~/hackyfeed $

The CVE-2026-41940 Exploit PoC tool is designed to exploit a vulnerability for bypassing authentication in specific web applications. Its primary use case involves running an exploit script that captures session tokens, which can then be manipulated in Burp Suite to gain unauthorized access. Notable features include straightforward exploitation commands and session hijacking techniques for effective testing of web application security.

CVE-2026-41089 is a proof-of-concept (PoC) tool that exploits a stack-based buffer overflow vulnerability in Windows Domain Controllers' LSASS service via crafted UDP packets to port 389, potentially causing a denial of service (DoS) by crashing and rebooting the Domain Controller with no authentication required. It features a straightforward three-phase operation, confirming the target's liveness, executing the overflow, and checking if the DC is still operational, while being designed to work with Python 3.8 and later without external dependencies. Notably, it highlights the inherent risk of stack corruption leading to remote code execution (RCE) possibilities.

The CVE-2026-31431-Linux-Copy-Fail tool is a Rust-based local privilege escalation exploit that leverages an arbitrary page cache write vulnerability in Linux systems. It facilitates the execution of customizable shellcode, including a Meterpreter payload, and offers functions for testing vulnerability and executing exploits. Notable features include support for direct payload substitution and detailed usage instructions for compiling and executing the tool on affected Linux distributions.

CVE-2026-31431-CopyFail is a local privilege escalation exploit targeting a vulnerability in the Linux kernel's AF_ALG crypto subsystem, allowing an unprivileged user to perform a 4-byte arbitrary write in the kernel's page cache. The tool offers multiple exploitation methods, including dynamic ELF entry point overwrites and full binary replacements, with compatibility for both Python 2 and 3. Notable features include determinism without race conditions, operation within default Docker containers, and independence from kernel version, making it applicable across all kernels since 2017.

CVE-2026-27771 is a proof-of-concept tool that exploits an authentication bypass vulnerability in Gitea's OCI container registry, allowing unauthorized remote attackers to retrieve private container images from affected instances. Designed primarily for educational and authorized security research, it can scan for vulnerable Gitea setups and facilitate the pulling of container images without authentication. Notable features include scanning for instances, pulling all images or specific repositories, and the ability to operate with a personal access token when sign-in is required.

This tool is a proof-of-concept exploit for the double-free vulnerability (CVE-2026-23918) in Apache's `mod_http2`, capable of inducing a denial-of-service (DoS) by repeatedly crashing server workers through a race condition in stream cleanup. It allows users to demonstrate this vulnerability's impact via various modes, including aggressive DoS and passive vulnerability detection, by manipulating how Apache handles early stream resets. While remote code execution (RCE) is theoretically possible, it requires multiple specific conditions, making reliable exploitation complex and unlikely for most attackers.

The CVE-2026-0073 tool exploits a critical authentication bypass vulnerability in the Android ADB daemon (`adbd`), enabling an attacker on the same local network to gain unauthorized shell access to the target device. It leverages a type confusion issue in the TLS client certificate validation process, allowing for full control without user consent. Notable features include the capability to execute single commands, use different key types, and support for verbose output to trace the exploitation process.

CVE-2025-60787 is a proof-of-concept tool that exploits an authenticated remote code execution vulnerability in motionEye versions up to 0.43.1b4. It features two main commands: `revshell` for establishing a reverse shell connection and `command` for executing arbitrary commands on the target system, facilitating exploitation of the vulnerability. Users must provide the target's URL and authentication credentials to utilize the tool effectively.

The CVE-2025-25198-PoC tool serves as a proof-of-concept exploit targeting a host header poisoning vulnerability in Mailcow's password reset mechanism. It automatically sets up a local HTTPS listener, retrieves a CSRF token, and initiates a password reset request with a manipulated Host header to capture valid reset links from the target system's responses or callbacks. Notable features include automatic CSRF token handling, customizable attack parameters, and the ability to retry until a reset link is successfully captured.

CVE-2025-14558 is an exploit tool designed to demonstrate a command injection vulnerability in the `rtsold` service on FreeBSD systems, which allows remote code execution due to improper validation of DNSSL domain names. It requires Layer 2 adjacency to the target and enables attackers to execute arbitrary commands with root privileges by leveraging shell metacharacters. The tool is intended for defensive security research and authorized testing only.

CVE-2024-6387_Check is a specialized tool for detecting servers vulnerable to the newly identified `regreSSHion` vulnerability in OpenSSH (CVE-2024-6387). It supports rapid scanning of IP addresses, domain names, and CIDR ranges, incorporates features such as multi-threading for efficiency, SSH banner retrieval, and options for assessing LoginGraceTime settings, all while providing detailed and easily interpretable output. Notably, the tool also includes IPv6 support and recognizes patched OpenSSH versions to enhance the accuracy of vulnerability assessments.

CVE-2023-43208-EXPLOIT is a Proof-of-Concept (PoC) tool designed to exploit a remote code execution vulnerability in Mirth Connect versions prior to 4.4.1. The tool utilizes specially crafted HTTP requests to execute arbitrary OS commands on vulnerable systems, offering features such as single and batch target exploitation, customizable listening options for reverse connections, and multi-threaded scanning capabilities.

The CVE-2022-0847 tool exploits a vulnerability known as "Dirty Pipe" to achieve container escape, allowing an attacker to overwrite read-only files on the host system from within a container. Its primary use case is for demonstrating the potential risks associated with granting the `CAP_DAC_READ_SEARCH` capability to containers. Notable features include the ability to bypass file permission checks and use the `splice()` system call to overwrite files directly on the host filesystem.

