CVE-2020-0618

CVE-2020-0618 RCE in SQL Server Reporting Services CVE-2020-0618 Verifica della vulnerabilità POC È possibile inviare la seguente richiesta HTTP al server per sfruttare l'applicazione: POST /ReportServer/pages/ReportViewer.aspx HTTP/1.1 Host: target Content-Type: application/x-www-form-urlencoded...

cargo-fuzz

cargo fuzz Acargo subcommand for fuzzing with libFuzzer! Easy to use! Installation $ cargo install cargo-fuzz Note: libFuzzer needs LLVM sanitizer support, so this only works on x86-64 and Aarch64, and only on Unix-like operating systems not Windows. This also needs a nightly compiler since it us...

pycdc

Decompyle++ A Python Byte-code Disassembler/Decompiler Decompyle++ aims to translate compiled Python byte-code back into valid and human-readable Python source code. While other projects have achieved this with varied success, Decompyle++ is unique in that it seeks to support byte-code from any...

reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

reaver-wps-fork-t6x

Panoramica Reaver implementa un attacco di forza bruta contro i PIN del registrar Wifi Protected Setup WPS per recuperare le passphrase WPA/WPA2 , come descritto in Forzatura bruta del Wi-Fi Protected Setup quando una progettazione scadente incontra un'implementazione scadente. di Stefan Viehböck...

mcp-pwn

CVE-2026-23744 — Esecuzione Remota di Codice non Autenticata in MCPJam Riepilogo MCPJam è un ispettore e proxy MCP Model Context Protocol open-source utilizzato per connettere, gestire il debug e amministrare server MCP. Le versioni = 1.4.3 Vettore d'attacco| Rete — Nessuna autenticazione richies...

NyxInvoke

NyxInvoke NyxInvoke è uno strumento versatile basato su Rust progettato per eseguire assembly .NET, comandi/script PowerShell, Beacon Object Files BOF e file PE, con funzionalità integrate di Ntdll Unhooking, bypass patchless di AMSI ed ETW. Può essere compilato sia come eseguibile standalone che...

ShadowClone

ShadowClone ShadowClone ti permette di distribuire dinamicamente i tuoi task a lunga esecuzione su migliaia di funzioni serverless e ti fornisce i risultati in secondi, dove altrimenti ci sarebbero volute ore per completarli. Puoi sfruttare appieno i livelli gratuiti offerti dai provider cloud e...

proxychains-ng

ProxyChains-NG ver 4.17 README ProxyChains is a UNIX program, that hooks network-related libc functions in DYNAMICALLY LINKED programs via a preloaded DLL dlsym, LDPRELOAD and redirects the connections through SOCKS4a/5 or HTTP proxies. It supports TCP only no UDP/ICMP etc. The way it works is...

whosthere

Whosthere Local Area Network discovery tool with an interactive Terminal User Interface TUI written in Go. Discover, explore, and understand your LAN in an intuitive way. Whosthere performs unprivileged, concurrent scans using mDNS and SSDP scanners. Additionally, it sweeps the local subnet by...

ofrak

OFRAK OFRAK Open Firmware Reverse Analysis Konsole is a binary analysis and modification platform. OFRAK combines the ability to: Identify and Unpack many binary formats Analyze unpacked binaries with field-tested reverse engineering tools Modify and Repack binaries with powerful patching...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

tfc

Tinfoil Chat Tinfoil Chat TFC is a FOSS+FHD peer-to-peer messaging system that relies on high assurance hardware architecture to protect users from passive collection, MITM attacks and most importantly, remote key exfiltration. TFC is designed for people with one of the most complex threat models...

tfc

Tinfoil Chat Tinfoil Chat TFC is a FOSS+FHD peer-to-peer messaging system that relies on high assurance hardware architecture to protect users from passive collection, MITM attacks and most importantly, remote key exfiltration. TFC is designed for people with one of the most complex threat models...

PowerShell-Red-Team

PowerShell-Red-Team-Enum Raccolta di funzioni PowerShell che un membro del Red Team può utilizzare per raccogliere dati da una macchina o ottenere accesso a un target. Ho aggiunto file ps1 per i comandi inclusi nel modulo RedTeamEnum. Questo ti permetterà di trovare e utilizzare facilmente un...

openvpn-install

openvpn-install Installatore OpenVPN per Debian, Ubuntu, Fedora, openSUSE, CentOS, Amazon Linux, Arch Linux, Oracle Linux, Rocky Linux e AlmaLinux. Questo script ti permetterà di configurare e gestire il tuo server VPN sicuro in pochi secondi. Cos'è? Questo script è pensato per essere eseguito su...

Noriben

Noriben Sandbox di Analisi Malware Informazioni di contatto: @bbaskin su Twitter brian at thebaskins dot com Noriben è uno script basato su Python che, in combinazione con Procmon di Sysinternals, raccoglie, analizza e genera automaticamente report sugli indicatori runtime dei malware. In sostanz...

safety

!NOTE Come and join us at SafetyCLI. We are hiring for various roles. Table of Contents Table of Contents Introduction Key Features Getting Started GitHub Action Command Line Interface 1. Installation 2. Log In or Register 3. Running Your First Scan Basic Commands Service-Level Agreement SLA...

Ciphey

Ciphey Paste in text that's been encoded or encrypted. Ciphey works out how and hands you the plaintext. No key, no cipher name, no hints. Base64, hex, Caesar/ROT13, Vigenère, Morse code and 19 more, several layers deep. Install · Quick start · Features · Library · MCP · Docs · Discord ▶ Watch th...

keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...