46806 matches found
Xiaomi_Mi_WiFi_R3G_Vulnerability_POC
This repository does not have a README...
CVE-2025-33073
CVE-2025-33073 PoC Exploit for the NTLM reflection SMB flaw. All credits go to the offical research: https://www.synacktiv.com/en/publications/ntlm-reflection-is-dead-long-live-ntlm-reflection-an-in-depth-analysis-of-cve-2025 Prerequisites OS: Kali Linux has most packages pre-installed. NetExec N...
Nuclei-Templates-Collection
https://github.com/0xSojalSec/templates-nuclei-Oracle-OAM---XSS https://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31 https://github.com/0xElkot/My-Nuclei-Templates https://github.com/0xSojalSec/Nuclei-Templates-API-Linkfinder https://github.com/0xSojalSec/templatesallnucle...
CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS
CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS Exploit Author: emirhanerdogu Vendor Homepage https://www.sourcecodester.com/php/16928/sticky-notes-app-using-php-source-code.html Software Link...
CVE-2017-1000486
CVE-2017-1000486 Remote Code Execution exploit for PrimeFaces 5.x - EL Injection CVE-2017-1000486 This is basically the same exploit made by Mogwailabs, but edited to work in closed environments without access to the internet or with blocked firewall outbound traffic. It gives you results in HTTP...
CVE-2024-9264-in-Grafana-11.x
This repository does not have a README...
domain-to-webapp
domain-to-webapp A simple bash script for finding web application hosted within a domain Requirements curl Subfinder docker image Usage $./webAppChecker businesssolutions.com ./ouputdir ./scope.txt | \ | | \ \ / /| | / \ | | | |/ | ' \ / | | ' \ | / \ \ \ /\ / / \ ' \ / \ | ' | ' \ | || | | | | |...
CVE-2022-0185-exploit
This repository does not have a README...
CVE-2018-3191
Usage: java -jar weblogic-spring-jndi.jar Example: java -jar weblogic-spring-jndi.jar rmi://:1099/Object Note: weblogic-spring-jndi-12.2.1.3.jar for weblogic: 12.2.1.3 weblogic-spring-jndi-10.3.6.0.jar for weblogic: 10.3.6.0 12.2.1.0 12.1.3.0 12.2.1.1...
CVE-2019-0232-EXP
CVE-2019-0232-EXP Test environment: Win10 Home 1809, jre version 18.3 build 10.0.2+13, Tomcat version 9.0.13. Affected Tomcat Versions ★Apache Tomcat 9.0.0.M1 to 9.0.17 ★Apache Tomcat 8.5.0 to 8.5.39 ★Apache Tomcat 7.0.0 to 7.0.93 Configuration conf/web.xml cgi...
Meerkat
Meerkat Meerkat is collection of PowerShell modules designed for artifact gathering and reconnaissance of Windows-based endpoints without requiring a pre-deployed agent. Use cases include incident response triage, threat hunting, baseline monitoring, snapshot comparisons, and more. Artifacts Host...
efiXplorer
efiXplorer - IDA plugin and loader for UEFI firmware analysis and reverse engineering automation Documentation Plugin wiki Loader wiki Build instructions and installation Publications efiXplorer: Hunting for UEFI Firmware Vulnerabilities at Scale with Automated Static Analysis Static...
CVE-2026-12166_CVE-2026-12167_CVE-2026-12168
Multiple Local Privilege Escalation Vulnerabilities in Little Orbit GFAC Driver GFACSysx64.sys | ---|--- CVE IDs| CVE-2026-12166, CVE-2026-12167, CVE-2026-12168 Vendor| Little Orbit Product| GamersFirst Anti-Cheat GFAC Driver GFACSysx64.sys Affected Versions| No version information is embedded in...
CVE-2026-44595
CVE-2026-44595 — YAMCS Unauthorized User Enumeration via IAM API Summary The IAM API endpoints listUsers, getUser, listGroups, getGroup in yamcs-core do not enforce the required SystemPrivilege.ControlAccess check. Any authenticated user — even one with no privileges — can enumerate all user...
CVE-2026-22241
CVE-2026-22241 : Open eClass Remote Code Execution RCE This exploit uses CVE-2026-22241 automates the login, ZIP creation, upload process and providing webshell directly on the server and removes it automatically once the exploit is completed. Description An Unrestricted File Upload vulnerability...
