CVE-2023-25136

OpenSSH Vulnerability Testing Tool for CVE-2023-25136 This repository provides a Proof of Concept PoC for testing the CVE-2023-25136 vulnerability in OpenSSH versions 9.0 and 9.1. The vulnerability allows for potential security risks and this tool helps identify if a server is running a vulnerabl...

Laravel-CVE-2021-3129

Laravel-CVE-2021-3129 CVE-2021-3129 Description Integrates https://github.com/zhzyker/CVE-2021-3129 and https://github.com/SNCKER/CVE-2021-3129. This project has the following advantages: Retains custom command functionality New: automatically exit after successful exploitation, improving...

CVE-2020-10199-Nexus-3.21.01

CVE-2020-10199-Nexus-3.21.01 Sonatype Nexus 3.21.01 - Remote Code Execution Authenticated - Updated This version is based from Alvaro Muñoz 49385 and from metasploit nexus exploit https://www.exploit-db.com/exploits/49385 Change the user,password,URL and CMD...

cve-2022-40684

cve-2022-40684 exploit for CVE-2022-40684 Fortinet...

CVE-2022-4616-POC

CVE-2022-46169 Pseudo Shell Description This Python script serves as a helper tool to streamline the process of exploiting the CVE-2022-46169 vulnerability. It starts an HTTP server that listens for incoming requests and provides a simple interface for the user to input commands. These commands a...

CVE-2026-8461

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

ROPE

ROPE: Routed Origin Policy Enforcement Source code of our paper: ROPE: Routed Origin Policy Enforcement against Indirect Prompt Injection by Xinhang Ma, Chaowei Xiao, William Yeoh, Ning Zhang, Yevgeniy Vorobeychik Abstract Indirect prompt injection IPI plants instructions in the content a...

InstagramOSINT

Instagram OSINT Tool - Archive The Instagram OSINT Tool gets a range of information from an Instagram account that you normally wouldn't be able to get from just looking at their profile. This repository has been archived. The information includes: 1. Username 2. Profile Name 3. URL 4. Followers ...

AMSIDetection

Author: Aden Chung Wee Jing [email protected] Company: Countercept @countercept Website: https://countercept.com How to Compile/execute Program must be compiled in x64 and run with adminstrative privliges...

RemotePSpy

RemotePSpy RemotePSpy provides live monitoring of remote PowerShell sessions, which is particularly useful for older pre-5.0 versions of PowerShell which do not have comprehensive logging facilities built in. It uses Event Tracing for Windows ETW to obtain message data from the WinRM protocol tha...

shadowhammer

Batch-mode shadowhammer MAC address checker Kaspersky recently discovered and analysed the 'Shadowhammer' attack https://securelist.com/operation-shadowhammer/89992. They did some great analysis and released a tool for sysadmins to use to determine if their systems were targetted. The released...

CVE-2022-21449-showcase

Demo program to showcase CVE-2022-21449 Pls run with JDK 17.0.0 O yeah here is screenshot...

CVE-2026-42945-NGINX-Rift-Check-Script

This repository does not have a README...

machscope

machscope machscope is a terminal-native macOS explorer that turns processes, launchd jobs, Mach services, bundles, signatures, entitlements, and Mach-O linkage into one interrogable graph. It exists to answer a simple question brutally well: What is this process, service, binary, or bundle reall...

Janus-CVE-2017-13156

Janus-CVE-2017-13156 Instructions for use : java -jar Janus.jar Janus dexfile apkfile outputfile Janus.jar : source/Janus.jar...

CVE-2026-71563

Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An authorization flaw in the MCP answer retrieval tool allows holders of a global API key to access answer content associated with hidden, deleted, or pending-review questions. Users are...

getSPNless

getSPNless Python tool to obtain Kerberos service tickets using the SPN-less technique. Based on Exploiting RBCD Using a Normal User Account. This tool uses the impacket project. Installation These tools are only compatible with Python 3.5+. Clone the repository from GitHub, install the...

themida-devirt

Themida/CodeVirtualizer Devirtualizer Example This project demonstrates the effect of devirtualizing code protected by Themida or CodeVirtualizer. Below, you can see a simple example showing the code before virtualization and the code after devirtualization side by side. Before Virtualization|...

lightkeeper

lightkeeper A port of the Lighthouse plugin to GHIDRA. Icons made by Pixel perfect from www.flaticon.com...

dredge-cargo

This is NOT a password manager. NOT a notes app. And definetely NOT a deep-sea benthic abberant specimen taxonomic provenance registry. But it does the first two better than either. Just kidding not really. Install • Quick Start • Features • The Link Command • Commands • How It Works • Security •...