Initial Access Intelligence

Replicable Blueprint for advanced DDoS Purple Teaming, engineered for the threat landscape. It integrates a Red Elite Teaming offensive suite—featuring multi-vector rotations, HTTP/2 Rapid Reset (CVE-2023-44487) exploitation, and mTLS 1.3-encrypted C2 orchestration—with a high-integrity 7-Tier Blue Elite Teaming defense-in-depth architecture.

exploit poc for CVE-2018-11235

Shell

The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the 'wfu_ABSPATH' cookie parameter. This makes it possible for unauthenticated attackers to execute code on the server.

Python

Reconnaissance, exploitation, post-exploitation, CVSS scoring, and cleanup are all covered in this expert compilation of penetration testing reports from CTF laboratories and controlled environments. demonstrates useful pentesting techniques, equipment, and lucid technical documentation.

None

Python

None

Python Shell

Overview of a application that I reversed using the CVE-2015-2291 exploit from the Intel Ethernet Diagnostics Driver (iQVW32.sys) for memory manipulation used in hwid spoofing.

None

Dockerfile Makefile Shell Gnuplot Go

A Python utility that fetches vulnerability data from Microsoft Defender for Endpoint (MDE) Threat & Vulnerability Management (TVM) APIs and streams it to Splunk HEC for security monitoring, dashboards, and metrics.

Shell Python

A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function check_userinfo of the file Diyajax.php of the component Member Avatar Handler. Executing a manipulation of the argument viewfile can lead to unrestricted upload. The attack may be performed from remote.