bucket-stream

🚨 Bucket Stream ya no recibe mantenimiento. Si necesitas soporte o consultoría para tus esfuerzos de red team, envíame un correo a [email protected] 🚨 Bucket Stream Encuentra buckets interesantes de Amazon S3 observando los registros de transparencia de certificados. Esta herramienta...

udpack

UDPack UDPack is an extensible generic UDP packet obfuscator. The purpose of this application is to sit in the path of a UDP data stream, and obfuscate, deobfuscate or otherwise modify the packets. Python 3.4 or above is required, since this script uses the asyncio library. Using the latest Pytho...

external_expact_AOSP10_r33_CVE-2022-25314

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

SymaX5SW-Rx-Tx

SymaX5SW Rx and Tx Research carried out on a SYMA X5SW Drone with three defined objectives. 1. Intercept the telemetry of the Drone and display it in a graphical interface in real-time. 2. Create a transmitter command control, using RF, Arduino modules and C code. 3. Intercept the video stream of...

CVE-2021-21402

CVE-2021-21402 CVE-2021-21402 Script de Wker para la lectura arbitraria de archivos en Jellyfin, admite ejecución por lotes. La lógica es muy sencilla: mediante una petición GET comprueba si existe win.ini: define payload = /Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/...

Dshell

Dshell Un marco extensible de análisis forense de redes. Permite el desarrollo rápido de plugins para apoyar la disección de capturas de paquetes de red. Características clave: Análisis profundo de paquetes usando plugins especializados Reensamblaje robusto de flujos Soporte para IPv4 e IPv6...

LFISuite

LFI Suite ¿Qué es LFI Suite? LFI Suite es una herramienta totalmente automática capaz de escanear y explotar vulnerabilidades de Local File Inclusion inclusión de archivos locales utilizando muchos métodos de ataque diferentes, listados en la sección Features. Características Funciona con Windows...

ids_bypass

Descargo de responsabilidad Estos programas son solo con fines educativos. No los use sin permiso. injectserver: Prueba de concepto para CVE-2018-6794. Si como servidor interrumpe el orden normal de los paquetes del handshake TCP de 3 vías e inyecta datos de respuesta antes de que se complete el...

RTSPbrute

RTSPBrute Inspirado por Cameradar Características Encuentra transmisiones RTSP accesibles en cualquier objetivo Fuerza bruta de rutas de transmisión Fuerza bruta de credenciales Toma capturas de pantalla en transmisiones accesibles Genera un informe fácil de usar de los resultados: Archivo .txt c...

PoC-CVE-2025-8671-MadeYouReset-HTTP-2

PoC-CVE-2025-8671-MadeYouReset-HTTP-2 PoC para validar vulnerabilidad MadeYouReset Este repositorio contiene una PoC controlada desarrollada para validar si una infraestructura es potencialmente vulnerable a la CVE-2025-8671 MadeYouReset. El código no es un exploit completo y no realiza DoS real ...

shomon

ShoMon es un alimentador de alertas de Shodan para TheHive escrito en GoLang. ¡Con la versión 2.0, es más potente que nunca! Funcionalidades Se puede utilizar como Webhook o como lector de Stream El Webhook abre un endpoint API REST para que Shodan envíe alertas. Esto significa que necesitas hace...

Dirty_Stream-Android-POC

Disclaimer This project is for educational purposes only. The author does not condone or endorse any illegal or malicious activities. The use of this exploit is solely at your own risk. The author shall not be held liable for any damages or legal consequences arising from the use of this code...

CVE-2026-25643-Frigate-RCE

CVE-2026-25643: Frigate NVR = 0.16.3 Authenticated RCE Exploit Title: Frigate NVR = 0.16.3 - Authenticated Remote Code Execution Date: 2026-02-05 Exploit Author: jduardo2704 Vendor Homepage: https://frigate.video/ Software Link: https://github.com/blakeblackshear/frigate Version: = 0.16.3 CVE:...

CVE-2020-26258

Description XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, a Server-Side Forgery Request vulnerability can be activated when unmarshalling. The vulnerability may allow a remote attacker to request data from internal resources that are not...

zeroturnaround__zt-zip_CVE-2018-1002201_1-12

ZIP - convenience methods Continuous Integration Quick Overview The project was started and coded by Rein Raudjärv when he needed to process a large set of large ZIP archives for LiveRebel internals. Soon after we started using the utility in other projects because of the ease of use and it just...

CVE-2026-67408

A flaw was found in rabbitmq-server. An authenticated user with access to a virtual host can cause a Denial of Service DoS by sending a specially crafted HTTP request to the stream management application programming interface API. The server allocates substantial memory to process stream binding...

probe-image-size: Quadratic-time Denial of Service in the SVG Parser

Overview probe-image-size scans the SVG header with a searching regular expression, //. On input that contains many , the engine restarts the ^ scan at every position and runs to end of input each time, giving quadratic time complexity. Both the synchronous and the streaming parser are affected...

project_bias

projectbias A high-performance, bias-free cryptographic stream engine written in Ada and formally verified with SPARK. The engine guarantees zero statistical bias when mapping raw entropy into custom alphabets by discarding modulo-biased values, drawing security bytes directly from native OS kern...

CVE-2017-7921

CVE-2017-7921 exploit This script allows interaction with a CVE-2017-7921 vulnerable camera to perform the following operations: 1. Download and decrypt a configuration file, containing the camera's admin's password. 2. Continuously download images every second. 3. Convert a series of downloaded...

CVE-2025-10952-ml-logger-AFR

CVE-2025-10952 — ml-logger streamhandler Arbitrary File Read This repository provides a standalone Python script — CVE-2025-10952.py — that exploits an unauthenticated arbitrary file read vulnerability in ml-logger's streamhandler, chained with the /glob endpoint for filesystem enumeration. When...