Pinned Loading

1. XSLT-Injection_reverse-shell XSLT-Injection_reverse-shell Public

   Demonstration of advanced exploitation using XSLT injection to achieve a reverse shell.

   XSLT 14 1

2. Sattrack Sattrack Public

   SATTRACK — Real‑time 3D satellite tracking platform. Visualizes thousands of active satellites on a 3D globe using live TLE data (Celestrak) and SGP4 propagation. Includes satellite details (freque…

   HTML 2

3. SMB_CVE-2025-24071 SMB_CVE-2025-24071 Public

   Exploited CVE-2025-24071 via SMB by hosting a .library-ms file inside a .tar archive. Using tar x from smbclient, the payload is extracted server-side without user interaction. Responder captures t…

   Python 3 1

4. Excal1bur_Writeups Excal1bur_Writeups Public

   In this repository are the writeups of different machines that I have completed on the different CTF platforms.

   1

5. usbrubberducky-payloads usbrubberducky-payloads Public

   Forked from hak5/usbrubberducky-payloads

   The Official USB Rubber Ducky Payload Repository

   PowerShell

6. CVE-2026-44596 CVE-2026-44596 Public

   YAMCS yamcs-core < 5.12.7 lacks rate limiting on POST /auth/token. An unauthenticated attacker can perform unlimited brute-force attempts against any account. Never returns HTTP 429. Fixed in 5.12.7.

   Shell