ecs-templates

Resumen Este repositorio contiene todo lo necesario para convertir los logs de Corelight o Zeek al estándar de nomenclatura del Elastic Common Schema ECS y almacenarlos en un despliegue de Elastic Stack. Publicado originalmente en 2019, el mismo año que Elastic Common Schema, este repositorio sig...

CVE-2026-3576

CVE-2026-3576 - Wordpress Plugin Planyo Online Reservation System -f --disable-check python exploit.py http://127.0.0.1/wordpress/ -f /etc/passwd Example └─$ python exploit.py http://127.0.0.1/wordpress/ -f /etc/passwd Checking if target is v...

CQPToolkit

CQP Tool kit 该系统提供了多种组件，用于将QKD集成到安全系统中。它使用C++11编写，但采用GRPC接口，因此可以与多种不同语言进行集成。 快速开始 要在本地运行该软件，请： 下载并安装Ubuntu deb软件包 或 克隆源代码，确保子模块已更新，并在本地构建 要克隆包含子模块的源代码：bash git clone --recurse-submodules [email protected]:QComms/cqptoolkit.git 如果你没有使用 --recurse-submodules 进行克隆，可以通过在源码文件夹中运行 git submodule...

Exploit for CVE-2026-102428

CVE-2026-102428 — OrdaSoft OS CCK comoscck unauthenticated...

windiff

WinDiff About WinDiff is an open-source web-based tool that allows browsing and comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the operating system. The binary database is automatically updated to include information from the latest Windo...

react2shellpoc

Este repositorio contiene una prueba de concepto que demuestra cómo se comporta una clase específica de vulnerabilidades de React Server Component dentro de un entorno de formación controlado y legal. Manual ┌──kali㉿kali-/Documents/tools/2025-55182 └─$ python exploit.py -h /\ /\ /\ /\ /\ /\ ||...

CVE-2025-27636-Apache-Camel-PoC

PoC de Apache Camel CVE-2025–27636 y CVE-2025-29891 CVE-2025–27636 y CVE-2025-29891 son vulnerabilidades en Apache Camel que afectan a las versiones: 4.10.0-4.10.1, 4.8.0-4.8.4, 3.10.0-3.22.3. La explotación de estas vulnerabilidades puede permitir a los atacantes ejecutar métodos internos de...

CVE-2022-22629

CVE-2022-22629 Proof of concept This post is about the poc for the WebGL bug that was patched in Safari 15.4 security updates. If you want to learn in detail about how WebGL works, you can use this official resource since we are going to discuss bug specific details here :...

CVE-2023-33817---SQL-Injection-found-in-HotelDruid-3.0.5

CVE-2023-33817 - SQL Injection found in HotelDruid V3.0.5 HotelDruid v3.0.5 are vulnerable to SQL injection. An attacker could issue arbitrary sql command to retrieve data in databases or even execute remote code execution on target database system This is my second repo. Don't beat me if i didn'...

UnCanny

UNCanny Coerce The idea behind this research was simple as i wanted to find my own coercion technique. i started by looking for new RPC attack surfaces, but after microsoft added RPC activity monitoring...

CVE-2025-43300

CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption Overview CVE-2025-43300 is a critical memory corruption vulnerability in Apple's image processing framework that affects iOS 18.6.1 and macOS systems. The vulnerability exists in the JPEG Lossless decompression code within...

CVE-2026-12227

CVE-2026-12227: Visual Composer Website Builder Unauthenticated Local File Inclusion LFI Summary CVE-2026-12227 is a critical CVSS 9.8 unauthenticated Local File Inclusion LFI vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including...

CVE-2025-56380

CVE-2025-56380 — Time-based Blind SQL Injection in Frappe / ERPNext frappe.client.getvalue 📌 Summary A time-based blind SQL injection vulnerability was discovered in the frappe.client.getvalue API endpoint in Frappe Framework v15.72.4 and present in ERPNext v15.67.0 codebase. An authenticated use...

DetectPacket-CVE-2017-8464

Building a Vulnerability Detection Application for CVE-2017-8464 Source click here CONTENTS: PART 1: OVERVIEW OF CVE-2017-8464 1. CONCEPT OF LNK FILE 2. CREATING A SYSTEM VULNERABLE TO CVE-2017-8464 3. TOOLS FOR EXPLOITING CVE-2017-8464 PART 2: USING METASPLOIT TO EXPLOIT CVE-2017-8464 2.1...

iocx

IOCX Deterministic, Zero‑Risk IOC Extraction for Modern Security Pipelines Static IOC extraction from a PE file using the IOCX CLI Official IOCX Project This is the original IOCX engine for deterministic static IOC extraction and PE analysis. Any other repositories using the name "iocx" are not...

reverse-engineering-browser

Reverse Engineering Browser See the browser evidence behind fingerprints, requests, scripts, and runtime behavior. A local-first research browser and macOS workspace for inspecting authorized web applications. v0.2.1 released Origin Trace Traffic now has a full-width, DevTools-style request table...

stavrobot

Stavrobot Stavrobot is a personal AI assistant built with the principle of "all the access an AI assistant needs, and no more". It has all the nice features of an AI assistant, but focuses on sandboxing, isolation, and minimal permissions. It's lightweight and is deployed with only a docker compo...

WebKit-UAF-ANGLE-OOB-Analysis

WebKit-UAF-ANGLE-OOB-Analysis CVE-2025-43529, CVE-2025-14174 Notas y material de PoC para una cadena WebKit/ANGLE en iOS 26.1. Esto no es un exploit completo; separa las primitivas verificadas de las piezas que aún fallan. Autor: zeroxjf Basado en: exploit de jir4vv1t para CVE-2025-43529 Estado:...

Dependency Scanning

依赖与许可证扫描组件 该组件生成CycloneDX软件物料清单，GitLab使用它来识别项目的依赖项及其许可证。此CycloneDX软件物料清单与GitLab分类法兼容。此外，该组件能够根据项目依赖项中检测到的漏洞生成依赖扫描报告。 要求 此CI/CD组件需要GitLab的依赖扫描功能，这是GitLab Ultimate的一个特性。 用法 将以下代码片段添加到您的.gitlab-ci.yml中，以使用默认配置运行dependency-scanning作业。 include: - component:...

RSC-Detect-CVE-2025-55182

🔎 RSC-Detect - React Server Components 检测器 轻量级检测工具，用于识别 React Server Components 和 Next.js 应用 🎯 目的 RSC-Detect 是一款简单、专注的工具，用于识别使用 React Server Components RSC 和 Next.js 框架的网站。适用于： 安全研究人员 - 在评估过程中识别技术栈 Web 开发者 - 了解竞争对手使用的框架 DevOps 团队 - 审计 Web 资产以建立技术清单 赏金猎人 - 快速指纹识别目标应用 ⚡ 快速开始 本指南支持 Windows 和 Linux...