995484 matches found
CVE-2025-51868
CVE-2025-51868 Vulnerability description Dippyis a popular website to chat with millions of proactive AI characters. Dippy allows users to chat with characters based on LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to...
libretto
Libretto Libretto is a toolkit for building robust web integrations. It gives your coding agent a live browser and a token-efficient CLI to: Inspect live pages with minimal context overhead Capture network traffic to reverse-engineer site APIs Record user actions and replay them as automation...
CVE-2023-3009
CVE-2023-3009 Stored XSS on item name - Bypassing CVE-2023-2516 in TeamPass 3.0.9 - by M Nadeem Qazi Description This repository addresses the stored XSS vulnerability discovered in the nilsteampassnet/teampass application, which was assigned the CVE-2023-2516 identifier. The vulnerability can be...
LaZagneForensic
The LaZagne Project !!! Description The LaZagne project is back !!! LaZagne uses an internal Windows function called CryptUnprotectData to decrypt user passwords. This API should be called on the victim user session, otherwise, it does not work. If the computer has not been started when the...
CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln
CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln jmreport/qurestSql Unauthorized SQL Injection Batch Scan PoC. Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest version jeecg-boot 3.5.0 has been exposed with multiple SQL injection vulnerabilities. Usage...
Coercer
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through many methods. Windows Support To build a binary for Windows, download the installer.ps1 script from this repository. Run it simply with no arguments to create a binary in the working directory...
commando-vm
What is CommandoVM? Complete Mandiant Offensive VM "CommandoVM" is a comprehensive and customizable, Windows-based security distribution for penetration testing and red teaming. CommandoVM comes packaged with a variety of offensive tools not included in Kali Linux which highlight the effectivenes...
ULTIMATE-CYBERSECURITY-MASTER-GUIDE
π‘οΈ ULTIMATE CYBERSECURITY MASTER GUIDE Professional Cybersecurity Knowledge Base Β· Red Team Β· Blue Team Β· Purple Team Compiled from 70+ expert books Β· 90+ PNWC internal documents Β· custom tools & scripts Abide by theLegal Terms of Use & Disclaimer for the use and misuse of this repository. "Under...
CookieCatcher
CookieCatcher CookieCatcher is an open source application which was created to assist in the exploitation of XSS Cross Site Scripting vulnerabilities within web applications to steal user session IDs aka Session Hijacking. The use of this application is purely educational and should not be used...
KRBUACBypass
Background This POC is inspired by James Forshaw @tiraniddo shared at BlackHat USA 2022 titled β Taking Kerberos To The Next Level β topic, he shared a Demo of abusing Kerberos tickets to achieve UAC bypass. By adding a KERB-AD-RESTRICTION-ENTRY to the service ticket, but filling in a fake...
dirtyfrag
Dirty Frag: Universal Linux LPE Abstract This document describes the Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim @v4bel, which can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write CVE-2026-43284 vulnerability and the...
ageverificationbypass
AgeVerificationBypass AVB The Sanctuary Protocol for Sovereign Systems Why do I need to provide an ID to log into a Linux VM? This is not appropriate. π¨ The Problem: The Archon Age-Gate As of 2026/2027, major distributions Ubuntu and Fedora have begun integrating the...
rootOS
rootOS Tries to use various CVEs to gain sudo or root access. All exploits have an end goal of adding ALL ALL=ALL NOPASSWD: ALL to /etc/sudoers allowing any user to run sudo commands. Run root@kitploit: python root.py Exploits Name| CVE| Date| Links ---|---|---|--- ARDAgent| CVE-2008-2830|...
sx
sx is the command-line network scanner designed to follow the UNIX philosophy. The goal of this project is to create the fastest network scanner with clean and simple code. π Table of Contents Features Install Build from source Quick Start References Contributing Credits License β¨ Features β‘ 30x...
web
I have no data yet. It is a capital mistake to theorize before one has data. Insensibly one begins to twist facts to suit theories, instead of theories to suit facts. π§ β οΈ Work in progress; Not ready for use,yet β οΈ π§ Introducing OSINTBuddy Welcome to the OSINTBuddy project where you can connect,...
LTESniffer
LTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper LTESniffer is An Open-source LTE Downlink/Uplink Eavesdropper It first decodes the Physical Downlink Control Channel PDCCH to obtain the Downlink Control Informations DCIs and Radio Network Temporary Identifiers RNTIs of all active user...
CVE-2024-27956
WP Automatic Plugin SQL Injection Exploit CVE-2024-27956 A proof-of-concept exploit for the SQL injection vulnerability in WP Automatic plugin CVE-2024-27956 affecting WordPress sites. π Description This exploit targets a critical unauthenticated SQL injection vulnerability in the WP Automatic...
PersistBOF
PersistBOF A tool to help automate common persistence mechanisms. Currently supports Print Monitor SYSTEM, Time Provider Network Service, Start folder shortcut hijacking User, Junction Folder User, Xll Add-In User. Usage Clone, run make, add .cna to Cobalt Strike client. run: help persist-ice in ...
CVE-2019-9193
EN GenPostgresRCEExploit is a PoC tool designed to exploit an authenticated Remote Code Execution RCE vulnerability in certain versions of PostgreSQL 9.3 - 11.7. It allows authenticated users to execute system commands on a PostgreSQL database server vulnerable to CVE-2019-9193. Features...
phantomstars
phantomstars Automated detection and tracking of fake engagement on GitHub A JS Labs project β part of the AI Slop Intelligence initiative. Runs every day. Scores every suspicious account. Detects coordinated bot campaigns. Files issues directly on compromised repos so maintainers can act. Suppor...