Cisco-SNMP-Slap

OVERVIEW cisco-snmp-slap utilises IP address spoofing in order to bypass an ACL protecting an SNMP service on a Cisco IOS device. Typically IP spoofing has limited use during real attacks outside DoS. Any TCP service cannot complete the inital handshake. UDP packets are easier to spoof but the...

ghidra-scripts

ghidra-scripts "Humans are more suited to recognize food than to keep large graphs in their head." -- Halvar Flake A collection of my Ghidra scripts to facilitate reverse engineering and vulnerability research. Article...

Auto-Root-Exploit

Auto-Root-Exploit Auto Root Exploit Tool Author : Nilotpal Biswas Facebook : https://www.facebook.com/nilotpal.biswas.73 Twitter : https://twitter.com/nilotpalhacker USAGE : for kernel version 2.6 all bash autoroot.sh 2 for kernel version 3 all bash autoroot.sh 3 for kernel version 4 all bash...

rtl8812au

RTL8812AU/21AU and RTL8814AU linux driver with monitor mode and frame injection The master branch is based on https://github.com/ulli-kroll/rtl8821au branch v4.3.22-beta/rework. According to rtwversion.c the real driver version is 4.3.20. The branch v4.3.21 may be built for RTL8814AU or...

kamerka

NOT SUPPORTED OR DEVELOPED ANYMORE PLEASE USE GUI VERSION https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 aka FIST Flickr, Instagram, Shodan, Twitter Build interactive map of cameras, printers, tweets and photos. The script creates a map of cameras, printers, tweets and photos based on your...

untitledgoosetool

Untitled Goose Tool The Goose is loose. Table of Contents About Getting Started Prerequisites Requirements Installing Usage Config GUI Auth Csv Honk Messagetrace Recommended Default Workflow Recommended Workflow for UAL Call with Time Bounds Considerations Known Issues Acknowledgements Contributi...

cai

Cybersecurity AI CAI Professional Edition with unlimited alias1 tokens | 📊 View Benchmarks | 🚀 Learn More 🔓 Community Edition Research & Learning · Perfect for Researchers & Students pip install cai-framework ✅ Free for research 🤖 300+ AI models 🌍 Community driven 📚 Open source 🔧 Extensible...

CVE-2020-10131

CVE-2020-10131 - CVE-2020-10131 - SearchBlox Product before V-9.2.1 is Vulnerable to CSV macro injection. Product Description: SearchBlox simplifies enterprise search for complex organizations. SearchBlox intuitive and intelligent tools offer out-of-the-box setup, secure encryption, and low total...

Oracle-GoldenGate---CVE-2016-0451

This repository does not have a README...

Fuel-CMS-Remote-Code-Execution-1.4--RCE--

This repository does not have a README...

ExWA

ExWa WhatsApp for CLI with API ExWa is a simple tool written in PHP, which functions to use a CLI version of WhatsApp application with help of API from rapiwha.com Installation : $ git clone https://github.com/dalpan/ExWa $ cd ExWa $ php exwa.php Usage : Register first at https://rapiwha.com/ and...

BloodfangC2

Bloodfang is a modern implant with position independent code that compiles to 64 & 32 bit Windows systems. Compiled implant shellcode is about 6 KB Kilobytes. Its execution in memory has very little footprint. Props to: https://5pider.net/blog/2024/01/27/modern-shellcode-implant-design That said;...

Elemental

Elemental Elemental is a centralized threat library of MITRE ATT&CK techniques, Atomic Red Team tests, and over 280 Sigma rules. It provides an alternative way to explore the ATT&CK dataset, mapping relevant Atomic Red Team tests and Sigma rules to their respective technique. Elemental allows...

CyberStrikeAI

CyberStrikeAI 中文 | English The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next. CyberStrikeAI connects planning, execution, human oversight, evidence, and replay in one auditable...

CVE-2026-34156

🚨 CVE-2026-34156 - NocoBase Critical Sandbox Escape Unauthenticated / Low-Privilege → Root Remote Code Execution in NocoBase 📌 Overview CVE-2026-34156 is a critical sandbox escape vulnerability in NocoBase an open-source no-code/low-code platform. An attacker with the ability to create or execute...

