angryFuzzer

AngryFuzz3r Status: Development About the AngryFuzz3r project AngryFuzz3r is a collection of tools for pentesting to gather information and discover vulnerabilities of the targets based on Fuzzedb https://github.com/fuzzdb-project/fuzzdb project UrlFuzz3r-AngryFuzz3r1 Discover hidden files and...

trivy-db

trivy-db Overview trivy-db is a CLI tool and a library to manipulate Trivy DB. Library Trivy uses trivy-db internally to manipulate vulnerability DB. This DB has vulnerability information from NVD, Red Hat, Debian, etc. CLI The trivy-db CLI tool builds vulnerability DBs. A GitHub Actions workflow...

al-khaser

Al-Khaser v0.81 Content Introduction Possible uses Features Anti-debugging attacks Anti-Dumping Timing Attacks Human Interaction Anti-VM Anti-Disassembly Requirements License Introduction al-khaser is a PoC "malware" application with good intentions that aims to stress your anti-malware system. I...

testssl.sh

Intro testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. Key features Clear output: yo...

CVE-2025-50461

CVE-2025-50461: Remote Code Execution via Unsafe Model Deserialization in Verl Status: RESERVED This CVE ID has been assigned but is not yet published in the official CVE list. A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/modelmerger.py script whe...

CVE-2018-11235

CVE-2018-11235...

CVE-2018-13379

CVE-2018-13379 CVE-2018-13379 Module for Router Scan Project How To Use prepare pip3 install time,threading,ipcalc,requests usage python3 exp.py -f list.txt Copyright some part of this repository that send tcp response is partly forked from milo2012/CVE-2018-13379 with some changes for APIs of...

CVE-2025-48384

CVE-2025-48384: Breaking git with a carriage return and cloning RCE Reproduction from https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384. All credits to David Leadbeater. This is a basic reproduction attempt of the vulnerability. To trigger, do git clone --recursive...

zeek-spicy-stun

STUN Session Traversal Utilities for NAT STUN This is a Zeek protocol analyzer that detects STUN based on Spicy. You must install Spicy to use this package. This package will create two logs: stun.log - This log has every STUN message. stunnat.log - This log has NAT detections from mapped...

HTTPLoot

HTTPLoot An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites. Usage To use the tool, you can grab any one of the pre-built binaries from the Releases section of the repository. If you want to build the...

obsidian-osint-templates

obsidian-osint-templates !info License Copyright c 2024 Micah Hoffman This work is licensed under the Creative Commons Attribution-ShareAlike 4.0 International License. To view a copy of this license, visit http://creativecommons.org/licenses/by-sa/4.0/ or send a letter to Creative Commons, PO Bo...

webhacklist

The complete archive of the Top 10 Web Hacking Techniques — every nominated technique not just the winners for every year since 2006, plus PDF snapshots of the original announcement posts so the record survives its hosts. 🌐 Read it online at webhacklist.com Search every technique, filter by year,...

ModSecurity

Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. In general, it provides the capability to load/interpret rules written in the ModSecurity...

CVE-2024-3094

CVE-2024-3094 Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specifi...

CVE-2025-51867

CVE-2025-51867 Vulnerability description Deepfiction AI is an AI entertainment company with a mission to revolutionize personalized storytelling. Deepfiction AI provide a web application to create stories by chatting with LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its ch...

CVE-2022-25012

CVE-2022-25012 Argus Surveillance DVR v4.0 employs weak password encryption. Compilation gcc pocland.c -o pocland Usage Example ./pocland B4A1ECB4F539C48C7357F641C9C49083 References CVE-2022-25012 More PoCs available at: pocland...

CVE-2023-22809

CVE-2023-22809 Analysis & Exploit Basic Information Vulnerability ID: CVE-2023-22809 Vulnerability Level: High Vulnerability Score: 7.8 Affected Versions: sudo 1.8.0 - sudo 1.9.12p1 sudo = 1.8.0 or sudo = 1.9.12p1 Attack Effect: Local Privilege Escalation Attack Method Modify root username in...

CVE-2020-7048

CVE-2020-7048 You can watch this video, to reproduce this exploitation https://www.youtube.com/watch?v=wHBhWVP0ryY&feature=youtu.be&abchannel=ElmouradiAmine...

threadtear

Threadtear Threadtear is a multifunctional deobfuscation tool for java. Android application support is coming soon Currently working on a dalvik to java converter. Suitable for easier code analysis without worrying too much about obfuscation. Even the most expensive obfuscators like ZKM or String...

