CVE-2026-41089-LongLogon

LongLogon · CVE-2026-41089 LongLogon is an unauthenticated, non-destructive precondition checker for CVE-2026-41089 , a pre-auth stack buffer overflow in the Windows Netlogon service. With no credentials, and without sending the overflow, it reports whether a domain controller's DNS domain name i...

Shell-Shock

Shell Shock Authors : [email protected] Maintainers : Department : DevOps Licenses : Overview Shell Shock : Privelege Escalation, Remote Code Execution Family of bugs in the Unix Bash Shell. Allow execution of arbitrary commands. Exploitation Vectors Payloads shellshock user agent =...

CVE-2024-22514-Remote-Code-Execution

CVE-2024-22514: Remote Code Execution in Agent DVR Information Description iSpyConnect.com Agent DVR 5.1.6.0 contains a vulnerability which allows the file triggered by alert commands to be redirected. The modification can allow the commands function to trigger any file on the system under the...

plown

About Plown is a security scanner for Plone CMS. Although Plone has the best security track record of any major CMS and is considered highly secure, misconfigurations and weak passwords might enable system break-ins. Plown has been developed to ease the discovery of usernames and passwords, and a...

subfinder-action

SubFinder Action makes it easy to orchestrate SubFinder with GitHub Action. Example Usage GitHub Action runningSubFinder for single domain - name: 🔎 SubFinder - DNS Enumeration uses: projectdiscovery/subfinder-action@main with: domain: projectdiscovery.io GitHub Action runningSubFinder for multip...

blmvuln

Fix Major Security Vulnerability on PrestaShop Websites :rocket: CVE-2022-31101 detector and fixer! A newly found exploit could allow remote attackers to take control of your shop Read more about the vulnerability here:...

pcapinator

pcapinator An application to deal with lots of pcaps by running lots of tsharks Setup Install Python3, the one true Python... pip install python-dateutil pandas Features Recursively process multiple PCAP files including those in subdirectories. Wrapper around editcap Wireshark Tool that will let...

stoq

Get Started Documentation Installation Plugin Repository Plugin Documentation Overview stoQ is an automation framework that helps to simplify the mundane and repetitive tasks an analyst is required to do. It enables analysts and DevSecOps teams to quickly transition between different data sources...

CVE-2025-55182-demo

CVE-2025-55182 — demo This repository provides a demonstration of the CVE-2025-55182 vulnerability, which allows for remote code execution RCE in vulnerable Next.js applications. References: CVE entry: https://vulners.com/cve/CVE-2025-55182 Related PoC: https://github.com/msanft/CVE-2025-55182...

CVE-2026-87902

CVE-2026-87902 | ---|--- Advisory| GHSA-7hp8-65ch-5whp Product| WordPress = 7.1.1, fixed in 7.1.2; both versions tested Sink| wp-includes/template.php, getpagetemplate Cause| the candidate built from pagename is not passed through validatefile Actor| anonymous, no account, no cookie, no CSRF toke...

Home-Network-Vulnerability-Assessment

Home-Network-Vulnerability-Assessment Security audit and vulnerability analysis CVE-2014-3566 and CVE-2010-2333 on the local network infrastructure and residential router. Security Audit and Vulnerability Analysis on Residential Router Project Description This project documents a perimeter securi...

SkyWrapper

Overview SkyWrapper is an open-source project which analyzes behaviors of temporary tokens created in a given AWS account. The tool is aiming to find suspicious creation forms and uses of temporary tokens to detect malicious activity in the account. The tool analyzes the AWS account, and creating...

public-research

Public Research Open source research and talks on threat intelligence, fingerprinting, and fraud detection. Talks 10/25/2024 - Anti-Fraud W3 Community Group - An Emprical Analysis of Residential Proxies 03/27/2025 - Anti-Fraud W3 Community Group - Mitigating Fingerprint Impersonation 10/23/2025...

macos-UnifiedLogs

macos-unifiedlogs A simple Rust library that can help parse the macOS Unified Log files. Unified Logs were introduced in macOS version 10.12 Sierra, 2016. Part of Apple's goal to create a unified log format for all Apple products. They exist on macOS, iOS, watchOS, tvOS. The Unified Logs replace...

krakenhashes

KrakenHashes KrakenHashes is a distributed password cracking system designed for security professionals and red teams. The platform coordinates GPU/CPU resources across multiple agents to perform high-speed hash cracking using tools like Hashcat through a secure web interface. Think of KrakenHash...

BypassAV

BypassAV This map lists the essential techniques to bypass anti-virus and EDR as a reminder: it is highly recommended to read the articles related to manual techniques rather than using open source tools which are more likely to be suspected by the anti-virus because of IOSs Preview Edit the...

