46715 matches found
CVE-2018-6574
This repository does not have a README...
Metabase-H2-CVE-2023-38646-
This repository does not have a README...
CVE-2024-50379
Apache Tomcat CVE-2024-50379 TOCTOU Remote Code Execution...
nvd
nvd Fast, simple library in Go to fetch CVEs from the NVD U.S. National Vulnerability Database feeds. Install go get github.com/daehee/nvd Usage The nvd package provides a Client for fetching CVEs from the official NVD feeds: // nvd client with ./tmp working dir client, err := NewClient"tmp" //...
resym
ReSym Artifact This repository provides artifacts for the paper "ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries" CCS 2024. 🏆 ACM SIGSAC Distinguished Paper Award Winner Note : We are actively maintaining/updating our artifacts. Please make sure you ar...
CVE-2021-40444_builders
CVE-2021-40444 builders This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit. This repo is just for testing, research and educational purposes. You are responsible for how you use the code provided in this repo. The code is developed by reversing malware...
cryptodev-linux
cryptodev-linux This is a /dev/crypto device driver, equivalent to those in OpenBSD or FreeBSD. The main idea is to access existing ciphers in kernel space from userspace, thus enabling the re-use of a hardware implementation of a cipher. For questions and suggestions, please use the homepage at...
so-crates
SO-CRATES Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus A standalone web application for analyzing pcap files, log files, email messages, and binary files. Features include Suricata network analysis with tshark adding the protocols Suricata doesn't parse, YARA binary...
Pentest-Everything
⚔️ Pentest Everything Important Bookmark this page as other page links are likely to change or move over time. This page will always remain the same. About this book This book is my collection of notes and write-ups for various offensive security based topics and platforms. This book is generally...
CVE-2026-31431-PocC
CVE-2026-31431-PoC CVE-2026-31431 PoC reproduced in C, usable for exploitation when Python is not available on the target environment. Vulnerability Basic Information Vulnerability type: Linux kernel AFALG subsystem page cache poisoning, achieving local privilege escalation and possible container...
copy-fail-CVE-2026-31431-php
CVE-2026-31431 Copy Fail PHP PoC www-data@jumpbox:/home$ id uid=33www-data gid=33www-data groups=33www-data www-data@jumpbox:/home$ uname -a Linux testbox 5.15.0-136-generic 147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x8664 x8664 x8664 GNU/Linux www-data@jumpbox:/home$ php CVE-2026-31431.php id...
CVE-2021-41773-PoC
CVE-2021-41773-PoC 🚀 Mode Of Use ./exploit.sh 172.17.0.2 id uid=33www-data gid=33www-data groups=33www-data !CAUTION Este script es SOLO para fines educativos y de pentesting autorizado. El uso indebido de esta herramienta en sistemas sin permiso expreso es ILEGAL. El autor no se hace responsable...
Reconnoitre
A reconnaissance tool made for the OSCP labs to automate information gathering and service enumeration whilst creating a directory structure to store results, findings and exploits used for each host, recommended commands to execute and directory structures for storing loot and flags. Contributio...
CS-DropSpawn_BOF
DropSpawn Introduction DropSpawn is a CobaltStrike BOF used to spawn additional Beacons via a relatively unknown method of DLL hijacking. Works x86-x86, x64-x64, and x86-x64/vice versa. Use as an alternative to process injection. Windows executables will follow the DLL search order when trying to...
remote-control
Remote Control for Laravel Grant remote access to user account without sharing credentials. Installation Configuration Usages Routing Creating Remote Access Using Generated Access Token Installation Remote Control can be installed via composer: composer require "katsana/remote-control"...
pentest-harness
Pentest Harness Heaven for Hackers — the professional security testing workspace. An open-source, dark-first AI agent harness for authorized penetration tests, bug bounty research, security labs, and CTF engagements. Built on a plugin architecture where every layer — model adapters, tools,...
tcpreplay
Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like tcpdump and Wireshark. It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the...
PurpleLlama
🤗 Models on Hugging Face | Blog | Website | CyberSec Eval Paper | Llama Guard Paper Purple Llama Purple Llama is an umbrella project that over time will bring together tools and evals to help the community build responsibly with open generative AI models. The initial release will include tools an...
