CVE-2026-64638-PoC-Exploit

CVE‑2026‑64638 – WordPress XSS2Shell Security Suite ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse Act...

Yara-rules

About What is this? A repo containing some of my privately developed Yara rules. Why? To contribute to the community. Can I use these rules? Of course! That's why I created this repo. You can use them in your detection systems. For example, CAPE sandbox, MalwareBazaar, UnPac.me and VirusTotal mus...

GhostLock-Galaxy

GhostLock-Galaxy 中文: READMEZH.md This is a separate repository because this route requires Android shell permission, obtained through adb shell or Shizuku. The original YuKongA/ghostlock-app does not use shell permission and follows a different execution route; its requirements and code path shou...

CVE-2026-32475

CVE-2026-32475 — Elementor Pro ≤ 4.2.1 Unauthenticated Arbitrary File Upload → RCE PoC for CVE-2026-32475 CVSS 9.0 Critical, CWE-434: an unauthenticated arbitrary file upload in the Elementor Pro Forms module that leads to remote code execution. Fixed in Elementor Pro 4.2.2 2026-08-19. Reported b...

unidbg

unidbg Allows you to emulate an Android native library, and an experimental iOS emulation. This is an educational project to learn more about the ELF/MachO file format and ARM assembly. Use it at your own risk ! Features Support MCP Model Context Protocol for AI-assisted debugging with Cursor and...

`zvariant` is unmaintained

The zvariant crate is no longer maintained as a standalone crate. It has been merged into zbus starting with version 6.0.0, as its wire module. Users should migrate to zbus, with its default features disabled if they only need the D-Bus wire format. Users of the GVariant format should migrate to...

`zbus_names` is unmaintained

The zbusnames crate is no longer maintained as a standalone crate. It has been merged into zbus starting with version 6.0.0, as its names module. Users should migrate to zbus, with its default features disabled if they only need the D-Bus name types...

CVE-2021-46417

CVE-2021-46417 Franklin Fueling Systems Colibri Controller Module - Local File Inclusion Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2021-46417.py -u...

HardeningKitty

HardeningKitty This is the stable version of HardeningKitty from the Windows Hardening Project by Michael Schneider. The stable version of HardeningKitty is signed with the code signing certificate of scip AG. Since this is the stable version, we do not accept pull requests in this repo, please...

Atlas

Atlas Atlas is a cross-platform Windows/Linux network execution and security assessment toolkit built on top of TrustedSec's Titanis protocol library. It is inspired by the workflow of NetExec/CrackMapExec: target lists, credential sets, modular enumeration, and compact HH:mm:ss + host - message...

prismsec

PrismSec 🔷 Secure, modular MCP server for pentesting tools. Wraps 7 industry-standard security tools nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap into 13 registered MCP tools — ready to use with Claude, Cursor, Copilot, and any MCP-compatible AI agent. Features Feature| Description...

tanuki

Tanuki Linux Active Directory triage for AI coding agents. Protocol-first, zero noise. Quick Start • Dual-Engine Architecture • Live Lab Validation • Demo Video • Decision Ladder • Before & After • Tooling & Usage • Agent Setup • Lineage & Credits Quick Start 1-Line Universal Install Tanuki is 10...

sparkplugFuzzer

Sparkplug B MQTT Security Fuzzer A comprehensive security assessment tool for testing Sparkplug B MQTT protocol implementations. The fuzzer systematically tests all protocol fields across all 9 message types, discovers live devices on the network, and produces detailed logs for analysis...

Exploit for CVE-2026-79983

CVE-2026-79983 — camel-ftp: consumer builds the remote path fr...

cve-2025-66398

CVE-2025-66398 — Signal K Server RCE PoC 📜 Description CVE-2025-66398 is a Signal K Server issue where an unauthenticated attacker can poison the server’s restore state via /skServer/validateBackup, then hijack config via /skServer/restore to inject a backdoor admin account and optionally achieve...

DFRoot

DFRoot — SM-S938B Galaxy S25 Ultra Port · Fast Channel + Manual A fork of diabl0w/DFRoot, specifically ported for the Samsung Galaxy S25 Ultra SM-S938B / pa3q , with the UI and runtime output entirely in Chinese. Two chains, one interface: Method| Vulnerability| Characteristics ---|---|--- Fast...

HashcatRosetta

| | | | | | | || \ | || | | || |/ / | ' \ / / | | | / / |/ \ | / | | | | \ \ | | | | | | || \ \ / || || | | || ||,|/| ||\,||| \/|/||\,| Decode the Rosetta Stone of Password Cracking Rules HashcatRosetta A Python project designed to analyze hashcat debug mode 4 and mode 5 output files to...

vmp-devirt

vmp-devirt Trace-assisted VMProtect devirtualization research: version front-ends 1.x gate / 2.x table / 3.x FDJ feeding one shared backend Remill lift → LLVM opt → semantic cards → dataflow → native objects. Validated against self-built VMP 3.9.4 binaries across multiple protection modes. VMP...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock-HonorFne Hono...

CVE-2026-36980-Kernel-BSOD-DoS-PoC

CVE-2026-36980-Kernel-BSOD-DoS-PoC Project Date : Feb 2026 / Discovered a buffer overflow vulnerability in the IOCTL handler of the pwdrvio.sys kernel driver. The vulnerability allows an unprivileged local attacker to corrupt kernel pool memory, triggering an immediate system crash BSOD and Denia...