DSSS

Damn Small SQLi Scanner Damn Small SQLi Scanner DSSS is a fully functional SQL injection vulnerability scanner supporting GET and POST parameters written in under 100 lines of code. As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie...

100_days_of_kql_2026

100 Days of KQL 2026 Inititave Requirements: Create a GitHub account Create a repo called 100daysofkql Example: https://github.com/m4nbat/100daysofkql2026 Create a readme.md and add this line to your readme: 100DaysOfKQL2026 Master repo with instructions: https://github.com/m4nbat/100daysofkql202...

CVE-2024-5420-XSS

Description A vulnerability was found in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, affecting the device description parameter in the web interface. This flaw allows stored cross-site scripting XSS, enabling attackers to inject JavaScript code. The attack can be...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares: pyth...

100-Days-of-YARA-2026

This repository does not have a README...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - Cross-Site Scripting

A vulnerability was found in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, affecting the device description parameter in the web interface. This flaw allows stored cross-site scripting XSS, enabling attackers to inject JavaScript code. The attack can be executed remote...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

watchTowr-vs-SonicWall-PreAuth-RCE-Chain

SonicWall SMA 100 PreAuth RCE Chain PoC PoC для цепочки RCE до аутентификации SonicWall SMA 100 CVE-2023-44221, CVE-2024-38475 Технические подробности см. в нашем блоге https://github.com/user-attachments/assets/b157b39c-d7bd-4385-af7a-e465f8fd4a41 PoC в действии python...

CVE-2016-5639

CVE-2016-5639 Crestron AirMedia AM-100: обход каталогов и дамп хэшей — модули Metasploit Два похожих модуля, использующих CVE-2016-5639 для дампа хэшей и получения файлов через обход каталогов. Я создал эти модули отдельно, потому что хотел получить опыт в написании чего-то, что может "дампнуть"...

CVE-2019-3929

CVE-2019-3929 Crestron/Barco/Extron/InFocus/TeqAV 원격 명령 삽입 CVE-2019-3929 Metasploit 모듈 Tenable의 설명에 따르면: 인증되지 않은 원격 공격자는 HTTP 엔드포인트 filetransfer.cgi에 조작된 요청을 전송하여 루트 권한으로 운영 체제 명령을 실행할 수 있습니다. 이 취약점은 알려진 모든 장치에 영향을 미치는 것으로 보입니다. 여기에는 Crestron AM-100 펌웨어 1.6.0.2, Crestron AM-101 펌웨어 2.7.0.1, Barco...

CVE-2021-36630

CVE-2021-36630 Устройства серии SmartZone от Ruckus имеют риски безопасности. После уведомления производителя они активно организовали технический персонал для проведения расследований. В течение этого периода мы также неоднократно предоставляли рекомендации по безопасности и методы проверки. 19...

CVE-2016-5640

CVE-2016-5640 Metasploit-модуль для Crestron AirMedia AM-100 RCE CVE-2016-5640 Модуль для эксплуатации уязвимости удалённого внедрения команд Remote Command Injection на странице беспроводной диагностики устройств Crestron AirMedia AM-100 с версией прошивки 1.4.0.13. Команды выполняются от имени...

2022

100 Days of YARA Part 2 — Electric Detectaloo Заранее прошу прощения за ужасное название, но добро пожаловать в 100 Days of YARA! Этот репозиторий будет служить хранилищем всех идей YARA, созданных за это время. Любые забавные скрипты, инструменты или правила, которые вы напишете, можно коммитить...

2023

100 дней YARA. Часть 2 - Electric Detectaloo Заранее извиняюсь за ужасное название, но добро пожаловать в 100 дней YARA! Этот репозиторий будет служить хранилищем всех идей YARA, созданных за это время. Любые интересные скрипты, инструменты или правила, которые вы напишете, можно коммитить в этот...

CVE-2026-103885

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

EUVD-2026-91362

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

UBUNTU-CVE-2026-103399

A flaw was found in SoupServer libsoup. When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final non-1xx response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-aliv...

badblood

Bad Blood Bad Blood는 CVE-2021-20038에 대한 익스플로잇으로, 펌웨어 버전 10.2.1.x를 사용하는 SMA-100 시리즈 시스템의 httpd 바이너리에서 발생하는 스택 기반 버퍼 오버플로우입니다. 기술적 세부 사항은 여기에 많이 작성했습니다: AttackerKB CVE-2021-20038 작성된 익스플로잇은 포트 1270에서 텔넷 바인드 셸을 엽니다. 셸에 연결하는 공격자는 nobody 권한으로 실행을 달성합니다. 예제 출력 albinolobster@ubuntu:/badblood$ date Mon J...

Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux (crlsa-2024_7349)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20247349 advisory. net/http: Denial of service due to improper 100-continue handling in net/http CVE-2024-24791 Tenable has extracted the preceding description block directly from the...