bindiff

Copyright 2011-2026 Google LLC. BinDiff This repository contains the BinDiff source code. BinDiff is an open-source comparison tool for binary files to quickly find differences and similarities in disassembled code. Table of Contents About BinDiff Quickstart Documentation Codemap Building from...

grr

GRR Rapid Response is an incident response framework focused on remote live forensics. GRR is a python client agent that is installed on target systems, and python server infrastructure that can manage and talk to clients. Documentation Please visit our documentation website if you want to know...

gosec

gosec - Go Security Checker Inspects source code for security problems by scanning the Go AST and SSA code representation. Quick links GitHub Action Local installation Quick start Common usage patterns Selecting rules Output formats Features Pattern-based rules for detecting common security issue...

Grafana-LFI-exploit

Grafana LFI exploit Updated exploit script for the CVE-2021-43798 from the following: https://www.exploit-db.com/exploits/50581 https://vulncheck.com/blog/grafana-cve-2021-43798 Usage 1. Update on line 5 ip and line 6 port to fit the target. 2. Run the script python3 grafana-exploit.py...

CVE-2024-57429

CVE-2024-57429 A cross-site request forgery CSRF vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request. Impact: Exploitation of this CSRF...

S2-045

S2-045 Struts2 S2-045 Vulnerability environment...

CVE-2020-10148-Solarwinds-Orion

CVE-2020-10148 Solarwinds Orion Download CVE-2020-10148.py wget https://gist.githubusercontent.com/0xsha/75616ef6f24067c4fb5b320c5dfa4965/raw/0d7db4f2ea5aacc0ada7b1a7b23f2ce8ba39315f/CVE-2020-10148.py Looking Solarwinds Orion from Shodan...

CVE-2017-10271

CVE-2017-10271 CVE-2017-10271 Weblogic vulnerability verification PoC Useage: python weblogic.py -u 'http://...:7001/wls-wsat/CoordinatorPortType' -c 'touch /tmp/test' Click me to download the patch...

interrogate

Interrogate Interrogate is a proof-of-concept tool for identification of cryptographic keys in binary material regardless of target operating system, first and foremost for memory dump analysis and forensic usage. Able to identify AES, Serpent, Twofish and DER-encoded RSA keys as of version 0.0.4...

EDR-Preloader

EDR-Preloader An EDR bypass that prevent EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer For details, see: malwaretech.com/2024/02/bypassing-edrs-with-edr-preload.html...

ja4

JA4+™ Network Fingerprinting JA4+ is a suite of network fingerprinting methods by FoxIO that are easy to use and easy to share. These methods are both human and machine readable to facilitate more effective threat-hunting and analysis. The use-cases for these fingerprints include scanning for...

CVE-2025-1739

CVE-2025-1738 & CVE-2025-1739 — Trivision Camera NC227WF PoC 📋 Overview CVE| CVSS v3.1| Score| CWE| Type ---|---|---|---|--- CVE-2025-1739| AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N| 7.1| CWE-288| Authentication Bypass via Basic Auth Leak 🔓 CVE-2025-1739 — Basic Auth Code Exposure / Auth Bypass CWE-288...

CVE-2025-6018-and-CVE-2025-6019

Check Its Vulnerable or not rpm -q pam || dpkg -l | grep libpam or find /etc/pam.d/ -name '' -exec grep -l 'pamenv' \; 2/dev/null or find /etc/pam.d/ -name '' -exec grep -l 'pamsystemd' \; 2/dev/null or systemctl --version | head -1 If version Include :Vulnerable PAM version detected Reference...

Le Panthéon de la Souveraineté

🏠 Developed on: GitLab · 🪞 Mirror: GitHub · 🌐 Website: pantheon-souverainete.eu 🏛️ The Pantheon of Sovereignty A 100% sovereign, redundant and secure cloud infrastructure, designed to break free entirely from the GAFAM. Version 2.1.0-alpha — Full structural overhaul. Starting from scratch. 📋 Table...

GarbageMan

GarbageMan What is GarbageMan? GarbageMan is a set of tools designed for .NET heap analysis. These tools offer the following benefits for malware researchers: Ability to extract clear-text payload PE Images etc. from .NET heaps quickly. Easy analysis of encrypted network protocols, signs of data...

ipa-medit

ipa-medit Ipa-medit is a memory search and patch tool for resigned ipa without jailbreaking. It supports iOS apps running on iPhone and Apple Silicon Mac. It was created for mobile game security testing. Many mobile games have jailbreak detection, but ipa-medit does not require jailbreaking, so...