Weggli_rules_SSTIC2023

Here is a curated list of weggli queries You can read them and use them one by one, or launch them by batch: Usage: $ bash dangerousfunctions.qry code.c $ bash mallocoverflow.qry -e cc sourcedir/ There is threee categories: 1. dangerous functions: such as strcpy, system, etc.. 2. stack : tries to...

DeepPass

DeepPass Dockerized application that analyzes documents for password candidates. The blogpost "DeepPass — Finding Passwords With Deep Learning" gives more detail on the approach and development of the model. To run: docker-compose up This will expose http://localhost:5000 where documents can be...

React2Shell-CVE-2025-55182

🔥React2Shell - CVE-2025-55182 / CVE-2025-66478 Proof of Concept Critical Security Vulnerability Demo - CVSS 10.0 - Remote Code Execution in React Server Components ⚠️DISCLAIMER FOR EDUCATIONAL PURPOSES ONLY! This repository demonstrates a critical security vulnerability. Never use on production...

CVE-2025-11077

CVE-2025-11077 - SQL Injection Author: Byte Reaper Description This vulnerability is a Blind SQL Injection in the addcontent.php file of the Online Learning Management System CVE-2025-11077, allowing an attacker to extract database information by sending crafted POST requests. Requirements : Linu...

CVE-2026-84600

CVE-2026-84600 Shortcuts Impact: A malicious shortcut may be able to send messages without user confirmation. Description: An authorization issue was addressed with improved state management. Products: iOS and iPadOS, macOS, tvOS, visionOS, watchOS Fixed In: iOS 27 and iPadOS 27 macOS Golden Gate...

CVE-2024-3094

This repository does not have a README...

2017-11-17-Maldoc-Using-CVE-2017-0199

This repository does not have a README...

CVE-2019-8942

This repository does not have a README...

CVE-2020-0668

CVE-2020-0668 Make CVE-2020-0668 exploit work for version = win10 v1903 Diaghub Exploit evil.dll STEP 2：execute exp.ps1 with powershell STEP 3：execute Diaghub.exe C:\ProgramData evil.dll to load dll and add user. Diaghub UsoDllLoader Exploit = v1903 powershell exploit works on version = win10 v19...

recon-ninja

recon-ninja The tool is a GitHub repository that provides a recon tool that lets you upload your domain discovery through an upload option. The tool utilizes HTTPX, which is a tool that scans for alive domains. The tool also has an integrated MongoDB Atlas database, which is a cloud-based databas...

smogcloud

☁️ Smogcloud Find exposed AWS cloud assets that you did not know you had. A comprehensive asset inventory is step one to any capable security program. We made smogcloud to enable security engineers, penetration testers, and AWS administrators to monitor the collective changes that create dynamic...

CVE-2021-40438-POC

Note: Intended only for educational and controlled testing purposes. Only test on systems you have permission to assess. CVE-2021-40438 - SSRF Exploit ░█▀▀░█░█░█▀▀░░░░░▀▀▄░▄▀▄░▀▀▄░▀█░░░░░░█░█░▄▀▄░█░█░▀▀█░▄▀▄ ░█░░░▀▄▀░█▀▀░▄▄▄░▄▀░░█/█░▄▀░░░█░░▄▄▄░░▀█░█/█░░▀█░░▀▄░▄▀▄...

CVE-2026-85312

CVE-2026-85312 — camel-core: saga hijacking via the Long-Running-Action header Runnable proof-of-concept reproducer for the Apache Camel vulnerability where camel-core's SagaProcessor selected the saga coordinator from the Long-Running-Action message header on every exchange. That header name...

CVE-2025-55182-POC

CVE-2025-55182 Next.js RCE Scanner CVE-2025-55182 vulnerability scanning and exploitation tool for remote code execution in Next.js applications. Supports batch detection, command execution, Godzilla memory shell injection, and reverse shell functionality. ⚠️ This tool is intended for security...

cve-2022-44268

CVE-2022-44268 Credit to the researchers who discovered this: Bryan Gonzalez and the Ocelot Team Create a malicious PNG to take advantage of ImageMagick 7.1.0-40: CVE-2022-44267: Denial of Service CVE-2022-44268: Information Disclosure Disclaimer: The author of this project is not responsible for...