NoSQLMap

NoSQLMap NoSQLMap is an open source Python tool designed to audit for as well as automate injection attacks and exploit default configuration weaknesses in NoSQL databases and web applications using NoSQL in order to disclose or clone data from the database. Originally authored by @tcsstool and n...

CVE-2021-27513

CVE-2021-27513 ITSMBrokencontrol Exploit Title: EyesOfNetwork 5.3 - File Upload Remote Code Execution Date: 10/01/2021 Exploit Author: Ariane.Blow Vendor Homepage: https://www.eyesofnetwork.com/en Software Link: http://download.eyesofnetwork.com/EyesOfNetwork-5.3-x8664-bin.iso Version: 5.3-10...

external_aac_AOSP10_r33_CVE-2023-21282

This repository does not have a README...

Bash-exploit-for-CVE-2022-0739

Bash exploit for CVE-2022-0739 Unauthenticated SQL Injection for BookingPress 1.0.11. Usage: ./exploit.sh options Options: -u, --url VALUE Set the URL ex: http://example.com required -e, --event-dir VALUE Set the event directory ex: events -h, --help Display this help message...

Strutshock

Strutshock Usage strutshock http://example.com/index.action...

CVE-2018-17961

build the image run the container with port forwarding ssh -X into it run evince executeonlybypass.ps check exploit has written into /.bashrc...

sack

sack Identify connection of sessions for social engineering attacks. ========== It is the first framework to keep track of victims through social support live attacks. Example of use: python sack.py You must be in mode root to run. Has support to developing simple of modules Something that not ca...

Kernelhub

CVE-2003-0352 Describe Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms. ImpactVersion Product| C...

unleashed-firmware

Flipper Zero Unleashed Firmware This firmware is a fork of the original OFW version of flipperdevices/flipperzero-firmware and represents the most stable custom build, incorporating new features and improvements to the original components while remaining fully compatible with the API and...

openwrt

OpenWrt Project is a Linux operating system targeting embedded devices. Instead of trying to create a single, static firmware, OpenWrt provides a fully writable filesystem with package management. This frees you from the application selection and configuration provided by the vendor and allows yo...

CVE-2026-31431

CVE-2026-31431: "Copy Fail" - Linux Kernel Local Privilege Escalation 📢 Disclaimer This repository is strictly for educational and cybersecurity research purposes. The exploit code is analyzed to understand the underlying vulnerability, facilitate patching, and develop defensive strategies. Do no...

cve-2025-24893-poc

CVE-2025-24893 — XWiki Unauthenticated RCE PoC Proof-of-Concept exploit for CVE-2025-24893 , a critical unauthenticated Remote Code Execution vulnerability in XWiki. This exploit abuses a Groovy template injection in the SolrSearch endpoint to execute arbitrary commands — including reverse shells...

CVE-2016-9793

CVE-2016-9793...

CVE-2022-26134-PoC

CVE-2022-26134-PoC...

CVE-2025-49113-nuclei-template

Nuclei vulnerability detection template - CVE-2025-49113 - Roundcube ≤ 1.6.10 Post-Authentication Remote Code Execution CVE ID: CVE-2025-49113 Severity: Critical CVSS 10.0 Discovered by: Kirill Firsov FearsOff Date Disclosed: June 1, 2025 Fixed in: Roundcube 1.6.11 / 1.5.10 LTS -...

Log4j

1.Create a Sample Vulnerable Application . 2.Start a netcat listner . 3.Run the exploit . 5.Use jdk1.8.020 for better results . Exploit-db - https://www.exploit-db.com/exploits/50592...

CVE-2016-8655_Android

CVE-2016-5195 GoldFish 3.4 This works on the goldfish 3.4 Emulator Initroot: https://alephsecurity.com/2017/06/07/initroot-moto/ has been released for my device harpia, so I have stopped porting the exploit to my device harpia/.... I have learnt a large amount from working on this project, but...

CVE-2014-7911_poc

CVE-2014-7911poc Local root exploit for Nexus5 Android 4.4.4KTU8P author: retme [email protected] @returnsme on twitter & @retme on weibo website: retme.net how to build Import the project into eclipse,and build. ./cve20147911/assets/msmattack is the binary file of CVE-2014-4322 exploit.You...

bambdas

Bambda scripts Welcome to the official Bambda scripts repository from PortSwigger. This repo contains a collection of scripts developed by both PortSwigger and the community with 🧡 📑 On this page Types of Bambda scripts Repository contents Importing scripts into Burp Updating scripts in your...

