Windfall - Unauthenticated RCE exploit chain for Windmill & Nextcloud Flow (CVE-2026-29059). Path traversal + credential leak + PostgreSQL heap dump + Nextcloud AppAPI takeover.
☆17Apr 7, 2026Updated 3 months ago
Alternatives and similar repositories for Windfall
Users that are interested in Windfall are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Ivanti Pulse Secure CVE-2023-46805 Scanner - Based on Assetnote's Research☆14Jan 19, 2024Updated 2 years ago
- reverse engineered google music protocol☆23Feb 8, 2012Updated 14 years ago
- Simple and efficient file shredding☆13Sep 23, 2019Updated 6 years ago
- ☆60Dec 10, 2025Updated 7 months ago
- The PoC for CVE-2025-70795 / CVE-2026-0828 and updated driver☆49Mar 13, 2026Updated 4 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Sabonis, a Digital Forensics and Incident Response pivoting tool☆20Mar 3, 2022Updated 4 years ago
- Researching vulnerabilities with iOS Shortcuts.☆17Apr 15, 2025Updated last year
- My studies on Malware Development☆20Jul 6, 2026Updated last week
- Async Web Server for ESP8266 and ESP32☆15Jul 14, 2023Updated 3 years ago
- Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Drive…☆45Feb 4, 2026Updated 5 months ago
- Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover☆90Oct 20, 2025Updated 8 months ago
- HID payloads for good purpose☆11Dec 17, 2024Updated last year
- Research projects conducted by the Offensive Appliances team.☆29Updated this week
- This repository contains a guide to completing the Bandit levels in the OverTheWire wargames.☆22May 7, 2019Updated 7 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- CVE-2026-45250 - FreeBSD 14.x LPE☆22May 21, 2026Updated last month
- Smuggling C2 comms through links previews☆18Jun 17, 2026Updated 3 weeks ago
- A python script to check printer across the world that allow printing on port 9100 trough pjl☆19Dec 27, 2024Updated last year
- Fortinet FortiClientEMS improper access control☆35Apr 20, 2026Updated 2 months ago
- Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from si…☆92Feb 6, 2026Updated 5 months ago
- A simple OAuth App designed to capture OAuth tokens when users authenticate through GitHub OAuth flow.☆25Apr 20, 2026Updated 2 months ago
- Advanced Hunting Queries☆20Mar 18, 2026Updated 3 months ago
- Active Directory forensic framework☆16May 18, 2026Updated last month
- A curated list of Ransomware resources☆41May 11, 2026Updated 2 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- A professional Red Team / Pentest tool for assessing the external perimeter of a company in a complete "black box" mode (zero knowledge, …☆29Feb 15, 2026Updated 4 months ago
- Rust-based Windows kernel driver research project with a companion user-mode client for IOCTL-based experiments with process, token, PPL,…☆18Apr 30, 2026Updated 2 months ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jun 15, 2026Updated 3 weeks ago
- ☆49Nov 26, 2025Updated 7 months ago
- Minimalistic HTTP(S) client for the NT kernel☆60Dec 1, 2025Updated 7 months ago
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆78Jul 1, 2026Updated last week
- Cortex C2 is a Open source Linux C2 inspired by the void link C2 framework☆43May 29, 2026Updated last month
- POCs to demonstrate CVE-2026-42167 in ProFTPD☆23Apr 29, 2026Updated 2 months ago
- ESP32-S2 based IoT device that is CircuitPython ready!☆30Aug 13, 2025Updated 11 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Cybersecurity Resources☆37May 15, 2026Updated last month
- Notion C2 Profile for Mythic☆47Apr 30, 2026Updated 2 months ago
- ☆25Sep 6, 2025Updated 10 months ago
- A newly discovered vulnerable driver, pstrip64.sys (CVE-2026-29923) allows an unprivileged user to escalate privileges to SYSTEM via a cr…☆25Apr 11, 2026Updated 3 months ago
- ASUS wifi router RCE vulnerability☆18Oct 13, 2025Updated 9 months ago
- Positron: an Electron (v8 nodejs) DLL injection based JS injection engine☆47May 15, 2026Updated last month
- ☆21May 7, 2026Updated 2 months ago