CVE-2022-22965-Spring-Core-Rce

Spring-Core JDK9+ RCE Usage Instructions ╰─ ./CVE-2022-22965 -h ─╯ Single target: ./CVE-2022-22965 -u http://127.0.0.1:8080 Batch scan: ./CVE-2022-22965 -l url.txt Local Vulnerability Testing 0x01 Docker Image docker pull vulfocus/spring-core-rce-2022-03-29 docker run -itd -p 8080:8080 -P...

birdy-edwards

BIRDY-EDWARDS 2.0 Infiltrate & Expose Automated AI powered Facebook intelligence tool for target profiling, network analysis and threat reporting. Runs entirely on-device via Ollama. AI-powered Facebook SOCMINT platform — 100% local, zero cloud dependency. For lite version check this repo click...

CVE-2023-4357-Chrome-XXE

Tool Introduction The world's first single file exploits the CVE-2023-4357 Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitors. The world's first single file exploits the CVE-2023-4357 Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitor...

GenAI-LLM-Top10

OWASP Top 10 for Large Language Model Applications !IMPORTANT Current release: 2026 — published August 4, 2026. Get the 2026 publication · Read the canonical source · Report a correction This is the official source repository for the OWASP Top 10 for Large Language Model Applications , maintained...

snapchange

Snapchange Lightweight fuzzing of a memory snapshot using KVM Snapchange provides the ability to load a raw memory dump and register state into a KVM virtual machine VM for execution. At a point in execution, this VM can be reset to its initial state by resetting the dirty pages found by KVM or...

KQL_sentinel_CVE-2025-21333

This repository does not have a README...

copy-fail-go

Copy Fail - CVE-2026-31431 - golang version ⚠️ WARNING: This program is highly dangerous and experimental. Manual cleanup is required to clear the exploit. Use at your own risk! Technical Writeup original repo run check /usr/bin/su before run: user@pc:$ hexdump -n 300 -x /usr/bin/su 0000000 457f...

CVE-2025-14893

CVE-2025-14893: Authenticated Stored Cross-Site Scripting XSS in IndieWeb WordPress Plugin Disclaimer: This repository is created for educational purposes and ethical disclosure only. The vulnerability has been responsibly reported to the vendor and patched. Do not use this information to exploit...

fastjson-RCE

fastjson-v1.2.47-RCE Vulnerability Reproduction fastjson-1.2.47 == Resource Download: 下载 http://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.47/ 文档 https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98 源码 https://github.com/alibaba/fastjson/archive/1.2.47.zip jar...

cve-2019-2618

cve-2019-2618 Weblogic Upload Vulnerability Requires username password - CVE-2019-2618 Python Usage python CVE-2019-2618.py url username password Decrypt Weblogic Password root@f0cb7e674d7e:/Oracle cat...

ncloader

Ncloader A simple dll injection utility The current design implements the well-known DLL injection technique: VirtualAllocEx allocates memory for string in remote process WriteProcessMemory writes the "path/to/dll/file" in remotely allocated memory CreateRemoteThread with start address of...

CVE-2025-24204

CVE-2025-24204 About CVE-2025-24204 is a vulnerability that allows reading any process memory on SIP-enabled macOS systems. The root cause of this vulnerability stems from adding an excessively powerful entitlement com.apple.system-task-ports.read to the gcore binary. Exploiting this vulnerabilit...

CVE-2026-24061-setup

CVE-2026-24061 Setup This repository contains the Docker setup for CVE-2026-24061. Once you have installed Docker, just do the following: 1. Clone this repository. 2. Run the following command: sudo docker build . --tag telnetd-auth-bypass 3. Once the docker image is built, we can start the...

CVE-2025-68921

CVE-2025-68921 A local privilege escalation vulnerability exists in Nahimic, an audio enhancement software pre-installed on many gaming laptops. The issue allows a low-privileged user to escalate privileges to NT AUTHORITY\SYSTEM . This vulnerability was reported to Lenovo PSIRT, tracked as...

sudo-chroot-CVE-2025-32463

DISCLAIMER This code is for educational and research purposes only. Do not use it on systems you do not own or have permission to test. The author is not responsible for any misuse, damage, or legal consequences resulting from the use of this code. sudo chroot PrivEsc PoC CVE-2025-32463 This is a...

OSCP

OSCP OSCP Study Guide Table of Contents Enumeration and Recon Web Enumeration Nikto scanning: nikto -h http://10.10.10.1 Directory busting with different tools: DIRB dirb http://10.10.10.1 Gobuster gobuster dir -u http://10.129.155.74:3000 -w...