Authenticated 0-click RCE against Linux 6.1.45 for CVE-2023-52440 and CVE-2023-4130

Fully decrypt App-Bound Encrypted (ABE) cookies, passwords & payment methods from Chromium-based browsers (Chrome, Brave, Edge) - all in user mode, no admin rights required.

A list of semi to fully remote-friendly companies (jobs) in tech.

AdaptixFramework Extension Kit

ADB manager for Android devices

Search for all leaked keys/secrets using one regex! bugbounty

Pack/Encrypt/Obfuscate ELF + SHELL scripts

CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File

Some templates for Zabbix

USB Army Knife – the ultimate close access tool for penetration testers and red teamers.

Tamper Active Directory user attributes to collect their hashes with MS-SNTP

Proof of concept & details for CVE-2025-21298

Windows rootkit designed to work with BYOVD exploits

MathWorks container images on Docker Hub

A Rust implementation of GodPotato — abusing SeImpersonate to gain SYSTEM privileges. Includes a TCP-based reverse shell and indirect NTAPI for various operations.

COM ViewLogger — new malware keylogging technique

sandbox approach for malware developers and red teamers to test payloads against detection mechanisms before deployment

LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49112

Open Breach and Attack Simulation Platform

tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp

CyberPanel authenticated RCE < 2.3.8

TP-Link Archer AXE75 Authenticated Command Injection

Stage 0

A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and indirect NTAPIs for core operations.

This repository will act as a journal will document my journey of exploring the workings of Linux malware, including code samples and detailed explanations. A brief description of the concepts will…

PoC for the Untrusted Pointer Dereference in the ks.sys driver