CVE-2026-90209

A flaw was found in the Linux kernel's s390/debug component. A local user could trigger a deadlock by unregistering an s390dbf debug area while one of its associated debugfs files is being written to. This can lead to a system hang, resulting in a Denial of Service DoS...

CVE-2022-29885

CVE-2022-29885 The tool is only used for security research. It is prohibited to use the tool to launch illegal attacks, and the user is responsible for the consequences 工具仅用于安全研究以及内部自查，禁止使用工具发起非法攻击，造成的后果使用者负责 Introduce Apache Tomcat DoS CVE-2022-29885 Exploit Denial of Service in EncryptIntercept...

hyperhives-macos-infostealer-analysis

HyperHives macOS Infostealer — Full Technical Analysis Threat intelligence: Rust-based macOS universal binary infostealer delivered through a fake job interview pipeline on Wellfound formerly AngelList. The operator persona "Felix" from "HyperHive" lured targets into running a malicious installer...

viewstate-security-workshop

Viewstate Security Workshop This repository is for the Testing ASP.NET ViewState with YSoNet YSoSerial.NET workshop. Recommended Reading: Exploiting Deserialisation in ASP.NET via ViewState Recommended Tools For Solving The Labs when lab has been setup: https://github.com/irsdl/crapsecrets...

CVE-2026-90186

A flaw was found in the Linux kernel's nullblk module. A local user can cause a system crash by attempting to resize device queues while a shared tag set is active. This improper handling of queue resizing leads to a null pointer dereference, which can result in a denial of service...

nmap-log4shell

Nmap Log4Shell NSE script for discovery Apache Log4j RCE CVE-2021-44228 nmap-log4shell is a NSE script for discovery Apache Log4j RCE CVE-2021-44228 vulnerability across the network. The script is able to inject the log4shell exploit payload via HTTP Headers default or via TCP/UDP socket...

Firefox-Security-Toolkit

Firefox Security Toolkit A tool that transforms Firefox browsers into a penetration testing suite How? It downloads the most important extensions, and install it on your browser. The used extensions has been chosen by a survey among the information security community. Based on it's results, Firef...

ExWA

ExWa WhatsApp for CLI with API ExWa is a simple tool written in PHP, which functions to use a CLI version of WhatsApp application with help of API from rapiwha.com Installation : $ git clone https://github.com/dalpan/ExWa $ cd ExWa $ php exwa.php Usage : Register first at https://rapiwha.com/ and...

CVE-2026-90203

A flaw was found in Squashfs, a compressed read-only filesystem within the Linux kernel. A local attacker with administrative privileges could create a specially crafted Squashfs filesystem that contains a negative block offset. If this malicious filesystem is mounted, an unprivileged user could...

altair

ALTAIR - A Modular Web Vulnerability Scanner Copyleft by Simone Margaritelli [email protected] http://www.evilsocket.net - http://www.backbox.org Usage: altair options -u EXAMPLES: altair --filter=lfi,rfi --url=http://www.somesite.com altair --filter=sqli --load-modules=sqlmap...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse is a .NET application written in C that can be used to take advantage of a user's edit rights on a Group Policy Object GPO in order to compromise the objects that are controlled by that GPO. More details can be found at the following blog post:...

CVE-2025-51529

CVE-2025-51529: WordPress Cookies and Content Security Policy Plugin DoS Vulnerability Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attackers to cause a denial of service database server...

gopacket

gopacket By Jacob Paullus @psycep A complete Go implementation of Impacket - 63 tools and 24 library packages for Windows network protocol interaction, Active Directory enumeration, and attack execution. Built as a native Go framework so you can compile once and run anywhere without Python...

GoogleIndexRetriever

Google index Retriever Have you ever found a webpage that seems to talk exactly about what you need, but it has been removed? Yes, Google cache is the answer but... What if the cache has been removed too? What if the site is just in Google Index page? You can not get the webpage back, but you kno...

CatSniffer-Firmware

CatSniffer firmware Here you will find the different firmwares for using this tool, it is important to note what CatSniffer version you own since the main microcontroller changed in v3.x we needed to keep track of compatibility between different processors and protocols. Firmware for different...

RedTeamScripts

RedTeamScripts Repository with various Red Team scripts. kill.exe Performing all kind of activities during a red team and you have several process running that you don't want to close manually. kill.exe is for you. copy it in C:\Windows\ and simply call it with the process name you want to kill...

CVE-2025-3248

CVE-2025-3248 ★ CVE-2025-3248 Langflow RCE PoC ★ Lab Setup docker pull langflowai/langflow:1.2.0 docker run -d --name CVE-2025-3248 -p 7860:7860 langflowai/langflow:1.2.0 localhost:7860 Description Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code...

CVE-2023-23752-Joomla

CVE-2023-23752-Joomla Disclaimer: This cybersecurity tool is provided solely for technical support and does not involve any application or commercial use. Users must not use this cybersecurity tool in any way that infringes upon the legitimate rights and interests of others. The operation of this...

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

Grouper

Grouper DONT USE GROUPER ANY MORE. USE GROUPER2! https://github.com/l0ss/Grouper2 A PowerShell script for helping to find vulnerable settings in AD Group Policy. Photo by Jon Hanson - https://www.flickr.com/people/61952179@N00?rb=1 - https://creativecommons.org/licenses/by-sa/2.0/ Summary Grouper...