CVE-2018-0798-reproduction
This repository does not have a README...
CVE-2019-9511_Priority-Churn-Data-Dribble
HTTP/2 CVE-2019-9511 & CVE-2019-9513 Lightweight Probes Repository with controlled validation scripts for behaviors associated with CVEs CVE-2019-9511 and CVE-2019-9513 , both related to denial of service vectors in HTTP/2 implementations. The scripts were created to support technical validations...
frameworks_native_AOSP-10_r33_CVE-2023-21118
This repository does not have a README...
robustness
robustness package Install via pip: pip install robustness Read the docs: https://robustness.readthedocs.io/en/latest/index.html robustness is a package we students in the MadryLab created to make training, evaluating, and exploring neural networks flexible and easy. We use it in almost all of ou...
CVE-2019-18845
CVE-2019-18845 The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users including low integrity processes to read and write to arbitrary memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, by mapping \Device\PhysicalMemory into the calling proces...
Mass-CVE-2023-28121
CVE-2023-28121 WooCommerce Payments 5.6.2 - Unauthenticated Privilege Escalation Mass Add Admin User Introduction This script using Python3 and use threading for better process speed. The script has ben updated to 2 version. V1 is the old version and V2 the newer version with random username, ema...
mud-visualizer
Manufacturer Usage Description MUD Visualizer Warning: mud-visualizer is currently beta. Use at your own risk. This tool can be used to visualize the MUD files in JSON format. Table of Contents Motivation Installation Supported MUD Abstractions Contribution Support Citation License Motivation MUD...
awesome-nodejs-security
A curated list of awesome Node.js Security resources. Learn Node.js Secure Coding techniques and best practices from Liran Tal Contents Tools Web Framework Hardening Static Code Analysis Dynamic Application Security Testing Input/Output Validation Secure Composition CSRF Vulnerabilities and...
etaHEN
etaHEN - AIO Homebrew enabler 🚀 Support the Project If you find this project useful and would like to support its continued development, consider buying me a coffee! Building from Source The Source code is provided in the Source code folder under GPLv3 with all the necessary files to build it as...
cve-2025-29927-poc
CVE-2025-29927-POC Introduction This repository contains a Proof of Concept PoC for CVE-2025-29927, a hypothetical vulnerability demonstrating a flaw in middleware handling within a web application. The PoC illustrates how a specially crafted HTTP request can bypass redirection logic to access...
CVE-2026-26331
Arbitrary Command Injection via --netrc-cmd in yt-dlp Severity: High CVSS 8.8 Affected Software: yt-dlp = 2023.06.21, Patched In: 2026.02.21 Advisory: GHSA-g3gw-q23r-pgqm CVE: CVE-2026-26331 Summary yt-dlp’s --netrc-cmd command-line option or netrccmd Python API parameter can be abused to achieve...
CVE-2026-25940
CVE-2026-25940 jsPDF PoC A proof-of-concept for CVE-2026-25940 demonstrating how specially crafted AcroForm radio button appearances can trigger embedded JavaScript in vulnerable PDF viewers e.g., Foxit. The repo includes a Node-based generator and a browser viewer harness to exercise different...
CVE-2020-1938
CVE-2020-1938 Suricata Detection Rule CNVD-2020-10487 CVE-2020-1938 alert tcp any any - any 8009 msg:"CNVD-2020-10487 Ghostcat"; content:"javax|2e|servlet|2e|include|2e|requesturi"; content:"javax|2e|servlet|2e|include|2e|pathinfo"; content:"javax|2e|servlet|2e|include|2e|servletpath";...
bluing
Bluing An intelligence gathering tool for hacking Bluetooth English · 简体中文 %20%7C%20Kali%202022.4%20\x64%20%7C%20Kali%20NetHunter%202022.4%20\aarch64-brightgreen Bluing formerly bluescan is a Blu etooth In telligence G athering tool written primarily in Python. It can help us snoop on the...
ssbd-tools
Tools for exercising Speculative Store Bypass Disable The ssbd-tools project is a collection of programs that makes use of the Speculative Store Bypass Disable SSBD functionality provided in x86 processors. SSBD is a processor based mitigation for the Speculative Store Bypass attack that is...
