bunk3r Goto Github PK

11x256.github.io

A blog about RE

alerts

braviapy

Sony Bravia Television (2013+) remote control stuff (JSON, uPnp, DIAL, DLNA, etc), may be useful for piloting other devices too (WARNING - Still work in progress!)

cve-2018-6376

Joomla!, Second Order SQL Injection

cve-2022-40684

A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager

cve-2022-40685

PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)

fb-login

Fake mobile Facebook Login for EvilPortal module on WIFI Pineapple NANO - TETRA (captive portal)

getoraclehash

Retrieve "opened" username:hash from Oracle database.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hands-on-artificial-intelligence-for-cybersecurity

Hands-On Artificial Intelligence for Cybersecurity, publised by Packt

honeystats

A simple and effective environment created to collect data from a honeypot (kippo, glastopf, etc.) and publish them online (php)

http-smuggling-lab

Use HTTP Smuggling Lab to learn HTTP Smuggling.

javadeserh2hc

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

linkeleak

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

mobile_pentesting_guide

Mobile Pentesting Guide (WIP)

msdt_pwn

myxxelab

ora-exec-cmd

Run remote system commands from Oracle connection - oracle exec command perl

ora-exploits-classic

Oracle Classic injection exploit repository - Perl & SQL version

ora-exploits-evilcursor

Oracle Evil cursor injection exploit repository - Perl & SQL version

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-tools

Custom pentesting tools

perlbackdoor

advanced Perl Backdoor

pitkgui

A tkinter GUI for raspberry pi + adafruit 2.8 display (pitft)

ptcheck

Automagically Penetration Test Utility for pentest activities

pxy

PXY Proxy Checker

second-order-sqli

This is a POC for Second Order SQL Injection

sshtiming

ssh remote timing tool

xss-labs

xss 跨站漏洞平台