nmap-nse-scripts

Repositorio para el desarrollo de NSE Nmap Scripting Engine. Encontrarás mis scripts incluyendo los no oficiales, librerías, recursos y otro material relacionado de mis talleres. TODO Finalizando la librería NSE de SMB2 Actualmente trabajando en la funcionalidad de modificación de contraseñas...

Important: Red Hat Security Advisory: abrt security update

An update for abrt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-45321-Tanstack

Simulasi Supply Chain Attack — CVE-2026-45321 TanStack Educational Lab for Understanding npm Supply Chain Attacks, CI/CD Abuse, and Install-Time Code Execution Disclaimer Project ini dibuat hanya untuk: pembelajaran keamanan siber, riset defensive security, simulasi local lab, memahami konsep...

abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the ONOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows the symlink and...

Important: Red Hat Security Advisory: abrt security update

An update for abrt is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Sudo-CVE-2019-14287

Sudo-CVE-2019-14287 Scripts para verificar y ejecutar CVE-2019-14287 como parte de Investigación Los scripts están escritos en Python3 y también en bash, ya que estos son los dos intérpretes más comunes que se pueden encontrar en cada sistema operativo Linux moderno. Los scripts pueden integrarse...

rasputin

RASPutin Ressources and papers related to my conferences and work on unRASPs. These work is in progress, please be patient : Don't hesitate to contribute / contact me / do PR ! Talks Insomni'hack 2022 - Forging golden hammer against Android app protections This talk is the first from a new serie...

YARAify

YARAify YARAify is an open YARA scan- and search engine. This repository provides some sample python3 scripts on how to interact with the YARAify API. Obtain an Auth-Key In order to query the YARA API, you need to obtain an Auth-Key. If you don't have an Auth-Key yet, you can get one at...

Brute-Ratel-C4-Community-Kit

Brute-Ratel-C4 This repository contains scripts, configurations and deprecated payload loaders for Brute Ratel C4 https://bruteratel.com/. Anything which is added in the deprecated folder will not be a part of the latest release of BRc4...

vendor-android-cves

vendor-android-cves Collections of our POCs/fuzzing scripts/harness for vendor android CVEs, including those on BlackHat ASIA 2022: https://www.blackhat.com/asia-22/briefings/schedule/the-hidden-rce-surfaces-that-control-the-droids-26083 Update: I've received news about the SMT exploit in this...

Penetration-Testing-Tools

A collection of my Penetration Testing Tools, Scripts, Cheatsheets This is a collection of more than a 160+ tools, scripts, cheatsheets and other loots that I've been developing over years for Penetration Testing and IT Security audits purposes. Most of them came handy at least once during my...

Cheatsheet-God

root@kitploit: + UPDATE: Added my huge link of bookmarks / references ❤️ Do you have a million bookmarks saved? Do all of those bookmarks contain unique information? Github repos starred for later? Well this is a compilation of all of these resources into a single repo known as Cheatsheet-God. No...

security-writeups

Security Writeups Write-ups and teaching-style scripts from CTF rooms and lab exercises I've worked through, mainly TryHackMe and PortSwigger. Each folder ships with a "teaching version" script where I've deliberately left the key values blank. If you fill them in from a writeup instead of the...

CVE-2021-34527

CVE-2021-1675 / CVE-2021-34527 Two mini Script to check if the PrintSpooler Serivce is running within the Forest. CVE-2021-1675: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-1675 CVE-2021-34527 aka PrintNightmare...

PowerShell-Pro-Obfuscator-Python

PowerShell Pro Obfuscator — Obfuscate & Virtualize PowerShell Code PowerShell Pro Obfuscator protects proprietary .ps1 scripts with renaming, polymorphic string and integer encryption, control-flow flattening, finite-state automata FSA, a VM engine, self-defending integrity checks, a protection...

CVE-2024-7456scripts

Some simple scripts to help exploit SQLi using both bash and Node.js based on CVE-2024-7456 https://nvd.nist.gov/vuln/detail/CVE-2024-7456...

Follina-Workaround-CVE-2022-30190

Follina workaround CVE-2022-30190 Description These two scripts can be used to apply the workaround provided by Microsoft to mitigate the vulnerability CVE-2022-30190 as detailed in the MSRC blog and to restore the workaround, should an official patch be released. The first script...

CVE-2026-11608 WP Customer Reviews <= 3.7.8 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter

The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpcr3fname' parameter in all versions up to, and including, 3.7.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

ATP-PowerShell-Scripts

ATP-PowerShell-Scripts Microsoft Signed PowerShell scripts List of all the signed scripts available in C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\DataCollection Accessing the file By default the files cannot be accessed. You need the TrustedInstaller privilege...

Fermion

Fermion Fermion is an electron application that wraps frida-node and monaco-editor. It offers a fully integrated environment to prototype, test and refine Frida scripts through a single UI. With the integration of Monaco come all the features you would expect from Visual Studio Code: Linting,...