CVE-2020-9484

CVE-2020-9484 Reproduce Apache Tomcat Session Deserialization Code Execution Vulnerability CVE-2020-9484 with Kali 2.0 Environment: 1. Kali 2.0 2. apache-tomcat-7.0.61-CVE-2020-9484.tar.gz webapp is s2-053, added commons-collections4-4.0.jar under its lib Start /yourtomcatdir/bin/startup.sh...

AdStrike

AdStrike — v5.0 «AdStrike» AI Powered Professional Active Directory Attack Framework Authorized use only. Do not run this tool against systems without explicit written permission. Release status: beta/research build. Menu and import health checks pass; individual modules still depend on target...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

CVE-2025-26794-exploit

CVE-2025-26794: Exim ETRN SQL Injection Exploit A proof-of-concept exploit tool for CVE-2025-26794, demonstrating SQL injection vulnerability in Exim 4.98 mail server via the ETRN command when using SQLite DBM storage. ⚠️ Legal Disclaimer FOR AUTHORIZED SECURITY TESTING ONLY This tool is provided...

mariadb-13-rce-lab

MariaDB 13.0.1-rc RCE Lab Remote code execution on the unmodified, stock MariaDB 13.0.1-rc Docker image as uid 999 mysql. Two exploit variants: Variant| File| Requirements| Notes ---|---|---|--- Pure SQL recommended| exploitpuresql.py| a low-priv MariaDB account + TCP| no host access, no docker, ...

CVE-2026-26903-PoC

CVE-2026-26903 PoC Denial-of-service via unbounded recursion in TanStack Query'sreplaceEqualDeep function A single crafted query update with deeply nested objects can freeze the JavaScript thread indefinitely , causing complete application unresponsiveness. No authentication or special permission...

CVE-2018-0114-Exploit

CVE-2018-0114-Exploit A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature JWS standard for...

log4shell-cloud-scanner

.. image:: images/Mitigalogo.png Introduction we are providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerabilitylog4shell in their AWS account. We currently support "CVE-2021-44228" and "CVE-2021-45046" RCE vulnerabilities. The script...

F9360-CVE43499

SM-F9360 Galaxy Z Fold4 / q4q Bootloader-Unlock-Free KernelSU Root CVE-2026-43499 temporary root → LDPRELOAD channel bypasses DEFEX → non-LTO clang-12 build of kernelsu.ko → full su + KernelSU Manager functionality Status: ✅ Verified on real device on 2026-08-12 firmware F9360ZCSAIZF1, kernel...

CVE-2021-3899_PoC

CVE-2021-3899 PoC Reproduce 0. Install an older version of apport: sudo apt-get install apport=2.20.11-0ubuntu27 any version apportstart: 597 errorlog'process was replaced after Apport started, ignoring' 598 sys.exit0 But this pid could be re-used just after apport launched. In such case,...

mcp-shark

mcp-shark Security scanner for AI agent tools — built for security and platform engineers working with MCP in the IDE. Run a local static scan over MCP IDE configs and embedded tool metadata: 41 rules including AAuth visibility, toxic-flow heuristics, and SARIF / HTML / JSON reports. There is no...

Black_Hole_Attack_for_Vector_Database

Black-Hole Attack on Vector Database Retrieval This repository contains the implementation accompanying the paper Black-Hole Attack from Embedding Space Defects. The Black-Hole Attack exploits a geometric defect in high-dimensional embedding spaces— centrality-driven hubness —to poison vector...

BlueTeam-Tools

BlueTeam-Tools This github repository contains a collection of 70+ tools and resources that can be useful for blue teaming activities. Some of the tools may be specifically designed for blue teaming, while others are more general-purpose and can be adapted for use in a blue teaming context. 🔗 If...

git-remote-gcrypt

================= git-remote-gcrypt GNU Privacy Guard-encrypted git remote :Manual section: 1 Description git-remote-gcrypt is a git remote helper to push and pull from repositories encrypted with GnuPG, using a custom format. This remote helper handles URIs prefixed with gcrypt::. Supported...

CVE-2022-22706-poc

CVE-2022-22706 - Page-Cache Write The Arm Mali GPU driver hands userspace a CPU-writable mapping of pages it pinned read-only, so an unprivileged process gets a writable alias of the page cache backing a file it can only open ORDONLY. exploit.c blanks root's password field in the /etc/passwd page...

CVE-2021-47881

CVE-2021-47881 Local stack-based buffer overflow in dataSIMS Avionics ARINC 4.5.3 Data Device Corporation Hi, I'm Kağan Çapar. In February 2020 I found a local stack-based buffer overflow in DDC's dataSIMS avionics databus software and published a proof of concept on Exploit-DB in February 2021...

edu-recon

edu-recon Authorized recon & triage orchestrator for education-sector red/blue exercises. Drop targets in, it runs the scanners, filters the noise, and hands you a ranked review queue in a web UI. Built to be deployed on your Linux box Kali / infra, driven from a browser. ⚠️ Authorized use only...

cacti

Cacti Overview Cacti is an open-source network monitoring and graphing platform built on RRDtool. It provides a scalable framework to collect, store, and visualize time-series data from network devices, servers, and applications. Core capabilities include: Automated device discovery Local and...

QuantumLock

QuantumLock Specification Unbreakable, Quantum-Ready, Forever. HTML Mirror: https://roxanneardary.com/quantumlock-specification/ Vision QuantumLock is an open-source protocol specification designed to make Bitcoin more resilient against the development of quantum computing and other emerging...

bearer

Scan your source code against top security and privacy risks. Bearer is a static application security testing SAST tool designed to scan your source code and analyze data flows to identify, filter, and prioritize security and privacy risks. Bearer offers a free, open solution, Bearer CLI, and a...