Tools for extracting sensitive data from compromised systems without detection.
kaandemir993/dropper-gcleaner-c2-infrastructure-kernel-driver-powershell-conhost-payload-analysisReverse engineering analysis of Dropper GCleaner, a malware that uses a resilient C2 infrastructure, kernel driver loading, PowerShell/Conhost…
paradigmxyz/iron-proxyAn egress firewall for untrusted workloads.
cenobyte-vincit/slot2UEFI GRUB2 bootkit that installs a pre-boot networked implant via NVRAM boot option, chainloads a UKI, executes a dracut payload, and kexecs the…
graysignal/cve-2024-23897-jenkins-arbitrary-read-file-vulnerabilityUnauthenticated Jenkins CLI exploit scanner for CVE-2024-23897 that detects vulnerable versions and reads arbitrary files from the controller through…
toanln-cov/cve-2026-74251Unauthenticated SQL Injection via Attribute Filter in Phoca Cart
vognik/cve-2026-26980Unauthenticated SQL injection exploit for Ghost CMS Content API (CVE-2026-26980); dumps database tables from SQLite/MySQL with active/passive checks…
defineid/skeletonkeyCVE-2026-6765 · Test only FormAutofill handlers exposed in Firefox
daemoncibsec/flar3adPOC of CVE-2026-51031 for arbitrary local file read
0xterror/cve-2023-22047-oracle-peoplesoft-lfiCVE-2023-22047 is a critical unauthenticated Local File Inclusion (LFI) vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit…
kaandemir993/redline-stealer-c2-defender-bypass-payload-analysis"Reverse engineering analysis of RedLine Stealer, a .NET-based info-stealer that uses C2 domains (198.46.86.63, tempuri.org), Windows Defender…
aramosf/cve-2026-54433Configurable Python PoC for CVE-2026-54433, a stored XSS in Roundcube's plain-text email renderer. Generates crafted .eml, sends via SMTP, and…
pugazhendii22/keepass-exfil-forensicsNetwork forensics writeup + tooling for a TryHackMe DFIR challenge: reverses a hex→Base64→XOR exfiltration chain from PCAP traffic, then recovers a…
abdugafforov-bobur/cve-2026-72550-pocCVE-2026-72550 — Friendica Unauthenticated Stacked-Query SQL Injection PoC (CVSS 9.8 Critical)
kaandemir993/agent-tesla-apc-injection-token-manipulation-registry-persistence-analysis"Reverse engineering analysis of Agent Tesla, a .NET-based info-stealer that uses APC injection, token manipulation, and registry persistence.…
heartlesseorg-dot/cve-2024-52806-poc
asset-group/ghostspliceGhostsplice repository: PoC for Cross-Channel Trust Fragmentation Attack
ryehr/hitms_steganographyEmbed multiple secret messages in LLM chat token choices using arithmetic/Discop steganographic coders, with bit-exact decoding and steganalysis…