AutoLocalPrivilegeEscalation

AutoLocalPrivilegeEscalation An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically This script is created due to Hackademics, there are so much possible exploit for that version of kernel, as a rookie OSCP student, I am not able to fin...

wwwolf-php-webshell

wwwolf's PHP web shell I frequently encountered issues when using other web shells: They use new PHP syntax features not compatible with the old PHP version running on some targets. They make wrong assumption on the remote URL, breaking PHP code injection or GET parameters unexpected by the serve...

pypykatz

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord pypykatz Mimikatz implementation in pure Python. At least a part of it : Runs on all OS...

CVE-2023-26360

This repository does not have a README...

CVE-2026-63030-wp2r00t

wp2r00t - WordPress REST Batch Route-Confusion SQLi PoC A self-contained proof-of-concept for the unauthenticated blind SQL injection reachable through the WordPress REST batch endpoint /wp-json/batch/v1. It is an independent implementation built from the published vulnerability mechanics. Offici...

CVE-2024-39090-PoC

CVE-2024-39090 PoC Exploit Script This PoC script exploits CVE-2024-39090, a CSRF to Stored XSS vulnerability in PHPGurukul Online Shopping Portal v2.0. It automates CSRF attacks to inject persistent JavaScript payloads, which execute when a privileged user accesses the affected page, enabling...

LdapRelayScan

LDAP Relay Scan A tool to check Domain Controllers for LDAP server protections regarding the relay of NTLM authentication. If you're interested in the specifics of the error-based enumeration, see below. For details regarding what can be done when you identify a lack of LDAP protections, see the...

CVE-2022-26134

CVE-2021-46422 RCE Installation git clone https://github.com/yigexioabai/CVE-2021-46422-RCE.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt Place CVE-2021-46422 RCE.py into the pocsuite3\pocs directory cd pocs pocsuite3 Usage Single URL: pocsuite -r CVE-2021-46422 RCE.py -u url Multip...

CVE-2024-43160

Wordpress BerqWP = 1.7.6 - Unauthenticated Arbitrary File Uplaod CVE-2024-43160 The BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type...

CVE-2023-29489

CVE-2023-29489 The security vulnerability is recorded in the Common Vulnerabilities and Exposures CVE system. Specifically, this vulnerability is related to cPanel, a popular hosting management software. This flaw allows for cross-site scripting XSS attacks through specially crafted requests."...

gatekeeper

Gatekeeper How is Gatekeeper different from OPA? Compared to using OPA with its sidecar kube-mgmt aka Gatekeeper v1.0, Gatekeeper introduces the following functionality: An extensible, parameterized policy library Native Kubernetes CRDs for instantiating the policy library aka "constraints" Nativ...

web-check

Web-Check Comprehensive, on-demand open source intelligence for any website 🌐web-check.xyz Kindly supported by: NinjaPear API to get a full B2B profiles from any URL | Hostinger Deploy Web-Check with one click on Hostinger | Warp Built for coding with multiple AI agents ---|---|--- Contents About...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall...

CVE-2025-49132-poc

CVE-2025-49132-poc I made this poc for CVE-2025-49132, as it was interesting to make and it's part of a challenge over at my cyber platform deepreview ! This CVE takes advantage of a file inclusion vulnerability that can be escalated to a Remote Code Execution with the pearcmd.php script. This is...

CVE-2021-24019

CVE-2021-24019 Exploit FortiClient EMS 6.2.6 - Authentication Bypass Exploit Overview This script automates session token validation to test if authentication can be bypassed in FortiClient EMS 6.2.6. The user provides the target, and the script checks a list of session tokens for valid access...

Laravel-CVE-2018-15133

CVE-2018-15133 - Laravel APPKEY Unserialization Vulnerability White Hat School 3rd Term 28th Class Yebin Lee Virtualization - Vulnerable Docker Configuration https://github.com/yeahhbean/Laravel-CVE-2018-15133 Overview This project is a Docker-based environment set up to verify PoC the...

nmap-CVE-2022-21907

nmap-CVE-2022-21907 Repository containing nse script for vulnerability CVE-2022-21907. It is a component IIS vulnerability on Windows. It allows remote code execution. The vulnerability affects the kernel module http.sys, which handles most basic IIS operations. After uploading the payload, the...