CVE-2023-49440

CVE-2023-49440-POC Exploit Title: AhnLab EPP ManagementCentralised Endpoint Security Management - Boolean-based-SQL-Injection SQL Injection that led to RCE Date: 16 July 2023 CVE : CVE-2023-49440 Vendor Homepage: https://www.ahnlab.com/en Software...

SecAssessment-GapDetection-Thesis

D3FENDer - Security Assessment & Gap Detection Tool Using MITRE ATT&CK & D3FEND Frameworks D3FENDer is a rule-based CLI tool developed by Michael for his thesis titled Development of a security assessment and gap detection system using the MITRE ATT&CK and D3FEND Frameworks. It is designed to...

CVE-2019-1653

CVE-2019-1653 NSE script to scan for Cisco routers vulnerable to CVE-2019-1653 Usage: nmap --script cve20191653 -p 443...

dns-rebinding-tool

Inspired by @tavisio This project is meant to be an All-in-one Toolkit to test further DNS rebinding attacks and my take on understanding these kind of attacks. It consists of a web server and pseudo DNS server that only responds to A queries. The root index of the web server allowes to configure...

allsafe-android

Allsafe - Android An Intentionally Vulnerable Android Application for Security Education Features • Screenshots • Installation • Challenges • Contributing • Support 📱 About Allsafe is an intentionally vulnerable Android application designed for security enthusiasts, pentesters, and developers to...

ESXi-Ransomware-Scanner-mi

ESXiransomwarescanner A program that scans IP addresses for signs of ESXi compromise by grabbing the ransom note from an html page and comparing the strings. Requirements python 3.x requests BeautifulSoup tqdm colorama Installation Use the package manager pip to install the required packages. pip...

CVE-2021-44228-Log4j-Payloads

This repository does not have a README...

crawlee

A web scraping and browser automation library Crawlee covers your crawling and scraping end-to-end and helps you build reliable scrapers. Fast. Your crawlers will appear human-like and fly under the radar of modern bot protections even with the default configuration. Crawlee gives you the tools t...

CVE-2026-33146

CVE-2026-33146 A public share looked clean in the page tree, but the search endpoint told a different story. In Docmost, restricted child pages hidden from public share viewers could still leak through public share search results. Intro I found this issue while reviewing Docmost , an open-source...

CVE-2026-60004

CVE-2026-60004 — Gitea diffpatch RCE Remote code execution PoC for the Gitea diffpatch endpoint. An account with write access to a repository on instances with open registration, simply registering an account suffices can execute arbitrary shell commands on the server as the Gitea service account...

CVE-2026-0768

CVE-2026-0768 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

CVE-2024-55963

CVE‑2024‑55963 Appsmith RCE PoC PoC exploit for CVE‑2024‑55963 that runs arbitrary commands or spawns reverse shell on vulnerable Appsmith instances. It automatically handles both modern servers with the environmentId feature and much older “legacy” builds that pre‑date it, so you can use one...

CVE-2025-5701

CVE-2025-5701 HyperComments = 1.2.2 - Unauthenticated Subscriber+ Arbitrary Options Update Description The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hcrequesthandler function...

CVE-2025-24016-Wazuh-Remote-Code-Execution-RCE-PoC

🚨 Wazuh Remote Code Execution RCE - PoC 📌 Vulnerability Summary A critical RCE vulnerability has been identified in the Wazuh server due to unsafe deserialization in the wazuh-manager package. This bug affects Wazuh versions ≥ 4.4.0 and has been patched in version 4.9.1. 🔍 Details The flaw lies i...

RCE-CVE-2025-32710

RCE-CVE-2025-32710 Windows Remote Desktop Services Vulnerability Allows Remote Code Execution 💥 RDP Auto-Pwn RCE-CVE-2025-32710 Eksploitasi Otomatis untuk Layanan RDP yang Rentan BlueKeep & Beyond 🔓 Membuat akun admin • 🪟 Mengaktifkan RDP • 📶 Verifikasi akses otomatis --- ⚠️ Peringatan Penting &...

