kratos

Chat · Discusiones · Boletín informativo · Documentación · Probar Ory Network · Empleos Ory Kratos es un sistema de gestión de identidad y usuarios API-first para aplicaciones nativas de la nube. Centraliza los flujos de inicio de sesión, registro, recuperación, verificación y gestión de perfiles...

CVE-2023-27532

CVE-2023-27532 POC for CVE-2023-27532 affecting Veeam Backup and Replication Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive Summary This POC abuses an unsecured API...

CVE-2026-63030

🚨 CVE-2026-63030 — WP2Shell WordPress REST API Route Confusion → Remote Code Execution A Critical WordPress Core vulnerability enabling REST API route confusion that can be chained with SQL Injection to achieve unauthenticated Remote Code Execution. 📖 Overview CVE-2026-63030 is a Critical...

RDPCredentialStealer

RDPCredentialStealer RDPCredentialStealer it's an implant that steal credentials provided by users in RDP using API Hooking with Detours in C++ Proof-of-Concept Tool for Credential Theft Let's try this: First of all i transfer the DLL of the GitHub repository to the C:\Users\Public\Music path: No...

CVE-2025-0868

Penetration Testing Project Report: Exploiting CVE-2025-0868 DocsGPT RCE via JSON Eval 1. Introduction A critical Remote Code Execution RCE flaw CVE-2025-0868 was disclosed on February 20, 2025, in the open-source DocsGPT library, caused by unsafe use of eval when parsing JSON payloads. Key...

CVE-2021-22986

CVE-2021-22986 F5 BIG-IP/BIG-IQ iControl Rest API SSRF a RCE Uso: python CVE-2021-22986.py...

gdb-dashboard

GDB dashboard GDB dashboard is a standalone .gdbinit file written using the Python API that enables a modular interface showing relevant information about the program being debugged. Its main goal is to reduce the number of GDB commands needed to inspect the status of current program thus allowin...

CVE-2026-8181

CVE-2026-8181 This vulnerability allows unauthenticated attackers who know a valid administrator username to impersonate that admin during REST API requests by using any incorrect password in a Basic Authentication header. Attackers could abuse this flaw to create a new administrator account...

ruby-nmap

ruby-nmap Código fuente Problemas Documentación Descripción Una API de Ruby para nmap, la herramienta de exploración y escáner de seguridad/puertos. Permite automatizar nmap y analizar archivos XML de nmap. Características Proporciona una API de Ruby para automatizar nmap. Proporciona un analizad...

EvilSlackbot

EvilSlackbot A Slack Attack Framework for conducting Red Team and phishing exercises within Slack workspaces. Disclaimer This tool is intended for Security Professionals only. Do not use this tool against any Slack workspace without explicit permission to test. Use at your own risk. Background...

kyocera-cve-2022-1026

kyocera-cve-2022-1026 Una vulnerabilidad de extracción de datos no autenticada en impresoras Kyocera, que permite recuperar la libreta de direcciones en texto claro y las contraseñas de dominio. Resumen de la vulnerabilidad A finales de 2021, durante una prueba de penetración, estaba experimentan...

token-proxy

llm-token-proxy A transparent PII redaction proxy for LLM API traffic. Sits between your application and the LLM provider, pseudonymizing sensitive data on the way out and restoring it on the way back. Your LLM never sees real names, emails, IPs, or domains — it works entirely with structured...

ligolo-ng

Ligolo-ng : Tunelización como una VPN Una herramienta de tunelización avanzada pero simple que utiliza interfaces TUN. 📑 Documentación de Ligolo-ng Configuración/Inicio rápido !TIP Ligolo-ng 0.8 añadió muchas características nuevas, incluyendo: 🌐 API y una hermosa interfaz web gracias a L'ami du...

xed

Codificador-Decodificador X86 de Intel® Intel® XED Manual de la API Doxygen y manual de compilación del código fuente: https://intelxed.github.io Errores: https://github.com/intelxed/xed/issues/new Instrucciones abreviadas de compilación desde GITHUB : git clone https://github.com/intelxed/xed.gi...

pulse-exploit

pulsexploit Automated script for Pulse Secure SSL VPN exploit CVE-2019-11510 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. CentOS & Fedora yum install git python3 -y Ubun...

HingeSDK

HingeSDK Unofficial Python SDK for the Hinge API. Programmatically interact with Hinge to fetch recommendations, send messages, download media, and automate interactions. Authentication & Environment Setup To use this SDK, you need valid authentication credentials. You can store these in a .env...

Introspy-iOS

Introspy-iOS Blackbox tool to help understand what an iOS application is doing at runtime and assist in the identification of potential security issues. See http://isecpartners.github.io/Introspy-iOS/ for a quick introduction. Description This is the repository for the Introspy-iOS tracer. The...

teamcity-exploit-cve-2023-42793

TeamCity Exploit Cve 2023 42793 A quick script to exploit the cve-2023-42793 bug. Some additional reading on the exploit can be found here: https://www.fortinet.com/blog/threat-research/teamcity-intrusion-saga-apt29-suspected-exploiting-cve-2023-42793​...

NodeGoat

NodeGoat Being lightweight, fast, and scalable, Node.js is becoming a widely adopted platform for developing web applications. This project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them. Getti...

EUVD-2026-88643

A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the component api-admin Backend. The manipulation of the argument isAdmin/jobId leads to improper authorization. Remote exploitation of the attack ...