Android-Forensics-References
Android Forensics References Last update: September 22th 2025 USERDATA Partition "/log" folder /log/wifi/iwc/iwcdump.txt Cellebrite CTF 2023 Recap: Answers on Sharon’s Android https://cellebrite.com/en/cellebrite-ctf-2023-recap-sharons-android/ /log/netstats /log/batterystats Cellebrite CTF 2021 ...
sudo_exploit
sudoexploit own implementation of the CVE-2017-1000367 sudo privilege escalation vulnerability in python...
CVE-2024-32019-POC
⚠️ CVE-2024-32019 - PoC 📌 Affected Versions = v1.45.0, = v1.44.0-60, v1.45.0-169 🛠️ Proof of Concept CVE-2024-32019 — ndsudo local privilege escalation via untrusted search path. 🔧 Compile the Exploit x8664-linux-gnu-gcc -o nvme exploit.c -static 📤 Deploy on Target Machine 1. Transfer the compiled...
proposal-symbol-proto
Prototype Pollution Mitigation / Symbol.proto Authors : Santiago Díaz Google Champion : Shu-yu Guo Google Stage : 1 TOC Problem Description Spooky action at a distance Data-only attacks Issues with freeze, seal and preventExtensions The override mistake Coarse granularity Freezing points...
CVE-2026-41089
CVE-2026-41089 ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════╝ ╚═══╝ ╚══════...
ios-mac-app
Proton VPN for iOS and macOS Copyright c 2025 Proton Technologies AG Dependencies This project uses Swift Package Manager for all of it's dependencies. Allow Xcode to resolve packages before running any target. Third-party dependencies ACKNOWLEDGEMENTS.md Setup Enable Git LFS on your machine Clon...
-CVE-2024-31211
To create a Metasploit module that exploits the RCE vulnerability in WordPress via the unserialization of instances of the WPHTMLToken class, we'll focus on crafting a payload that triggers the unserialization flaw, leading to arbitrary code execution. Metasploit Module Save the following code as...
CVE-2026-43503
This repository does not have a README...
CVE-2025-5419
CVE-2025-5419 An uninitialized read vulnerability by incorrect Turboshaft Store-Store Elimination in V8. This repository contains analysis and stablized exploit to escalate this vulnerability to achieve in-V8-sandbox Arbitrary Read / Write, AddressOf & FakeObject primitives. Analysis:...
Apple-Remote-Crash-Tool-CVE-2018-4407
Apple-Remote-Crash-Tool-CVE-2018-4407 Crashes any macOS High Sierra or iOS 11 device that is on the same WiFi network Just a small Tool that uses a public 'heap buffer overflow vulnerability' CVE-2018-4407 and makes it easier to exploit whole networks. Requirements MacOS Python installed Scapy...
CVE-2021-1931-BBRY-KEY2
This repository does not have a README...
ghost-route
👻 Ghost Route A Python script to check Next.js sites for corrupt middleware vulnerability CVE-2025-29927. The corrupt middleware vulnerability allows an attacker to bypass authentication and access protected routes by send a custom header x-middleware-subrequest. Next JS versions affected: 11.1.4...
SharpML
SharpML SharpML is a proof of concept file share data mining tool using Machine Learning in Python and C. The tool is discussed in more detail on our blog here, but is summarised below also: SharpML is C and Python based tool that performs a number of operations with a view to mining file shares,...
Comment2Shell
Comment2Shell Comment2Shell is an end-to-end proof-of-concept for CVE-2026-93485, a pre-authentication stored XSS in WordPress core wpautop that escalates to remote code execution inside an administrator session. An anonymous comment plants the payload; when an admin opens the post, the browser...
SetupHijack
SetupHijack Overview SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows installer and update processes. It targets scenarios where privileged installers or updaters drop files in %TEMP% or other world-writable locations, allowing an attacke...
CVE-2024-38475
This repository does not have a README...
copy-fail-cve-2026-31431
CVE Checker for Copy Fail CVE-2026-31431 Authors/Contributors : Patrick Doyle Author/Maintainer, Effie Renard Co-Author, Kimberly-Lee Banks Co-Author, Chris F. Support/Code Review AI Disclosure : Claude Code used for writing tests files, writing test data, and a code security review. All edits we...
Magneto-PolyShell
Magento 2 RCE Exploit - Unauthenticated File Upload to RCE ⚠️ This tool is for educational and authorized security testing only. Unauthorized use against systems you do not own is illegal. This exploit targets a critical unauthenticated remote code execution RCE vulnerability in Magento 2 Adobe...
