-
gh-hijack-runner Public
Forked from synacktiv/gh-hijack-runnerA python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.
Python UpdatedJul 23, 2024 -
git_rce Public
Forked from amalmurali47/git_rceExploit PoC for CVE-2024-32002
Shell UpdatedMay 19, 2024 -
CVE-2023-7028 Public
Forked from Vozec/CVE-2023-7028This repository presents a proof-of-concept of CVE-2023-7028
Python UpdatedJan 13, 2024 -
CVE-2023-36664-Ghostscript-command-injection Public
Forked from jakabakos/CVE-2023-36664-Ghostscript-command-injectionGhostscript command injection vulnerability PoC (CVE-2023-36664)
Python UpdatedAug 14, 2023 -
gitops-connector Public
Forked from pnig0sh11/gitops-connectorPython MIT License UpdatedJul 23, 2023 -
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
Go MIT License UpdatedJul 17, 2023 -
deployment-environments Public template
Forked from Azure/deployment-environmentsSample infrastructure-as-code templates to get started with Azure Deployment Environments service.
Bicep MIT License UpdatedJun 20, 2023 -
CVE-2023-29007 Public
Forked from ethiack/CVE-2023-29007PoC repository for CVE-2023-29007
Shell UpdatedApr 26, 2023 -
PoCs1337 Public
Forked from AlmondOffSec/PoCsProof-of-concept code for various bugs
PostScript Apache License 2.0 UpdatedApr 11, 2023 -
lib2shell Public
Forked from SeanPesce/lib2shellShared library implementations that transform the containing process into a shell when loaded (useful for privilege escalation, argument injection, file overwrites, LD_PRELOAD, etc.).
-
-
Whaler Public
Forked from P3GLEG/WhalerProgram to reverse Docker images into Dockerfiles
-
cloud-middleware-dataset Public
Forked from wiz-sec-public/cloud-middleware-datasetUpdatedJun 10, 2022 -
pspy Public
Forked from DominicBreuker/pspyMonitor linux processes without root permissions
Go GNU General Public License v3.0 UpdatedMay 30, 2022 -
truffleproc Public
Forked from controlplaneio/truffleproctruffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)
Shell Apache License 2.0 UpdatedMay 29, 2022 -
sneak Public
Forked from ex0dus-0x/sneakA container/VM malware that finds and exploits SSRF opportunities in a compromised cloud environment
Go UpdatedApr 10, 2022 -
advisories Public
Forked from justinsteven/advisoriesCreative Commons Zero v1.0 Universal UpdatedMar 16, 2022 -
-
burp-log4shell Public
Forked from silentsignal/burp-log4shellLog4Shell scanner for Burp Suite
-
python-log4rce Public
Forked from alexandre-lavoie/python-log4rceAn All-In-One Pure Python PoC for CVE-2021-44228
Python MIT License UpdatedDec 13, 2021 -
log4shell-vulnerable-app Public
Forked from christophetd/log4shell-vulnerable-appSpring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.
Java UpdatedDec 11, 2021 -
-
whoc Public
Forked from twistlock/whocA container image that extracts the underlying container runtime
C MIT License UpdatedSep 27, 2021 -
RCE-0-day-for-GhostScript-9.50 Public
Forked from duc-nt/RCE-0-day-for-GhostScript-9.50RCE 0-day for GhostScript 9.50 - Payload generator
Python UpdatedSep 5, 2021 -
malicious-pdf Public
Forked from pussycat0x/malicious-pdfGenerate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator
Python BSD 2-Clause "Simplified" License UpdatedAug 30, 2021 -
aws-amplify-gatsby-auth Public
Forked from aws-samples/aws-amplify-gatsby-authJavaScript MIT License UpdatedJul 22, 2021 -
DNSCewl Public
Forked from codingo/DNSCewlA DNS Bruteforcing Wordlist Generator
C++ GNU General Public License v3.0 UpdatedJun 25, 2021 -
azure-rest-api-specs Public
Forked from xiaomin-ms/azure-rest-api-specsThe source for REST API specifications for Microsoft Azure.
TypeScript MIT License UpdatedJun 15, 2021 -
image-upload-exploits Public
Forked from barrracud4/image-upload-exploitsThis repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests and bug bounty.
PostScript UpdatedJun 13, 2021 -
exploits Public
Forked from r4j0x00/exploitsJavaScript BSD 2-Clause "Simplified" License UpdatedApr 13, 2021
{{ message }}