~/hackyfeed $

This repository addresses the critical CVE-2025-10585 type-confusion vulnerability in the Chrome V8 JavaScript engine, emphasizing the urgent need for patching due to confirmed active exploits in the wild. It provides an overview of the vulnerability’s mechanics, highlighting how it allows attackers to leverage arbitrary read and write primitives for executing code and bypassing security measures. Notably, it also discusses the exploit chain necessary for achieving full system compromise through crafted web content.

The CS2 Real-time Demo Radar Visualizer is a tool designed to visualize player activities and game dynamics in real-time for Counter-Strike 2 demos. Notable features include automatic game path detection, detailed player statistics, real-time updates every 50ms, customizable display settings, and a mini radar interface for secondary monitors. This tool is intended for educational and personal use, and it requires specific commands to function properly in a game environment.

The CORS vulnerability tool demonstrates the exploitation of a null origin CORS misconfiguration in a web application, enabling attackers to exfiltrate sensitive API keys. This GitHub repository provides a comprehensive walkthrough of a proof-of-concept (PoC) attack on a sample lab site, detailing the steps and methods used to identify and exploit the vulnerability, along with suggested mitigation techniques to enhance security. Notable features include a structured guide with practical examples and screenshots to aid in understanding the exploit and its implications.

This repository presents a proof-of-concept for exploiting a CORS (Cross-Origin Resource Sharing) vulnerability characterized by a misconfigured policy that allows arbitrary `Origin` headers and sets `Access-Control-Allow-Credentials: true`. The primary use case involves demonstrating how such vulnerabilities can be detected and exploited to exfiltrate sensitive data, such as an API key, from a victim's browser. Notable features include detailed steps for testing the vulnerability using tools like Burp Suite and a lab walkthrough that guides users through the detection and exploitation processes.

CloakQuest3r is a Python-based security research tool designed to assess potential origin IP exposure of websites utilizing Cloudflare and similar reverse proxy or CDN services. Its primary use case involves subdomain enumeration and passive analysis techniques to identify misconfigurations that could lead to the disclosure of sensitive server infrastructure. Notable features include its capability for real IP detection, making it essential for security professionals, penetration testers, and web administrators focusing on authorized security testing and infrastructure hardening.

Brash is a tool designed to exploit a critical vulnerability in the Blink rendering engine of Chromium-based browsers, allowing for a denial of service (DoS) attack through rapid updates of the `document.title` property. By circumventing rate limiting, it can generate millions of DOM mutations per second, causing browsers like Chrome and Edge to crash within seconds and significantly degrade system performance. The tool showcases an impactful attack vector that affects over 3 billion users, highlighting the need for vigilance against architectural flaws in web rendering engines.

BluetoothExploits is a directory containing various Bluetooth exploits intended for use with the BlueToolkit framework. Its primary use case is to provide security professionals and researchers with a set of tools to assess and exploit vulnerabilities in Bluetooth implementations. Notable features include a curated collection of exploits specifically designed to enhance Bluetooth security testing capabilities.

Bluekit is an extensible engine and command-line interface (CLI) tool designed to enhance the functionality of the BlueToolkit. Its primary use case is to provide an adaptable framework for developers aiming to integrate and extend tools within the BlueToolkit ecosystem. Notable features include its extensibility and robust CLI capabilities for efficient tool management.

BlackOut is an addon for the Meteor client that enhances gameplay by introducing advanced features such as an upgraded CrystalAura, BedAura, and PacketFly, among others. Its primary use case is to improve user performance and competitiveness in Meteor client-based environments. Notable features include enhanced functionality and ease of installation when integrated with Fabric and Meteor, along with community support via Discord.

Bl0ck is a specialized attack tool designed to exploit vulnerabilities in Wi-Fi 5 (802.11ac) and Wi-Fi 6 (802.11ax) networks by utilizing Block Ack (BA) frame attacks. Its primary use case is to disrupt the transmission of Quality of Service (QoS) Data traffic, effectively cutting off internet access for connected devices without disconnecting them from the access point. Notable features include its capability to execute three distinct attack scenarios that can halt data transmission from the AP to the target device and facilitate further attacks, such as Deauthentication and Evil Twin assaults.

The "Awesome UEFI Security" repository compiles an extensive array of resources related to UEFI and BIOS security, serving as a centralized reference for researchers and developers in the field. It features categorized materials including CTF challenges, documentation, tools, notable vulnerabilities, and training resources, making it an invaluable asset for anyone looking to enhance their understanding of UEFI security threats and defenses. Noteworthy sections include links to various bootkits and development projects, further enriching the repository's utility for comprehensive UEFI security exploration.

Antivirus Engines is a comprehensive exploration of antivirus engine technologies, focusing on their development to combat the evolving cyber threat landscape. It provides in-depth technical insights into various detection methodologies, including signature-based, heuristic, and behavioral approaches, complemented by algorithmic implementations of notable techniques such as the Aho-Corasick algorithm and Bloom filters. The resource serves as both a reference for advanced malware analysis and a practical guide for implementing cutting-edge antivirus technologies.

AmongUsMenu is a cheat menu designed for the game Among Us, intended for educational purposes to demonstrate how cheating software operates. It offers two versions, a normal DLL for injection and a proxy version that integrates directly with the game, featuring a set of hotkeys for various functionalities such as showing a menu, radar, or console. The project has been archived and is no longer actively maintained.

