knowsmore

Knows More KnowsMore officially supports Python 3.8+. Main features Import NTLM Hashes from .ntds output txt file generated by CrackMapExec or secretsdump.py Import NTLM Hashes from NTDS.dit and SYSTEM Import Cracked NTLM hashes from hashcat output file Import BloodHound ZIP or JSON file BloodHou...

GhostKatz

GhostKatz Extrae credenciales de LSASS directamente desde la memoria física abusando de controladores vulnerables firmados con primitivas de lectura de memoria física a través de MmMapIoSpace, evadiendo las capacidades tradicionales de detección en modo usuario. Esta herramienta fue desarrollada ...

inficere

inficere Public version of my Mac OS X rootkit built on top of fractalG's onyx-the-black-cat https://github.com/gdbinit/onyx-the-black-cat Tested only in Mountain Lion, 10.8.2 to 10.8.5. Not guaranteed to work on other versions. Features process hiding - hides from 'ps PID', 'ps aux', Activity...

ADCSync

ADCSsync Esta es una herramienta que preparé rápidamente para realizar un DCSync utilizando ESC1. Es bastante lenta, pero por lo demás es un medio efectivo para realizar un ataque DCSync improvisado sin utilizar DRSUAPI ni Volume Shadow Copy. Esta es la primera versión de la herramienta y...

usbpcap

USBPcap - Captura de paquetes USB para Windows El instalador para usuarios finales está disponible en: http://desowin.org/usbpcap La siguiente información está destinada únicamente a desarrolladores y usuarios avanzados. Resumen del directorio: USBPcapCMD - aplicación de espacio de usuario de...

autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

CVE-2022-24086

CVE-2022-24086 CVE-2022-24086 about Magento RCE Description Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result i...

CVE-2024-27956

WP Automatic Plugin SQL Injection Exploit CVE-2024-27956 A proof-of-concept exploit for the SQL injection vulnerability in WP Automatic plugin CVE-2024-27956 affecting WordPress sites. 📌 Description This exploit targets a critical unauthenticated SQL injection vulnerability in the WP Automatic...

usbsas

usbsas es una herramienta y framework libre y de código abierto GPLv3 para leer de forma segura dispositivos de almacenamiento masivo USB no confiables. Visión general Siguiendo el concepto de defensa en profundidad y el principio de mínimo privilegio, el objetivo de usbsas es reducir la superfic...

CVE-2026-43499-S25U

CVE-2026-43499 PoC para Galaxy S25 Ultra Prueba de concepto específica del dispositivo para CVE-2026-43499 en el Samsung Galaxy S25 Ultra coreano. Objetivo compatible Model: SM-S938N Codename: pa3q Android: 16 / API 36 Build: S938NKSUACZF1 Display ID: BP4A.251205.006.S938NKSUACZF1 Fingerprint:...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

Pyison

Pyison Pyison is a tarpit for AI webcrawlers Introduction Like all web crawlers, AI bots request pages from webservers, and then follow links on the page to other pages. By doing this, they can build an index of an entire website. Unlike other web crawlers, though, AI bots present some unique...

CVE-2026-61797

CVE-2026-61797 — GLPI PDF Plugin Time-Based Blind SQL Injection Proof of Concept for CVE-2026-61797 , a time-based blind SQL Injection vulnerability affecting the GLPI PDF plugin. The vulnerability can be reached through: /marketplace/pdf/front/preference.form.php In the vulnerable implementation...

CVE-2017-5487

PoC - CVE-2017-5487 - WordPress User Enumeration via REST Setup git clone https://github.com/ndr-repo/CVE-2017-5487.git powershell -noexit -ExecutionPolicy Bypass -File .ps1 Usage .\Enumerate-WordPressOrgMembersREST.ps1 Alternate Route 1 for WAF Bypass...

EUVD-2026-93786

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-23111

Auditor CVE-2026-23111 Linux Kernel nftables UAF Este repositorio contiene un script de auditoría automatizado en Bash diseñado para evaluar de manera profunda y precisa la vulnerabilidad CVE-2026-23111 en entornos Linux. 🔍 ¿Qué es la vulnerabilidad CVE-2026-23111? CVE-2026-23111 es una...

CVE-2026-106104

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platform.parseSSR passed an unbounded User-Agent request header to getMatch in ui/src/plugins/platform/Platform.js, whose browser-detection expressions combined greedy captures with repeated...

CVE-2023-32315-POC

CVE-2023-32315-POC CVE-2023-32315-Openfire-Bypass-Py Resumen Este código es el POC en Python de CVE-2023-32315, utilizado para ejecutar una serie de operaciones con el fin de verificar si el sitio web objetivo está afectado por la vulnerabilidad CVE-2023-32315 e intentar realizar algunas acciones...

CVE-2023-26083

CVE-2023-26083 – Mali GPU Kernel Address Leak via Timeline Stream This repository contains a proof-of-concept PoC exploit for CVE-2023-26083 , a vulnerability in the Mali GPU driver Arm Mali GPU Kernel Driver that allows an unprivileged user to leak kernel pointers and sensitive internal...

wp-jobhunt-exploit

wp-jobhunt-exploit CVE-2018-19487, CVE-2018-19488, exploit para el plugin wp-jobhunt de WordPress El plugin wp-jobhunt es un plugin utilizado con el tema JobCareer: https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636 ver el registro de cambios al final Exploit en...