A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp /…

Sistem Perpustakaan adalah aplikasi berbasis Laravel yang dirancang untuk mempermudah pengelolaan perpustakaan. Sistem ini mencakup fitur manajemen buku, anggota, peminjaman, pengembalian, hingga p…

Aspx reverse shell

A Client-Server architecture CLI that allows transfer of files hosted on the server to any number of connected clients, making use of TCP protocol for reliable file transfer.

Repository of Bug-Bounty Writeups

Explanation and full RCE PoC for CVE-2025-55182

Absensi Online

A sophisticated, automated, AI‑driven cyber‑operations framework designed for state‑level offensive and defensive security research, this project integrates zero‑click exploit deployment, autonomou…

Alat berbasis PHP yang dirancang untuk membantu auditor keamanan dan administrator sistem. Fungsinya krusial dalam mengidentifikasi potensi backdoor, webshell, dan kode mencurigakan lainnya yang se…

ESP8266 firmware for performing deauthentication attacks, with ease.

Source code for my project on youtube named WifiX Project,its just a simple esp8266 pentesting tool including deauther and other

Fluxion is a remake of linset by vk496 with enhanced functionality.

Kumpulan Materi UNINDRA

TorGhost is an anonymization script. TorGhost redirects all internet traffic through SOCKS5 tor proxy. DNS requests are also redirected via tor, thus preventing DNSLeak. The scripts also disables u…

Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

Best hands-on lab for learning the fundamentals of cybersecurity and penetration testing workflows also packaged as Docker containers for fast, safe setup.

This repository provides a comprehensive cheat sheet for using Nmap, a powerful network scanning tool.

A reverse shell for Windows and Linux written in C.

📜 Yet another collection of wordlists

Flutter Reverse Engineering Framework

Linux privilege escalation exploits collection.

Javascript panorama viewer based on Three.js

99% Bypassed Litespeed Server / 403 Forbidden

cool_stuff

SekolahKu, Aplikasi Sekolah Berbasis Website ,Build with Laravel

Root shell PoC for CVE-2021-3156

A http flood python script that could stop a normal website in 10s

SQLI Dump In one shot with WAF Bypass

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Demo PDF_Flipbook