Lists (1)
Stars
A curated collection of security-focused agents designed to supercharge your prompt workflows. These agents act as intelligent companions, enriching outputs with advanced security knowledge, real-w…
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
Apache HugeGraph Server Unauthenticated RCE - CVE-2024-27348 Proof of concept Exploit
Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.
Animate Anyone: Consistent and Controllable Image-to-Video Synthesis for Character Animation
Juniper Firewalls CVE-2023-36845 - RCE
HuntersEye is designed for Bug Bounty Hunters, and Security Researchers to monitor new subdomains and certificates for specified domains. The primary goal is to streamline and expedite the process …
Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.
This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.
A simple tool for bypassing file upload restrictions.
CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit
CVE-2022-44268 ImageMagick Arbitrary File Read - Payload Generator
A cheat sheet that contains advanced queries for SQL Injection of all types.
Playground (and dump) of stuff I make or modify for the Flipper Zero
Impacket is a collection of Python classes for working with network protocols.
Apache commons text - CVE-2022-42889 Text4Shell proof of concept exploit.
Exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager
CVE-2022-41040 - Server Side Request Forgery (SSRF) in Microsoft Exchange Server
Bitbucket CVE-2022-36804 unauthenticated remote command execution
Gather and update all available and newest CVEs with their PoC.
A little toolbox to play with Microsoft Kerberos in C
A collection of awesome penetration testing resources, tools and other shiny things
Combine words from two wordlist files and concatenate them with an optional delimiter
Never ever ever use pixelation as a redaction technique
PoC for CVE-2022-24342: account takeover via CSRF in GitHub authentication
SSRF (Server Side Request Forgery) testing resources
CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation
A Zphisher GUI Back-Office Plugin