This repository offers insights and a proof-of-concept tool to exploit two significant deserialization vulnerabilities in Inductive Automation's Ignition software.
☆48Dec 22, 2023Updated 2 years ago
Alternatives and similar repositories for DoubleTrouble
Users that are interested in DoubleTrouble are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Root Cause Analysis for CVE-2025-43529, a UAF vulnerability due to incorrect DFG StoreBarrierInsertionPhase in JavaScriptCore.☆18Feb 1, 2026Updated 9 months ago
- PoC for using MS Windows printers for persistence / command and control via Internet Printing☆154May 3, 2024Updated 2 years ago
- Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)☆90Jun 13, 2024Updated 2 years ago
- ☆81Apr 9, 2024Updated 2 years ago
- A simple to use single-include Windows API resolver☆22Jul 9, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This is the code to accompany the article "How Slow Can You Go?" from PoC||GTFO #13☆13Dec 14, 2024Updated last year
- An interactive shell to spoof some LOLBins command line☆188Jan 27, 2024Updated 2 years ago
- ownCloud exploits for CVE-2023-49105☆41Dec 5, 2023Updated 2 years ago
- ☆12Oct 16, 2026Updated 2 weeks ago
- Brute Ratel LDAP filtering and sorting tool. Easily take BR log output and pull hostnames for ease of use with other red team tooling. Su…☆39Nov 16, 2023Updated 2 years ago
- Demo of the URLClassLoader JAR-swapping showing the ability to replace and exploit an already loaded JAR with inner classes☆32Dec 10, 2022Updated 3 years ago
- This repository contains scripts about ACL abuse and any other active directory attacking methods.☆36Aug 20, 2023Updated 3 years ago
- A React/Next.js-aware secret hunter for single-page applications.☆20Sep 5, 2026Updated last month
- ☆15Aug 6, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Generator of docker-compose file to allow secure configurations and multi-deployment strategy.☆12Nov 7, 2023Updated 2 years ago
- Abuse leaked token handles.☆135Dec 14, 2023Updated 2 years ago
- Brew Local Privilege Escalation exploit on Intel macOS☆18Mar 6, 2024Updated 2 years ago
- ☆14Jun 29, 2023Updated 3 years ago
- The PoCs source code for the "Java(Script) Drive-By, Hacking Without 0days" blog post.☆11Nov 1, 2024Updated 2 years ago
- Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …☆43Feb 20, 2025Updated last year
- An example of how a driver can register a handle creation callback.☆16Jun 12, 2023Updated 3 years ago
- ☆12May 20, 2021Updated 5 years ago
- Simple PoC for demonstrating Race Conditions on Websockets☆54Sep 14, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆160Jul 10, 2024Updated 2 years ago
- ☆34Dec 21, 2023Updated 2 years ago
- ☆17Jun 1, 2024Updated 2 years ago
- Spring-Kafka-Deserialization-Remote-Code-Execution☆31Oct 8, 2023Updated 3 years ago
- ☆17Mar 26, 2024Updated 2 years ago
- Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution☆88Feb 6, 2024Updated 2 years ago
- A tool for discovering gRPC services and methods without needing protobuf files.☆25Jun 12, 2025Updated last year
- ☆16Sep 29, 2024Updated 2 years ago
- YARA Standalone WSS is an offline webshell scanning tool that uses YARA rules to detect malicious or suspicious files in webroot director…☆13Aug 4, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- CVE-2023-20198-RCE, support adding/deleting users and executing cli commands/system commands.☆44Apr 25, 2024Updated 2 years ago
- ☆14Jun 2, 2024Updated 2 years ago
- A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery☆397Nov 26, 2024Updated last year
- Additional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)☆92Mar 25, 2024Updated 2 years ago
- ☆26May 12, 2026Updated 5 months ago
- 1day practice - Escape macOS sandbox (partial) using RemoteViewServices☆47May 12, 2025Updated last year
- ☆10May 17, 2024Updated 2 years ago