Automation-for-Juniper-cve-2023-36845
Automation for Juniper CVE:2023-36845 Overview is a bash script designed to check for the CVE-2023-36845 vulnerability. This script processes a list of IP addresses, sends a request to each, and determines whether the system is vulnerable based on the response. Usage To use the script, run it fro...
rapiddns-cli
RapidDNS CLI 中文文档 A powerful command-line interface for interacting with the RapidDNS API. This tool allows you to perform DNS searches, advanced queries, and large-scale data exports directly from your terminal. Features DNS Search : Search by domain, IP, or CIDR. Advanced Query : Use powerful...
asminject
asminject.py asminject.py is a heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly or precompiled binary payloads directly into x86-64, x86, and ARM32 Linux processes by accessing /proc//mem instead of attaching via ptrace. Useful for tampering with trusted...
CVE-2026-30082
Stored Cross-site Scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server Affected version: IngEstate Server - 11.14.0 Affected Function Affected API: Affected API: PUT /emgui/rest/appDatasheet//?full=true HTTP/1.1 PoC To exploit this Stored...
isa_recovery
ISA Recovery System A reverse-engineering pipeline that turns a firmware binary and its possibly-wrong disassembly into a working Ghidra processor specification. When you hit a proprietary processor with no documentation and no Ghidra support, this tool recovers the real encoding of each...
THM-Tempest
TryHackMe — Tempest SOC Level 1 Pathway | Incident Response Investigation Overview Full incident response investigation of a compromised Windows machine. The attacker gained initial access via a malicious Word document exploiting CVE-2022-30190 Follina, established persistence, tunneled through t...
VMWare_CVE-2022-22954
VMWareCVE-2022-22954 CVE-2022-22954 is a server-side template injection vulnerability in the VMware Workspace ONE Access and Identity Manager Shodan Search result PoC Follow Youtube Twitter Telegram LinkedIn...
cve-2021-44228
CVE-2021-44228 A Zeek package which raises notices, tags HTTP connections and optionally generates a log for Log4J CVE-2021-44228 attempts. Detects payload contained in HTTP headers: See Simplifying Detection of Log4Shell for details. Uses Zeek signatures to generate notices when a Java file is...
Soviet
Soviet A Runtime Crypter in C for Linux. This will encrypt ELF binaries, but allow them to still run in memory while using no file handles. Then it will overwrite the program in memory with random data. The point being to make binary analyis and memory analysis more difficult. Dependencies On...
JavaUnserializeExploits
JavaUnserializeExploits Python scripts and HTTP request referenced in the blog post What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability at http://foxglovesecurity.com...
PyIris
The project is currently undergoing a major rewrite for version 3, the current version, version 2 will be made obsolete. See for more info. The PyIris Project Updates coming soon refer to ROADMAP.md The PyIris project is a modular remote access trojan toolkit written completely in python. It allo...
HexWalk
HexWalk - Hex Editor/Viewer/Analyzer HexWalk is an Hex editor, viewer, analyzer. Built on qhexedit2, Capstone and Qt, with a built-in signature scanner, HexDig, inspired by binwalk. It is cross platform and has plenty of features: Advanced Find can find patterns in binary files based on...
OpenSSL_1_0_1g_CVE-2015-1788
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
base-drupal
BASE-DRUPAL This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/base-drupal Image based on: https://github.com/Medicean/VulApps/tree/master/base/drupal/8.3.0...
CVE-2018-10546
CVE-2018-10546 A user can create specially crafted data that, when processed using a stream filter with 'convert.iconv.', will cause the target application to enter an infinite loop and consume excessive CPU resources CVE-2018-10546. The specific impact of these vulnerabilities depends on the...
CVE-2019-18276
To exploit the CVE-2019-18276 vulnerability, open this directory in a terminal and run the commands: cd ./demonstration ./make The commands to type in the virtual machine are: ./creationsecret.sh hacker ./exploit.sh 1000 enable -f ./libpwn.so asd cat /home/victime/.secret.txt...