genact

genact - a nonsense activity generator Pretend to be busy or waiting for your computer when you should actually be doing real work! Impress people with your insane multitasking skills. Just open a few instances of genact and watch the show. genact has multiple scenes that pretend to be doing...

MalvexC2

!WARNING Work in Progress: This is a WIP side project that is incomplete and insecure! It is only meant to be used as a playground for myself !CAUTION Use at your own risk: Code in this repository might be harmful. Only run and use things you understand! Malvex C2 Welcome to the repository of the...

anubis-fetch

anubis-fetch $ nix run github:fzakaria/anubis-fetch -- --text https://lore.kernel.org/ A Go CLI for fetching URLs behind Anubis proof-of-work challenges. It solves legacy SHA-256 and WASM challenges in-process, with headless Chromium as a fallback. Sites such as lore.kernel.org and kernel.org use...

veilgate

VeilGate VeilGate is an open-source deception proxy for teams that want to raise the cost of automated security probing without putting fragile block rules in front of real users. It sits in front of a web application, scores each request, and chooses one of three outcomes: Real : forward clean...

Insular

Insular Isolate your big brother app. This is a fork based on the excellent Island. Extra credit to Shelter which inspired me to make the completely FLOSS fork of Island. Documentation On how to enable Insular via adb, cross-profile file access, God mode extending app control to apps outside the...

certipy-merged

certipy-merged This repository contains a fork of ly4k/Certipy with many open pull requests merged, made compatible with each other, and tested to a certain degree. As this is a work in progress , some features may or may not work as expected and things might break. Installation Using pipx...

dumpulator

dumpulator Note: This is a work-in-progress prototype, please treat it as such. Pull requests are welcome! You can get your feet wet withgood first issues An easy-to-use library for emulating code in minidump files. Here are some links to posts/videos using dumpulator: Introduction video with...

CVE-2026-105804 Payload: Password hashes use insufficient PBKDF2 iterations

Payload is a free and open source headless content management system. Payload versions from 3.0.0 before 3.90.0 and canary versions from 4.0.0-canary.0 before 4.0.0-canary.34 use a lower-than-recommended PBKDF2 work factor for password hashing, reducing the computational effort required to test...

git-dumper

git-dumper A tool to dump a git repository from a website. Install This can be installed easily with pip: pip install git-dumper Usage usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL url DIR output directory optional arguments: -h, --help show thi...

CVE-2020-25705

CVE-2020-25705 PoC for CVE-2020-25705 POC-2020-25705 This is a work in progress. I'll finish it on Monday :p but there is likely enough here already for you to complete it...

CVE-2020-0423

CVE-2020-0423 An exploit to CVE-2020-0423, which is a Binder deffered work UAF. Currently WIP , as its an ongoing series of blogposts @ wired0ut.github.io...

hosting

General Information: This is a setup for a Tor based shared hosting server. It is provided as is and before putting it into production you should make changes according to your needs. This is a work in progress and you should carefully check the commit history for changes before updating. For a...

PoW-Shield

Description PoW Shield provides DDoS protection on OSI application layer by acting as a proxy that utilizes proof of work between the backend service and the end user. This project aims to provide an alternative to general anti-DDoS methods such as Google's ReCaptcha that has always been a pain t...

XeytanWin32-RAT

WARNING This is a buggy RAT, not completed, not stable. It still a "work in progress" application. Introduction Project created to kill some of my free time, It is not actively maintained. There are a lot of things to improve/fix, and it will take time to reach a stability on this project. Featur...

ysoserial.net

A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discovered in common .NET libraries that can, under the right conditions, exploit .NET...

CVE-2026-98297

A vulnerability exists in the Linux kernel Bluetooth hci_core component where functions hci_send_acl(), hci_send_sco(), and hci_send_iso() unconditionally queue hdev->tx_work. This creates a race condition during hci_dev_close_sync() while draining the hdev->workqueue (triggered by HCIDEVDO...

CVE-2026-98211

The Linux kernel contains a use-after-free vulnerability within the mmc: mmci component. The issue occurs because ux500_busy_complete() can queue ux500_busy_timeout_work for an R1b command, but mmci_remove() fails to cancel this work, leading to the dereferencing of the devm-allocated mmci_host a...

EUVD-2026-93139

In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: Fix use-after-free in busy-timeout work ux500busycomplete can queue ux500busytimeoutwork for an R1b command, but mmciremove never cancels it. The work can subsequently dereference the devm-allocated mmcihost after it h...

CVE-2026-98211

In the Linux kernel, the following vulnerability has been resolved: m...

sshhipot

La versión 2 está en desarrollo. Cambie a la rama v2, compile y ejecute con -h. SSHHiPot Honeypot SSH de alta interacción vale, en realidad es un proxy SSH de registro. Todavía más o menos un trabajo en progreso. Siéntase libre de go install este repositorio si quiere probarlo. Ejecútelo con -h...