ADMmutate is a polymorphic shellcode mutation engine designed to evade Network Intrusion Detection Systems (NIDS) by generating unique but functionally equivalent code fragments that resist signature-based detection. Its notable features include XOR-based polymorphic encoding, sliding key mechanisms, and multiple code paths, enhancing its ability to obfuscate shellcode in various architectures such as IA32, SPARC, and MIPS. The tool specifically targets signature analysis weaknesses in NIDS, employing advanced techniques to adapt and randomize its output dynamically.

WAE (Windows Admin Exploit) is a tool designed to gain administrative rights on outdated Windows systems by utilizing a bootable USB drive to execute a batch script. The primary use case is for unauthorized access in environments like schools or workplaces, but it is only effective on very old Windows builds as modern security measures have rendered it obsolete. Notable features include a straightforward installation process and the ability to manipulate user accounts through command line inputs, though the repository is maintained purely for historical and educational reference.

tx2hax is a repository that provides exploit implementations for vulnerabilities in the Tegra X2 and Magic Leap One devices, primarily focusing on achieving code execution in the BootROM of the Tegra X2 through USB Recovery Mode. Notable features include specific exploits such as `rcmhax`, `sparsehax`, and `dtbhax`, along with detailed writeups that document the exploitation techniques and methodologies employed.

RE_Mal_Exploit_Tutorials serves as a comprehensive resource hub focused on reverse engineering, malware analysis, and exploit development. It aggregates various tutorials, guides, and tools, facilitating knowledge acquisition for security professionals and enthusiasts interested in understanding and mitigating software vulnerabilities. Noteworthy features include curated links to both beginner and advanced learning materials across multiple platforms, encompassing both theoretical and practical aspects of cybersecurity topics.

The "Proof-of-Concept (PoC) Research Papers" repository aggregates recent academic papers focused on exploit generation, empirical analysis, and applications of Proof-of-Concept methodologies in cybersecurity. Its primary use case is to serve as a comprehensive resource for researchers and practitioners to access and contribute to the latest findings and developments in PoC research. Notable features include a well-organized categorization of papers by year and topic, making it easier to navigate the content and identify relevant studies.

ForceAdmin is a malicious tool designed to create an infinite loop of User Account Control (UAC) prompts, compelling users to grant administrative privileges by overwhelming them with requests. It provides various script templates in formats such as batch, PowerShell, AutoHotkey, AutoIt, HTA, and VBScript, facilitating execution via PowerShell and bypassing antivirus protections. Notable features include no dependencies, dual architecture support for x86 and x64 systems, and a fileless execution method.

This repository serves as a comprehensive resource for ethical hacking and penetration testing, offering a collection of articles, scripts, tutorials, and multimedia content focused on various platforms including Linux, Windows, and cloud services. It aims to share the author's expertise and provide guidance on security practices while emphasizing the importance of legal compliance. Regular updates are planned to enhance the repository's educational value for the cybersecurity community.

DEDSEC_BKIF is a keystroke injection tool that exploits CVE-2023-45866, enabling attackers to manipulate Bluetooth-enabled devices across Android, Linux, and iOS platforms. Its primary use case is remote keystroke injection and unauthorized command execution through a zero-click Bluetooth vulnerability, allowing devices to be compromised without user interaction. Notable features include support for rubber ducky payloads and the capability to bypass authentication, making it a versatile threat in the realm of Bluetooth security.

CVE-2025-27237 is a local privilege escalation vulnerability affecting the Zabbix Agent for Windows, which arises from OpenSSL configuration file hijacking due to hardcoded paths accessible to low-privileged users. This tool provides scripts and proof-of-concept (PoC) implementations to analyze affected Zabbix binaries, compile malicious DLLs, and facilitate exploitation in vulnerable systems, while also offering methods for detection and remediation. Key features include binary analysis tools and detailed documentation for ensuring system security against this identified vulnerability.

CVE-2023-23752-EXPLOIT is a proof of concept tool designed to demonstrate an improper access check vulnerability in Joomla versions 4.0.0 to 4.2.7, allowing unauthorized access to sensitive web service endpoints. Its primary use case is for educational and ethical security research, emphasizing responsible usage and compliance with legal standards. The repository includes a PoC to illustrate the exploit, highlighting the potential severity of the vulnerability.

The botnet-exploits repository is a collection of network vulnerability scanners designed to identify security weaknesses across various devices for educational and authorized testing purposes. It includes tools specifically for testing DVRs, ZHONE routers, Fiber routers, and performing telnet brute force attacks, featuring capabilities like multi-threaded scanning, real-time status updates, and automated credential testing. Users are required to configure payload URLs for legitimate testing environments, reinforcing the ethical use of these tools.

0xKern3lCrush is an educational repository designed to understand Bring-Your-Own-Vulnerable-Driver (BYOVD) techniques and document key artifacts related to recent vulnerabilities like CVE-2026-0828. It provides safe user-mode reconnaissance code for process enumeration, alongside static analysis on identified vulnerable drivers, aimed at assisting security professionals in recognizing patterns in malicious behavior and improving detection capabilities. Notable features include an emphasis on ethical usage, detailed research notes, and a lack of any exploitative code to prevent misuse.