SharpHide

SharpHide Просто хороший трюк для персистентности, чтобы запутать расследование DFIR. Использует нативный API NtSetValueKey для создания скрытого с нулевым символом в конце ключа реестра. Это работает путем добавления нулевого байта перед именем значения ключа UNICODESTRING. Дополнительную...

CVE-2024-2876

CVE-2024-2876 - Уязвимость SQL-инъекции в Email Subscribers от Icegram Express Обзор CVE-2024-2876 — это критическая уязвимость безопасности, обнаруженная в плагине «Email Subscribers by Icegram Express» для WordPress. Эта уязвимость затрагивает версии до 5.7.14 включительно и представляет...

CVE-2026-106056 Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quoting

Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafted option values. Attackers can inject cmd.exe metacharacters such as && or | into free-text options, which...

EUVD-2026-94304

Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafted option values. Attackers can inject cmd.exe metacharacters such as && or | into free-text options, which...

ohmybackup

ohmybackup ohmybackup - Scan Victim's Backup Directories & Backup Files ohmybackup Scans backup folders on target sites. Searches archived files in the folders it finds. With the 2-file scanning system, it adds extensions and filenames in different ways, making it more likely to be found. 1 -...

awesome-pentest

Awesome Penetration Testing A collection of awesome penetration testing and offensive cybersecurity resources. Penetration testing is the practice of launching authorized, simulated attacks against computer systems and their physical infrastructure to expose potential security weaknesses and...

quick-lookup-ptrun

Plugin de recherche rapide pour PowerToys Run Ce plugin pour PowerToys Run vous permet de rechercher rapidement une adresse IP, un nom de domaine, un hash ou tout autre point de données dans une liste d'outils de cybersécurité. Il est parfait pour les analystes en sécurité, les testeurs...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

timesketch

Timesketch Table of Contents 1. About Timesketch 2. Getting started 3. Community 4. Contributing About Timesketch Timesketch is an open-source tool for collaborative forensic timeline analysis. Using sketches you and your collaborators can easily organize your timelines and analyze them all at th...

cve-2024-0044

CVE-2024-0044 CVE-2024-0044 позволяет выполнить атаку "run-as", что приводит к локальному повышению привилегий. Это даёт злоумышленнику доступ к приватным файлам, хранящимся локально любым приложением на мобильном устройстве, что нарушает гарантии безопасности, обеспечиваемые "Application Sandbox...

onelinepy

onelinepy Python Obfuscator for FUD Python Code. Download & Run git clone https://github.com/spicesouls/onelinepy cd onelinepy chmod +x setup.sh ./setup.sh onelinepy Usage Guide | || | . | | -| | | | -| . | | |Python |||||||||| | |Obfuscator || || usage: oneline.py -h -m M -i I --script SCRIPT...

android_autorooter

Android Autorooter Это скорее просто заметка для себя, чтобы дальше исследовать возможности работы, проделанной здесь: https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html...

Nginx UI <= 2.3.7 - Unauthenticated Installer Exposure

Nginx UI 2.0.0 to 2.3.8 contains an authentication bypass caused by unauthenticated access to /api/install during first-run setup, letting remote attackers claim the initial admin account, exploit requires attacker to access the service before legitimate operator. id: CVE-2026-42221 info: name:...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

CVE-2024-0044

CVE-2024-0044/A-307532206 — это уязвимость высокой степени серьезности в Android Framework, которая позволяет злоумышленникам с доступом adb выполнять произвольный код под UID произвольного приложения. Изначально она была обнаружена Томом Хеббом из Meta Red Team X. В интернете можно найти множест...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, обнаруженная в функции createSessionInternal файла PackageInstallerService.java, представляет собой уязвимость высокой степени серьезности, затрагивающую Android версий 12 и 13. Эта уязвимость позволяет атакующему выполнить атаку "run-as any app", что приводит к...

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser's cache. "Instead of downloading and executing remote payloads like the typical attack pattern, in this attack, the websites pre-fetch a script payload into the...

NPM: Tinypool: Prototype Pollution Gadget to RCE in run() options

NPM: Tinypool: Prototype Pollution Gadget to RCE in run options vulnerability discovered by ? in WordPress Npm tinypool versions 2.1.2...

Tinypool: Prototype Pollution Gadget to RCE in run() options

tinypool is a fork of piscina and inherited the same prototype-pollution surface. When pool.runtask, options is called, the filename option is read from the provided options object. If that object does not have an own filename property, the lookup falls through to Object.prototype. An attacker wh...