVE-1999-0524

CVE-1999-0524 A Bash script to check if systems are vulnerable to ICMP Timestamp Request Remote Date Disclosure CVE-1999-0524. How to use 1. Make sure hping3 is installed and in your PATH. 2. Create a file that contains the targets, in IPv4 format and each target on a new line. 3. Make the script...

kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

CVE-1999-0524-POC

ICMP Timestamp Scanner — CVE-1999-0524 ╔══════════════════════════════════════════════════════════════════╗ ║ ██╗ ██████╗███╗ ███╗██████╗ ████████╗███████╗ ║ ║ ██║██╔════╝████╗ ████║██╔══██╗ ██╔══╝██╔════╝ ║ ║ ██║██║ ██╔████╔██║██████╔╝ ██║ ███████╗ ║ ║ ██║██║ ██║╚██╔╝██║██╔═══╝ ██║ ╚════██║ ║ ║...

kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

CVE-1999-0524-ICMP-Timestamp-and-Address-Mask-Request-Exploit

CVE-1999-0524 - ICMP Timestamp and Address Mask Request Exploit Description This tool is designed to target CVE-1999-0524, a vulnerability in the ICMP protocol, which allows arbitrary hosts to send ICMP Timestamp and Address Mask requests to a target system. This can expose sensitive network...