CVE-2021-40865
CVE-2021-40865 CVE-2021-40865 POC/exploit-poc import org.apache.commons.io.IOUtils; import org.apache.storm.serialization.KryoValuesSerializer; import ysoserial.payloads.ObjectPayload; import ysoserial.payloads.URLDNS; import java.io.; import java.math.BigInteger; import java.net.; import...
awesome-reverse-engineering-and-malware-analysis
Awesome Reverse Engineering & Malware Analysis A map of reverse engineering and malware analysis that's actually been read. Every link was opened and checked before it went in, and it gets pulled the moment it rots - no dead pages, no one-word notes, no "great resource!" filler. unpacked covers a...
Striker
Striker Recon & Vulnerability Scanning Suite Important Notice Striker 2.0 is still in prototype phase, which means it's not intended to be used by regular users. It has been made public for contrbutions to make the development faster. Usage: python3 striker.py example.com Workflow Phase 1: Attack...
CVE-2021-21985_PoC
CVE-2021-21985 Vulnerable Code CLASS/METHODs available, a little sample for PoC purposes: com.vmware.vsan.client.services.capability.VsanCapabilityProvider ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported getIsEncryptionSupported...
fb_friend_list_scraper
Facebook Friend List Scraper OSINT tool to scrape names and usernames from large friend lists on Facebook, without being rate limited. hmu on Mastodon: @[email protected] Getting started: Install using pip: python -m pip install fb-friend-list-scraper Script is now installed as...
pySigma
pySigma pySigma is a python library that parses and converts Sigma rules into queries. It is a replacement for the legacy Sigma toolchain sigmac with a much cleaner design and is almost fully tested. Backends for support of conversion into query languages and processing pipelines for transforming...
ip-obfuscation
IP Obfuscator A security testing toolkit for generating obfuscated IP addresses and URLs. Useful for penetration testing, security research, phishing awareness training, and testing URL parsers/filters. Overview This toolkit provides two interfaces: ipobfuscator.html - Web-based GUI for...
CVE-2011-2523
CVE-2011-2523 This was a vulnerability found in the vsFTPd 2.3.4 service, which through port 6200 performs a redirect giving way to an interactive shell, thus interpreting commands. https://www.exploit-db.com/exploits/49757...
drupal-ckeditor-fileisimage
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · drupal-ckeditor-fileisimage drupal-ckeditor-fileisimage Class: Unrestricted upload / stored XSS Reach: Remote Drupal core 11.4.8 61044508 - Drupal SA-CORE-2026-009 added FileIsImage on JSON:API and REST image fields...
SMS4_Decrypt
SMS4Decrypt 0x01 Introduction The SMS4 algorithm is an encryption algorithm used in the WAPI wireless network standard widely adopted in China. It is a block cipher algorithm with a 32-round iterative unbalanced Feistel structure, with both key length and block length of 128. The SMS4 algorithm...
CVE-2022-20699
CVE-2022-20699 🎧 Brought to you by the Audiobahn Cisco Anyconnect VPN unauth RCE rwx stack it is not well checked...
ExtractedDefender
Just an attempt to group extracted data from Defender for research purposes. Orginal research from commial on LUA/VDM https://github.com/commial/experiments/tree/master/windows-defender WDextract https://github.com/hfiref0x/WDExtract...
Data-Shield_IPv4_Blocklist
Data-Shield IPv4 Blocklists Two complete lists. Clear choices. Controlled updates. Data-Shield provides maintained IPv4 blocklists for inbound filtering on firewalls, gateways and web application firewalls. Choose the policy that fits your environment, import its raw URL, and review its effect on...
trackerjacker
trackerjacker Like nmap for mapping wifi networks you're not connected to. Maps and tracks wifi networks and devices through raw 802.11 monitoring. PyPI page: https://pypi.python.org/pypi/trackerjacker Install pip3 install trackerjacker Supported platforms : Linux tested on Ubuntu, Kali, and RPi...
sherloq
An open source digital image forensic toolset Introduction "Forensic Image Analysis is the application of image science and domain expertise to interpret the content of an image and/or the image itself in legal matters. Major subdisciplines of Forensic Image Analysis with law enforcement...
CVE-2026-63077
Unauthenticated Remote Code Execution in JetBrains TeamCity CVE-2026-63077 Overview This is a proof-of-concept exploit script for CVE-2026-63077. Organizations can use this script to validate their detection and remediation posture. For a full technical analysis of CVE-2026-63077, please read our...