This tool serves as a proof of concept (PoC) exploit for the Apache HTTP Server vulnerabilities CVE-2021-41773 and CVE-2021-42013, which allow for path traversal and remote code execution (RCE) in versions 2.4.49 and 2.4.50. Its primary use case is to demonstrate these exploits against specified targets, facilitating security assessments and vulnerability testing. Notable features include the ability to read sensitive files and execute arbitrary commands on the server via customizable input parameters.

CVE-2020-10558 is a tool that documents a critical Denial of Service vulnerability in Tesla Model S, 3, and X vehicles prior to software version 2020.4.10, which allows remote attackers to crash the vehicle's Infotainment system by exploiting improper web instruction handling. The tool provides insights into the attack vector, impact on vehicle functionality, and remediation details following responsible disclosure protocols. Notably, the findings led to a fleet-wide OTA update from Tesla to mitigate the vulnerability, highlighting its significance in automotive cybersecurity.

The "Cracking OSCP" repository offers a comprehensive roadmap for aspiring ethical hackers pursuing the OSCP certification. It features a structured playlist of video tutorials and supplementary notes across various topics, including computer networks fundamentals and practical examples, aimed at providing a solid foundation for ethical hacking methodologies. Notable aspects include detailed guidance on note-taking, network concepts, and the OSI model, making it a valuable resource for both beginners and those preparing for the OSCP exam.

CopyFail is a Python library designed to perform the splice system call between file descriptors for Python versions earlier than 3.10, utilizing ctypes for syscall implementation. Its primary use case is to facilitate efficient data copying between file descriptors in environments where the splice() function is not natively available. Notable features include compatibility with both legacy and current Python versions, enhancing its versatility in various applications.

CopyFail is a Python-based exploit tool targeting the CVE-2026-31431 vulnerability, which allows local privilege escalation on vulnerable Linux kernels (4.11 to <6.18). It utilizes the AF_ALG socket interface bug to enable unprivileged users to overwrite setuid binaries, bypassing race conditions and kernel-specific offsets, making it applicable across various distributions. Key features include the ability to check system vulnerability status, a simple execution process, and container escape capabilities, all while being an educational tool intended for authorized testing only.

Copy Fail is a proof-of-concept tool designed to demonstrate a method for fully unprivileged containers to achieve node-level code execution on Kubernetes by exploiting the CVE-2026-31431 Linux kernel vulnerability. It leverages the shared image layers in container runtimes, allowing an unprivileged pod to corrupt binaries in a shared layer that are later executed by privileged DaemonSets, thereby achieving container escape. Notable features include validation on multiple cloud platforms (Alibaba Cloud, Amazon EKS, and Google GKE) and a comprehensive breakdown of the attack chain, which includes page-cache corruption, cross-container propagation, and privileged execution.

Copy Fail is a cybersecurity tool designed to exploit CVE-2026-31431, a vulnerability affecting specific Linux distributions. Its primary use case is for security researchers and penetration testers to demonstrate and assess the impact of this flaw across various operating systems, including Ubuntu, Amazon Linux, RHEL, and SUSE. Notable features include compatibility with multiple Linux kernel versions and a comprehensive technical writeup for understanding the vulnerability's implications.

The "Vault de Conocimiento" is a personal repository designed for self-directed learning and documentation across various fields, including Cybersecurity, Computer Science, and Programming. It primarily serves as an organized collection of notes for ethical hacking, pentesting, cryptography, and more, structured for optimal use with the Obsidian note-taking app, which facilitates idea connections and navigation. Notable features include internal linking, graphical visualization, and a comprehensive index that covers foundational to advanced topics in multiple domains.

clpzcode is an automated penetration testing tool that orchestrates a full pipeline of security assessments, including subdomain enumeration, vulnerability detection, exploitation, and privilege escalation. Notably, it employs an AI agent that intelligently adapts its actions based on tool responses, supports multi-agent parallelism for concurrent tasks, and features 29 built-in escalation chains for efficient threat exploitation. The tool’s command-driven interface allows users to initiate complex assessments with minimal input, streamlining the penetration testing process.

ClickFix Builder is a dual-mode social engineering toolkit designed for red teamers, pentesters, and security researchers, enabling the generation of realistic fake captcha techniques for executing malware commands on Windows targets. Its notable features include the generation of portable files such as HTML and JS stubs, as well as a VPS deployment mode that provides real-time logging, IP blocking, and bot detection. The tool also offers a dark-mode GUI for enhanced usability and customizable payloads, making it versatile for various security testing scenarios.

CentralizedPotatoes is a repository that aggregates various privilege escalation exploits in the Windows operating system, known as "potato" exploits, which leverage impersonation privileges to elevate access from service accounts to system level. The tool categorizes and documents these exploits, ranging from Hot Potato to God Potato, thereby providing a comprehensive reference for cybersecurity professionals and penetration testers. Notable features include a chronological list of exploits with links to their respective implementations and guidance on prioritizing their use based on effectiveness.

C-hacks is a social media gathering tool designed for educational purposes, featuring WhatsApp, Facebook, and Instagram hacking capabilities, along with information gathering functionalities. Notable features include IP location tracking and phishing scripts, as well as modified WhatsApp for enhanced functionality. Installation is straightforward, requiring basic Linux commands to set up and execute the tool.