BOF_RunPe

BOFRunPE BOF RunPE is a Beacon Object File for Cobalt Strike that executes PE files entirely in-memory within the beacon process. Unlike traditional fork&run, no child process is spawned, no console is created, and no pipe is used - all output is captured via IAT hooking and redirected to the...

ShellSweep

ShellSweep ShellSweeping the evil Why ShellSweep "ShellSweep" is a PowerShell/Python/Lua tool designed to detect potential web shell files in a specified directory. ShellSheep and it's suite of tools calculate the entropy of file contents to estimate the likelihood of a file being a web shell. Hi...

MongoDeepDive

🌊 MongoDeepDive Context-Aware MongoDB Wire Protocol Exploit CVE-2025-14847 Advanced Heuristics Analyzer for Red Team Operations 💀 Overview MongoDeepDive is a high-performance, asynchronous vulnerability scanner and forensic analyzer designed to detect uninitialized memory leaks in MongoDB servers...

CVE-2024-50970

CVE-2024-50970 Description A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Vulnerability Type SQL Injection Vendor of Product Itsourcecode Affected Product Code...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where multiple cookie header fields can be merged without being properly counted...

unomi_exploit

Disclaimer The vulnerability detection methods, files, and other content provided here are strictly limited to use by security professionals under legal authorization, for the purpose of testing the security of authorized servers. Security professionals must comply with legal regulations and are...

PasteZort

PasteZort Pastejacking - PasteZort Uso: ./PasteZort.py...

CVE-2025-20029-simulation

🔐 Replayable Attack Simulation – CVE-2025-20029 ⚠️ This repository simulates CVE-2025-20029 in a safe and controlled environment. It does not interact with real F5 BIG-IP systems or exploit any production service. The goal is educational: to study the vulnerability pattern and test payloads safely...

CVE-2011-2523

CVE-2011-2523 Exploit for vsFTPd backdoor vulnerabilty written in python using Pwntools Usage pip3 install pwntools python3 ./CVE-2011-2523.py optional...

CVE-2017-8225

CVE-2017-8225 Install Python3 apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 Installation: git clone https://github.com/kienquoc102/CVE-2017-8225.git Code Exploit: cd CVE-2017-8225 python3 scanip.py Your File Text .txt Example: python3...

WindowsProtocolTestSuites

Windows Protocol Test Suites Windows Protocol Test Suites provide interoperability testing against the implementation of Windows open specifications including File Services, Identity Management, Remote Desktop and etc. Originally developed for in-house testing of the Microsoft Open Specifications...

CVE-2026-40858

camel-infinispan Remote Aggregation Repository Unsafe Deserialization Reproducer CVE-2026-40858 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-infinispan component, tracked as CVE-2026-40858. The ProtoStream-based remote aggregation repository serializes ea...

-CVE-2019-18634-sudo-pwfeedback

-CVE-2019-18634-sudo-pwfeedback...

CVE-2025-55182

📌 CVE-2025-55182 — React2Shell Critical Unauthenticated Remote Code Execution RCE in React Server Components 📖 Overview CVE-2025-55182, informally dubbed React2Shell, is a critical remote code execution RCE vulnerability disclosed on December 3, 2025 in React Server Components RSC and related...

cve-2021-1647

CVE-2021-1647 Microsoft Defender Remote Code Execution Vulnerability INFO Password:infected...

CVE-2022-46164-poc

CVE-2022-46164-poc Basic POC exploit for CVE-2022-46164...

KilledProcessCanary

Windows Killed Process Canary A Windows Service to detect if it has been shutdown and hibernate if multiple instances are. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com...

Threat-Hunting

Threat-Hunting | Detection Engineering Collection of threat hunting and detection queries for: CrowdStrike Falcon using CQL – CrowdStrike Query Language Microsoft Defender XDR using KQL – Kusto Query Language Aimed at surfacing suspicious processes, anomalous network behaviors, living-off-the-lan...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Roninwebsite is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby librariesronin-rb for a variety of security tasks, such as encoding/decoding data...

BestEdrOfTheMarket

Best EDR Of The Market BEOTM V3 🐲🏴‍☠️ Best Edr Of The Market is an open-source lab designed to implement and understand, from a low-level perspective, the detection methods used by Endpoints Detection & Response security products and their workarounds. These techniques are mainly based on the...