php2shell-kit

php2shell-kit An all-in-one testing + exploit kit for the PHP...

PCShare

PCShare is a powerful remote control software that can monitor the target machine's screen, registry, file system, etc. 1. Software Usage Introduction: 2. Start PcShare.exe, which is the main program of the control end. This program will listen for connections from the controlled end on port 8080...

ntlmv1-multi

NTLMv1 Multi Tool This tool reverses NTLMv1 hashes to NTLM, or more specifically it formats NTLMv1 challenge responses into a format that can be cracked with hashcat mode 14000 CT3 calculation If you specify --ct3 it will calculate the the final 4 digits of the NTLM for you, if you specify --json...

CVE-2020-28018

CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: Memory Leakage Arbitrary read...

pypacker

General information This is Pypacker: The fastest and simplest low-level packet manipulation library for Python. See below examples for what you can do with it. If you want to support this project you can via PayPal. What you can do with Pypacker Create custom Packets via keywords or from raw byt...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

Learning-History-of-CFF-bug-in-iphone

Learning-History-of-CFF-bug-in-iphone Dive into CFF font and coincidently learn about a bof in cff parsing from some jailbreak. just for fun So.... wtf is CFF ? So from my knowledge it's a file format , but let's try to understad what wikipedia says:"CFF acts as a container to store multiple font...

HouseProxy

HouseProxy Protect your parents from phishing, HTTP proxy focused on block phishing URL's Install git clone https://github.com/mthbernardes/HouseProxy.git cd HouseProxy/ pip3 install -r requeriments.txt Config Edit etc/HouseProxy.conf to change de default user and password Create a entry in your...

MeshCore

About MeshCore MeshCore is a lightweight, portable C++ library that enables multi-hop packet routing for embedded projects using LoRa and other packet radios. It is designed for developers who want to create resilient, decentralized communication networks that work without the internet. 🔍 What is...

frida-ui

Frida UI A modern, lightweight, web-based user interface for Frida, designed for Android application penetration testing. It allows you to interact with devices, processes, and scripts directly from your browser. Quick Start Install using uv recommended or pipx/pip uv tool install frida-ui Or: pi...

CVE-2021-46070

CVE-2021-46070 Exploit Title: Vehicle Service Management System - 'Service Requests' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-service-requests-stored-cross-site-scripting-xss...

dig

dig A local dig wrapper on macOS. The actual query is still sent by the system's built-in /usr/bin/dig. This project only appends a local TXT record after your own terminal output, for local testing convenience. It does not modify DNS, does not write zone files, and does not touch any cloud...

kamene

kamene formerly known as "scapy for python3" or scapy3k General Follow @pktkamene for recent news. Original documentation updated for kamene News We underwent naming transition of github repo, pip package name, and python package name, which will be followed by new functionality. More updates to...

By-Poloss..-..CVE-2026-11551-PoC

CVE-2026-11551: Branda Plugin - Unauthenticated Privilege Escalation via Account Takeover Overview CVE ID : CVE-2026-11551 CVSS Score : 9.8 Critical Affected : Branda – White Label & Branding = 3.4.29 Patched : 3.4.31 Published : June 19, 2026 Vulnerability Description The Branda plugin for...

socid-extractor

socidextractor Turn any public profile page into a structured account record — usernames, display names, bios, avatars, locations, joined-at dates, follower counts, external links, and the stable internal identifiers that uniquely pin an account across renames, redesigns, and deletions...

python-uncompyle6

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: uncompyle6 A native Python cross-version decompiler and fragment decompiler. The successor to decompyle, uncompyle, and uncompyle2. I gave a talk on this at BlackHat Asia 2024 . Introduction...

sshprank

Description A fast SSH mass-scanner, login cracker, banner grabber and password auth checker tool using the python-masscan and shodan module. Usage hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / // / / / / , opts | mode options -h - single host, cidr, ip range or...

Autorize

Autorize Autorize is an open-source automatic authorization and authentication enforcement detection extension for Burp Suite. It is designed to assist application security engineers and penetration testers in identifying authorization bypasses and authentication weaknesses in web applications—at...

CVE-2023-26262

Sitecore 10.3 Authenticated file upload vulnerability Author: Thomas Stern Date: 26/01-2023 Summary It is possible via the import languages functionality to upload and arbitrary file. This file could be a webshell that would allow for execution of code on the server. Step to reproduce For testing...

PHP-FPM-Remote-Code-Execution-Vulnerability-CVE-2019-11043-

CVE-2019-11043 1. Vulnerability Description When Nginx processes requests containing %0a with fastcgisplitpathinfo, it causes PATHINFO to be empty due to the newline character \n. PHP-FPM has a logic flaw when handling an empty PATHINFO. An attacker can craft a request to achieve remote code...