0) — built to > run on any agent harness, not just Claude Code. This fork's focus: > harness portability, sandboxed (containerized) exploit validation, > and measured-impact PoCs. See > Why the changes · > What this fork changes · > The numbers.
⚠ This tool is created solely for educational or bug bounty purpose only. Unauthorized use outside of controlled environments is strictly prohibited.
Dirty Frag is a case that extends the bug class to which Dirty Pipe and Copy Fail belong.
一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)
Pre-auth RCE on Microsoft Exchange Server. No credentials needed.
This project was a proof-of-concept launcher and interceptor system built from consumer electronics and 3D-printed components.
Use this project only against systems you own or are explicitly authorized to assess. Do not run it against public, third-party, or production systems without written permission. Handle any retrieved booking data as sensitive personal information.
This is a proof-of-concept for developers and not anything meaningfully usable at the moment.