
ditto
Obfuscates PowerShell and JavaScript scripts using tree-sitter-based parsing with multiple configurable impostor profiles for stealth, size, and…

Obfuscates PowerShell and JavaScript scripts using tree-sitter-based parsing with multiple configurable impostor profiles for stealth, size, and…

WooCommerce plugin: photo & video product reviews, closing CVE-2026-12684's unauthenticated-upload vulnerability class by construction

Detailed advisory for CVE-2025-56219, a rate-limiting flaw in Ascertia SigningHub's Add User API, enabling automated user creation and denial of…

More examples using the Impacket library designed for learning purposes.

kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices.

how to look for Leaked Credentials !

Extract AutoIt scripts embedded in PE binaries

DJ-Classifieds Joomla Component Unauthenticated File Upload RCE. 3-string filter bypass via PHP short tags. CVSS 10.0 | CWE-434 | com_djclassifieds <…

Working implementation: cryptographically verified short-lived identities for AI decision authentication — CVE-2025-59536 (Patent Pending US…

A writeup and theoretical Proof-of-Concept for CVE-2019-19194

Exploit for CVE-2020-3952 in vCenter 6.7 https://www.guardicore.com/2020/04/pwning-vmware-vcenter-cve-2020-3952/

A short scraper looking for a POC of CVE-2024-49112

CVE-2025-53690 POC

short view of ruby on rails properties misconfiguration



Proof-of-concept exploit for CVE-2023-24329, a Python urllib parsing flaw enabling URL confusion attacks. Includes a runnable script and references…

Struts 2 DefaultActionMapper Interactive Shell Exploit for CVE-2013-225 [S2-016]