sliver-gui
mr-in4inci3le/sliver-guiA desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfacing with its…
command-and-controlexploitationlateral-movement+6
219
mr-in4inci3le/sliver-guiA desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfacing with its…
abraxas/cve-2025-38502-linux-lpeResearch repository for CVE-2025-38502, a Linux kernel BPF cgroup local storage out-of-bounds access via tail calls enabling local privilege…
harshrajsinghania/cve-2026-90782-s2opc-status-clobberStandalone PoC for CVE-2026-90782: status-clobbering NULL dereference in S2OPC alloc_notification_message_items() (DataChange fails, Event succeeds)
bombobombone/cve-2026-73314Proof-of-concept exploit for CVE-2026-73314, a PayPal REST webhook signature verification bypass in XenForo before 2.3.13, allowing unauthorized…
ac8999/cve-2025-5880PoC for a Path Traversal vulnerability in Whistle v2.9.98 via the /cgi-bin/sessions/get-temp-file endpoint. (Unpatched)
george0papasotiriou/cve-2026-23002-5g-nas-message-buffer-overflow-in-gnodebSimulated 5G gNodeB NAS parser with stack buffer overflow PoC for CVE-2026-23002; a crafted NAS message triggers remote code execution.
george0papasotiriou/cve-2026-22019-libcurl-http-2-connect-tunnel-mixupSimulates CVE-2026-22019, a libcurl HTTP/2 CONNECT tunnel stream-isolation failure, demonstrating cross-stream data injection and response smuggling…
george0papasotiriou/cve-2026-22012-diameter-protocol-credit-control-bypass-in-5gPython simulation of CVE-2026-22012, showing how a missing Final-Unit-Indication in Diameter Credit-Control allows unlimited quota and service bypass…
hackspeak/cve-2026-66066CVE-2026-66066 (KindaRails2Shell) PoC - Rails Active Storage/libvips arbitrary file read to RCE; for authorized security testing
shinthink/cve-2026-66066CVE-2026-66066 — KindaRails2Shell: Rails Active Storage/libvips Arbitrary File Read → RCE. MATLAB/HDF5 dual-identity file → SECRET_KEY_BASE theft →…
george0papasotiriou/cve-2026-11114-node.js-vm-sandbox-escape-via-proxyPoC exploit for CVE-2026-11114 demonstrating Node.js vm sandbox escape via Proxy to achieve remote code execution against a vulnerable HTTP /eval…
george0papasotiriou/cve-2026-0101-ble-address-spoofing-via-weak-resolvable-private-addressPython PoC for CVE-2026-0101 demonstrating BLE address spoofing via replay of a captured Resolvable Private Address to impersonate a trusted…
george0papasotiriou/cve-2026-6060-quic-handshake-amplification-via-address-validation-bypassEducational Python PoC for a QUIC address-validation bypass that triggers handshake amplification, including vulnerable server simulation and attack…
0xsha/kindarails2shellSingle-file PoC for Rails CVE-2026-66066: arbitrary file read, secret recovery, threaded scanning, and conditional RCE via signed image variations.
zer0sumgam3/cve-2026-66066-pocPoC for CVE-2026-66066 in Ruby on Rails
theopaid/cve-2026-67184-unauthenticated-null-pointer-dereference-crashes-the-server-tinyweb-Security Advisory: Unauthenticated NULL Pointer Dereference Crashes the Server (TinyWeb)
oscerd/cve-2026-53913PoC reproducer for CVE-2026-53913 (Apache Camel camel-keycloak): KeycloakSecurityPolicy fails open in the Basic Setup — with no required…
wildwestcybersecurity/cve-2019-5420-poccve-2019-5420 POC simple ruby script