Bcrypt-forcer

Bcrypt-forcer sqlmap Bcrypt decryption tool Bcrypt hash cracker...

PiFinger

| \ | | | | | | | | .--. .--./ .---. .--. | / | | | | .-. | / /';/ /\ /'\ | | | | | | | | | | | | \ .//| ., | | || || ||.', '..' --- Just for fun and security @octosec --- --- W:besimaltinok.com | T:altnokbesim...

pentagi

PentAGI P enetration testing A rtificial G eneral I ntelligence Join the Community! Connect with security researchers, AI enthusiasts, and fellow ethical hackers. Get support, share insights, and stay updated with the latest PentAGI developments. ⠀ Table of Contents Overview Features Architecture...

evilnotify

EvilNotify Realls simple iOS app that does stuff with CVE-2025-24091; Not really anything useful, just for funsies Installation 1. Get latest .ipa from Releases tab 2. Install via LiveContainer or some sideloading service Usage Add custom keys or use the preset keys. !NOTE If you find any cool...

copyfail-alpine

This is a more minimal port of Copy Fail LPE CVE-2026-31431 which patches the first few bytes of /etc/passwd so that su-ing to root requires no password. This reduces the total size of the original exploit and makes it more portable. Distributions like Alpine use busybox/musl instead of a...

watchTowr-vs-JunosEvolved-CVE-2026-21902

watchTowr-vs-JunosEvolved-CVE-2026-21902 Detection Artifact Generator for Juniper Junos Evolved CVE-2026-21902. https://github.com/user-attachments/assets/a7d667e1-7636-4097-ab3f-838944cdcccc See our blog post for technical details. Detection in Action python...

advisories

This repository does not have a README...

CVE-2020-26217

Description XStream can be used for Remote Code Execution Influence Xstream com.thoughtworks.xstream xstream 1.4.13 How to use 0 text/plain 0 -1 1 cmd...

fastfuz-chrome-ext

FastFuzz Chrome Extension Fast fuzzing websites with chrome extension Screenshot Install Add Your Custom Files Open files.txt Paste your file or directory name in line by line Happy Hunting TODO Add response size foundings Add new specific file and directory names Add Extension to chrome extensio...

EchoDrv

EchoDrv Tool permitting to abuse Kernel read/write vulnerability in ECHOAC anti-cheat driver echodriver.sys Usage Example Sponsors I work at POST Luxembourg and thank them for allocating some time for me to develop and maintain this project! Visit POST website at...

shadow

shadow :: De Mysteriis Dom jemalloc shadow is a jemalloc heap exploitation framework. It has been designed to be agnostic of the target application that uses jemalloc as its heap allocator be it Android's libc, Firefox, FreeBSD's libc, standalone jemalloc, or whatever else. The current version 2....

instaloader

.. image:: https://raw.githubusercontent.com/instaloader/instaloader/master/docs/logoheading.png .. badges-start |pypi| |pyversion| |license| |aur| |contributors| |downloads| .. |pypi| image:: https://img.shields.io/pypi/v/instaloader.svg :alt: Instaloader PyPI Project Page :target:...

CVE-2017-7921-rewrite

CVE-2017-7921-rewrite simple CVE-2017-7921 rewrite in python by me. for educational purposes only! kinda simple, i didnt include checks for stuff like ips, and advanced checks for the response and such. I tested it on a camera I am authorized to test it on within my local network and it seems to...

CVE-2026-15410

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

awesome-censys-queries

Awesome Censys Queries A collection of fascinating and bizarre Censys Search queries. Contributing Found an awesome query? Submit it here Interested in contributing in another way? See the contributing guidelines Resources Censys Search CensysGPT Beta - AI Generated Queries Legacy Search Queries ...

CVE-2018-0296

Exploit-CVE-2018-0296 Python exploit for the recent Cisco ASA Path Traversal Vulnerability. This exploit will try to return the files from the index. Usage $ git clone https://github.com/bhenner1/CVE-2018-0296.git $ cd CVE-2018-0296 $ python CVE-2018-0296.py $ Vulnerable URL/IP -...

pcapan

pcapan A pcap capture analysis helper Usage: $ git clone https://github.com/synacktiv/pcapan $ cd pcapan $ cargo run -- --pcap /tmp/capture.pcap --google -w whitelist.yaml Finished dev unoptimized + debuginfo targets in 0.04s Running target/debug/pcapan --pcap /tmp/log.tcpdump --google -w...