UniBLEed

UniBLEed Unitree G1 RCE PoC & Scripts CVE-2026-76639 / CVE-2026-76640 technical details at boschko.ca/g1-ble-rce/ Use this repository only with robots, accounts, and networks you are authorized to test. The active chains can change the robot's WiFi configuration, stop or restart services, crash...

appsec-forge

appsec-forge Created for Developers, DevOps, AppSec, DevSecOps, and Security Engineers. A repository-first security knowledge base covering secure development, application security, infrastructure, software supply chain, AI, and DevSecOps. Study security problems the same way experienced...

CVE-2026-46215-POC

CVE-2026-46215: DRM GEM changehandle Use-After-Free unprivileged LPE Local privilege escalation via a use-after-free in the DRM core ioctl DRMIOCTLGEMCHANGEHANDLE drmgemchangehandleioctl, ioctl nr 0xD2. Reachable by any user with access to a render node /dev/dri/renderD, granted to the active...

PX4-Military-UAV-Autopilot-1.12.3-Stack-Buffer-Overflow-Exploit-CVE-2025-5640-

PX4 Military UAV Autopilot =1.12.3 Stack Buffer Overflow Exploit CVE-2025-5640 Author: Mohammed Idrees Banyamer @banyamersecurity GitHub: https://github.com/mbanyamer Date: 2025-06-21 Tested on: Ubuntu 20.04 LTS + PX4 SITL jMAVSim CVE: CVE-2025-5640 Type: Denial of Service DoS via Stack Buffer...

CVE-2018-2893

CVE-2018-2893 Vulnerability Verification Script Usage python CVE-2018-2893.py 10.10.0.1 7001 Analysis Warning https://www.anquanke.com/post/id/152164 Script Source https://www.secfree.com/article-957.html...

nrf24-injection

A tool set for sniffing devices and launching attacks with Crazyradio. Based on BastilleResearch's research. Setting Up Install additional modules sudo apt-get install sdcc binutils python python-pip sudo pip install -U pip sudo pip install -U -I pyusb sudo pip install -U platformio Supported...

REST-Attacker

REST-Attacker REST-Attacker is an automated penetration testing framework for APIs following the REST architecture style. The tool's focus is on streamlining the analysis of generic REST API implementations by completely automating the testing process - including test generation, access control...

evilwaf

EvilWAF is an advanced transparent MITM Firewall bypass proxy and deep WAF vulnerability scanner designed for authorized security testing. It operates at the transport layer — it does not touch payloads, cookies, or headers from your tools. Works with any tool likeffuz, sqlmap, nuclei and etc tha...

invisible_playwright

Playwright gets caught by anti-bots and captchas. This one runs on an anti-detect Firefox with an undetected fingerprint, compatible with your existing Playwright code. How it works Anti-bots ask two questions, and reCAPTCHA, hCaptcha and Cloudflare Turnstile score the answers. invisibleplaywrigh...

rmx3888-cve-2026-43499-config

CVE-2026-43499 Exploit Configuration for realme RMX3888 Device Information Brand/Model : realme RMX3888 Android Version : 16 SDK 36 Build ID : BP2A.250605.015 Kernel : Linux 6.1.141-android14-11-o-gffc54a6d2287 SoC : Qualcomm SM8650 Snapdragon 8 Gen 3 Architecture : ARM64 aarch64 Overview This...

CVE-2026-67182-HTTP-Request-Smuggling-Enables-Front-End-Access-Control-Bypass-rouille-

Security Advisory: HTTP Request Smuggling Enables Front-End Access Control Bypass rouille Assigned CVE ID: CVE-2026-67182 Summary rouille::proxy::proxy and rouille::proxy::fullproxy copy client-supplied request header values into the upstream connection without checking them for control character...

Apache-CVE-2021-42013-RCE-Exploit

🚀 Overview This exploit tool targets path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. The tool uses curl backend to bypass URL encoding issues that affect other Python-based exploit attempts, providing reliable exploitation even when other...

CVE-2022-0847-POC

CVE-2022-0847 CREDITS: vulnerability author: Max Kellermann max kellermann explanation: https://dirtypipe.cm4all.com/ RESOURCES: PAGE CACHE: https://manybutfinite.com/post/page-cache-the-affair-between-memory-and-files/ PIPE:...

CVE-2024-25832-PoC

CVE-2024-25830 and CVE-2024-25832 - DataCube3 Improper Access Control and Unrestricted File Upload. Overview This repository features a Proof of Concept PoC for a two-step exploit chain targeting DataCube3 devices. It combines CVE-2024-25830 Improper Access Control to extract root passwords and...

cve-2025-0364

CVE-2025-0364: BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE The BigAntSoft BigAnt Server, which provides a Windows hosted on-premises chat server that focuses on business use cases, is vulnerable to unauthenticated remote code execution via account registration and PHP...