CrackAVFee

CVE 2022 3368 Vulnerability in Software Update Discovered by: @Wh04m1001 - @pxcs https://github.com/Wh04m1001/CVE-2022-3368 Educational purposes only!...

ctf-tools

ctf-tools This is a collection of setup scripts to create an install of various security research tools. Of course, this isn't a hard problem, but it's really nice to have them in one place that's easily deployable to new machines and so forth. The install-scripts for these tools are checked ever...

CVE-2023-23397-Patch

CVE-2023-23397 Windows Update Patch CVE-2023-23397 powershell patch script for Windows 10 and 11 This version of the script allows you to check if your device has the most reach sent patches for the latest Microsoft exploit. if the security updates are not found using the Powershell Command...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

python-tuf

A Framework for Securing Software Update Systems The Update Framework TUF is a framework for secure content delivery and updates. It protects against various types of supply chain attacks and provides resilience to compromise. This repository is a reference implementation written in Python. It is...

CVE-2026-0023-Update-Ownership-PoC

CVE-2026-0023 - Android Update Ownership Trust Bypass PoC A complete Android laboratory environment for reproducing and studying CVE-2026-0023. This repository demonstrates how CVE-2026-0023 allows a regular installer to influence an internal Android installation flag that should only be controll...

CVE-2026-82563

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

CVE-2026-77974

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...

OSINT-Framework

OSINT Framework http://osintframework.com Notes OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get...

How-to-Patch-CVE-2025-32709

How to Patch CVE-2025-32709 Vulnerbility Real-world patching workflow for CVE-2025-32709. From hotfix install to SIEM alert validation—this repo documents every step with screenshots, commands, and detection logic. Screenshot of the Wazuh Vulnerability Detection dashboard showing CVE-2025-32709...

CVE-2026-77974

Softish C6 Ear Camera and its EarVision Android Application contain a vulnerability where a critical function lacks proper authentication. After spoofing the device and obtaining a single user confirmation, an attacker in the adjacent network can cause the application to transmit firmware through...

EUVD-2026-75056

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...

CVE-2026-77974 Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...

sh4d0wup

sh4d0wup root@kitploit: % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low...

EUVD-2026-75053

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

CVE-2026-82563

CVE-2026-82563 affects the Softish C6 Ear Camera and the EarVision Android Application . The vulnerability is an authentication bypass by spoofing : an attacker can impersonate the camera device, placing themselves in a man-in-the-middle or device-emulation position. This enables manipulation of ...

toolkit

English | Español Indetectables Toolkit Designed as a Swiss Army knife, this curated toolkit is invaluable for malware analysts, crackers, and cybersecurity experts. It is meticulously crafted to support both novice and experienced users. This toolkit complements the manuals and the numbered...

SNEK_Equinox

SNEK Equinox I would like to thank Nightmare-Eclipse for the inspiration not personal from the project UnDefend - https://web.archive.org/web/20260521145157/https://github.com/Nightmare-Eclipse/UnDefend: Now funnily enough, I found a way to lie to the EDR web console to show that defender is up a...

CVE-2026-23416-POC

CVE-2026-23416 — PoC mm/mseal: update VMA end correctly on merge Vulnerability discovered by Antonius / Blue Dragon Security Overview...

react-CVE-2025-55182-fixer

React Server Components Security PR Automation This repository provides a script to automatically bump and create pull requests PRs for repositories affected byCVE-2025-55182, which affects vulnerable versions of react-server-dom- and related React packages. What does this tool do? Scans for...