This repository contains a proof-of-concept exploit for CVE-2026-41089, a critical stack buffer overflow in the Windows Netlogon service via CLDAP (UDP 389). The poc.py script sends a malformed LDAP search request with an oversized username to trigger the vulnerability, causing LSASS to crash and the domain controller to reboot. The implementation includes correct BER/DER encoding primitives for LDAP packet construction, which can be reused in other projects requiring LDAP protocol handling.
This repository is a comprehensive collection of vulnerability proof-of-concept (PoC) exploits and detailed write-ups, primarily targeting Chinese enterprise software (OA, ERP, CMS, network devices, etc.). It contains over 1000 vulnerability entries organized by year and CVE identifier, each with structured risk assessments, HTTP request/response PoCs, FOFA search queries for asset discovery, and custom Snort/Suricata detection rules. The repository also includes executable Python scripts and YAML nuclei templates for automated exploitation and detection. While the majority of content is documentation, the scripts provide reusable scanning patterns with threading, proxy support, and output saving. The code quality is functional but basic, with many single-file scripts. The repository is actively maintained and serves as a practical reference for penetration testers and security researchers, though some CVE numbers appear speculative and PoCs may rely on future-dated vulnerabilities.
This repository is a curated collection of publicly available Android APK files designed for detecting root access, Magisk, Zygisk, and other modifications. It aggregates dozens of detection applications (e.g., DirtySepolicy, DetectZ, MagiskDetector, Momo, Ruru, etc.) in binary form, with a README that outlines each app's capabilities. The repo does not contain original source code; instead, it serves as an archive and distribution point for these PoC tools. Security researchers and developers can use these APKs to test their own root detection implementations or to study evasion techniques, but the binary-only nature means there is no modifiable code or reusable software components within this repository itself.