309852 matches found
PKCS11SSHAgent
SRO PKCS11 β SSH Agent CNG Sovereign unification PKCS11 + SSH-agent + Pageant + CNG/Smartcard A single Windows executable that unifies four traditionally separate functions: Full PKCS11 module Firefox, OpenSC, ssh -I SSH agent compatible with OpenSSH/Git/VS/WSL Pageant server compatible with...
CVE-2024-21413
CVE-2024-21413 - Expect Script POC Microsoft Outlook Leak credentials & Remote Code Execution Vulnerability when chained with CVE-2023-21716 through the preview panel CVSS:3.1 9.8 / 8.5 Outlook should warm you about the risk on opening an external link = but this is not the case! usage:...
log4shell-coraza
Log4Shell Security Lab β nginx + Coraza WAF Educational / defensive purpose : this lab contains a deliberately vulnerable app Log4j 2.14.1 and a JNDI exploit kit, ONLY for learning how to detect and block Log4Shell in an isolated environment. Do not deploy to the Internet, do not use to attack...
CVE-2019-11043
PoC CVE-2019-11043 A Python implementation of the CVE-2019-11043 exploit The exploit recorded as CVE-2019-11043 takes advantage of a bug in the implementation of PHP-FPM in conjunction with a NGINX server. In certain configurations, a regular expression in the FastCGI pathinfo causes the FPM modu...
better_opts_attacks
May I have your attention? Breaking Fine-Tuning based Prompt Injection Defenses using Architecture-Aware Attacks This repository contains code to run the ASTRA and ASTRA++ attacks that break SecAlign++, SecAlign, StruQ. This repository also contains some examples of generated attacks and attack...
password_generator
PassForge - All-in-One Password Generator CLI A production-ready, cryptographically secure password generator CLI with 17 generation modes, entropy transparency, and comprehensive customization options. Features 17 Generation Modes Generator| Command| Description ---|---|--- Random| random, r|...
vuln-scanner
vuln-scanner An automated vulnerability assessment platform that orchestrates 210 open-source security tools , aggregates and deduplicates findings, optionally chains tools into a discovery data-flow graph , runs an optional OpenAI-compatible LLM analysis layer for triage, clustering, and...
SindriKit
SindriKit Offensive Development Deserves Better Architecture. A C library for building offensive capabilities. Core Concept Most offensive utilities hardcode their execution mechanics inside the technique's logic. A reflective loader doesn't just map an image; it maps it using a specific, hardcod...
CVE-2025-55182-Next.js-RCE
π Next.js Security Testing Tool Professional security assessment utility for Next.js applications β οΈ Disclaimer This tool is intended for authorized security testing and research purposes only. β Use only on systems you own or have explicit permission to test β For bug bounty programs with proper...
siemframework
SIEMS FRAMEWORK MultiSIEM Modular Python3 Attack Framework By ElevenPaths https://www.elevenpaths.com/ Usage: python3 ./siemsframework.py INTRODUCTION SIEMs are defensive tools increasingly used in the field of cybersecurity, especially by major companies and companies intended to monitor highly...
CVE-2024-53704
nxbender nxbender is a Proof-of-Concept PoC for establishing a VPN connection via NetExtender. This project is intended solely for educational and research purposes. Please only use the code in environments where you are explicitly authorized. Prerequisites Python 3.6+ recommended: Python 3.8 or...
Email-Vulnerability-Checker
Email Vulnerability Checker v2.1 Verify whether the domain is vulnerable to spoofing by Email-vulnerablity-checker Features of Version 2.1 Added Support to save output on a file using -o flag Added more checks that will accurately tell you the Vulnerability Status. Updated the code completely wit...
CVE-2021-37580
CVE-2021-37580 POC for CVE-2021-37580 0x00 Vulnerability Principle Vulnerability principle: Apache ShenYu Admin bypass JWT authentication CVE-2021-37580 0x01 Single URL Usage: python3 CVE-2021-37580.py -u url -n username.txt For shenyu-admin-2.4.0, vulnerable versions see below: For...
CVE-2024-9756
π WooCommerce Arbitrary File Upload Exploit CVE-2024-9756 π Overview This exploit leverages an unauthorized limited arbitrary file upload vulnerability in the Order Attachments for WooCommerce plugin versions 2.0 to 2.4.1 for WordPress. The vulnerability allows authenticated users Subscriber+ to...
CVE-2024-38063
CVE-2024-38063 mitigation script by disabling ipv6 of all interfaces HOW TO Import the script like a module on a elevated Powershell run as admin . .\CVE-2024-38063 Use the functions Show-IPV6EnabledAdapters Show all adapters that have IPV6 enabled! PS C:\users\public Show-IPV6enabledAdapters...
wordpress-CVE-2018-6389
wordpress-CVE-2018-6389 Metasploit module for WordPress DOS load-scripts.php CVE-2018-638...
CVE-2026-0006-openapv-poc
CVE-2026-0006: Heap Buffer Overflow in libopenapv Android APV Codec Patch Analysis & Reproduction by Mobile Hacking Lab CVSS 9.8 Critical | Actively exploited in the wild | Patched March 2026 Note: We did not discover this vulnerability. All credit for finding and responsibly reporting...
kerneleye
KernelEye Kernel-level traffic intelligence and threat remediation for Linux servers. KernelEye is a self-hosted security monitoring platform for Linux servers. It uses eBPF, TC, and XDP in a Go agent to observe network metadata, score suspicious activity, and apply remediation through kernel-lev...
ibmsecurity
IBM Sample Code This repository contains Python code to manage IBM Security Appliances using their respective REST APIs. ISAM appliance has the most mature code. Code for ISDS appliance is under development. Code for ISVG appliance is brand new tested with 10.0.1.0 and higher only. Requirements...
rsfiles-CVE-2026-57827
CVE-2026-57827 β RSFiles! Unauthenticated File Upload β RCE Disclaimer β authorized use only. This is a proof-of-concept for security research and defensive testing. You are responsible for using it only on systems you own or have explicit written permission to test. Misuse against third parties...