Exploit for CVE-2026-103956

abraxaslabs.tech · github.com/abraxas ·&...

ps5-esp32host

PS5 ESP32 Host — Relapse Exploit Supported firmware: 7.00 t...

AERA

AERA: Autonomous Exploit Research Assistant !Python 3.11+...

Exploit for OS Command Injection in Fortinet Fortisandbox

CVE-2026-39808 — Fortinet FortiSandbox OS Command Injection...

owasp-java-encoder

OWASP Java Encoder Contextual output encoding for Java 8+. Choose an encoder for the parser context receiving untrusted text: HTML, JavaScript, CSS, XML or a URL component. The core has no runtime dependencies; optional JSP and Jakarta adapters provide view-layer bindings. Encoding is one part of...

aws_pwn

AWS pwn Summary This is a collection of horribly written scripts for performing various tasks related to penetration testing AWS. Please don't be sad if it doesn't work for you. It might be that AWS has changed since a given tool was written or it might be that the code sux. Either way, please fe...

wifi-passview

WiFi Passview WiFi Passview is an open-source batch script-based program that can recover your WiFi Password easily in seconds. This is for Windows OS only. Basically, this scripted program has the same function as other passview software such as webpassview and mailpassview. Disclaimer : WiFi...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

nanoclaw

An AI assistant that runs agents securely in their own containers. Lightweight, built to be easily understood and completely customized for your needs. nanoclaw.dev • docs • 中文 • 日本語 • 한국어 • • Agents in Slack: one app per agent Setup provisions each agent its own Slack app: manifest, avatar, and...

bugsy

Bugsy Bugsy is a command-line interface CLI tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is designed to help developers quickly identif...

Project-Pwnag0dchi

Project Pwnag0dchi 多くの人がカスタマイズされたプラグインや設定について尋ねてきたので、これを作成しました。このガイドに従えば、あなたのPwnagotchiは、私のSNSやYouTube動画で見られるものと まったく 同じように、約5分以内にセットアップできます。 また、ここには完全なPwnagotchi初心者向けビルドガイドと、一般的なトラブルシューティング方法も含まれています。 可能な限り更新を続けます。提案がある場合や、このプロジェクトで問題が発生した場合は、GitHub Issueを開いてください。一緒に話し合いましょう！ 目次 Project Pwnag0dc...

LPE---CVE-2020-0796

使用方法: Pythonがインストールされていることを確認し、poc.pyを実行してください。 Windows カーネル Write-What-Where CVE-2020-0796 エクスプロイト 教育および企業環境でのテストのみを目的としています。 MasterSpl0itは本コードについて一切の責任を負いません。自己責任で使用してください。 書き直されたCVE-2020-0796 ローカル権限昇格 POC。 Alexandre Beaulieuの成果に基づく: https://gist.github.com/alxbl/2fb9a0583c5b88db2b4d1a7f2ca5cdd...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say sudo dnf install tcpflo...

CVE-2024-11467

CVE-2024-11467 macOSオペレーティングシステムは、XPCサービスを使用して、XPCサービスデーモンとサードパーティ製アプリケーションの特権ヘルパーツールなど、さまざまなプロセス間の基本的なプロセス間通信を行います。VMware Horizon Clientは、インストール時に、/Library/PrivilegedHelperTools/ ディレクトリの下に com.vmware.horizon.CDSHelper 特権ヘルパーを登録します。 また、com.vmware.horizon.CDSHelper...

ssh-auditor

SSH Auditor Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known host whose ssh version or key fingerprint changes...

morpheus

Morpheus - automated ettercap TCP/IP Hijacking tool Version release: v2.2 - STABLE Author: pedro ubuntu r00t-3xp10it Codename: oneiroi phobetor The mithologic dream greek god Distros Supported: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam develop @2018 LEG...

HackSysExtremeVulnerableDriver

HackSys Extreme Vulnerable Driver ooooo ooooo oooooooooooo oooooo oooo oooooooooo. 888' 888' 888' 8 888. .8' 888' Y8b 888 888 888 888. .8' 888 888 888ooooo888 888oooo8 888. .8' 888 888 888 888 888 " 888.8' 888 888 888 888 888 o 888' 888 d88' o888o o888o o888ooooood8 8' o888bood8P' Discord Server...

aquaman

🔱 Aquaman 🔱 The only independent credential proxy for AI agents: bring-your-own-vault isolation & least-privilege request policies. Your keys stay where you already keep them, never in the agent's memory. Compatible with 1Password, keychain, keepassxc and many others. You set up Claude Code, Code...

ShellcodeFluctuation

Shellcode Fluctuation PoC A PoC implementation for an another in-memory evasion technique that cyclically encrypts and decrypts shellcode's contents to then make it fluctuate between RW or NoAccess and RX memory protection. When our shellcode resides in RW or NoAccess memory pages, scanners such ...

second-order

Second Order Scans web applications for second-order subdomain takeover by crawling the app, and collecting URLs and other data that match certain rules, or respond in a certain way. Installation From binary Download a prebuilt binary from the releases page and unzip it. From source Go version 1....