The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from incorrect restrictions on the path name to the catalog, allowing a intruder to write arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

CVE-2020-28243

CVE-2020-28243 A command injection vulnerability in SaltStack's Salt allows for privilege escalation via specially crafted process names on a minion when the master calls restartcheck. For a full writeup please see this blog post Affected Versions: All versions between 2016.3.0rc2 and 3002.2 Link...

snmpwn

SNMPwn es una herramienta de enumeración y ataque de usuarios SNMPv3. Es una herramienta de seguridad legítima diseñada para ser utilizada por profesionales de seguridad y testers de penetración contra hosts que tengas permiso de probar. Aprovecha el hecho de que los sistemas SNMPv3 responderán c...

CVE-2023-38831

CVE-2023-38831 PoC Proof Of Concept This is an easy to use exploit for CVE-2023-38831, a vulnerability that affects WinRAR versions before 6.23. An exploitable vulnerability has been identified in RARLabs WinRAR versions prior to 6.23. This vulnerability enables attackers to execute arbitrary cod...

HintInject

HintInject HintInject es un insertador y cargador de shellcode que desarrollé mientras jugaba con las estructuras del archivo PE y la Tabla de Directorios de Importación. Toma un archivo de shellcode sin procesar y coloca el shellcode en fragmentos dentro de las entradas de la Tabla de...

CVE-2026-4480-PoC

CVE-2026-4480: Samba print-command %J injection PoC Important — Read this first: This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written authorization...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

android-reverse-engineering-skill

Ingeniería inversa de Android y extracción de API — Habilidad de Claude Code Una habilidad de Claude Code que descompila archivos APK/XAPK/JAR/AAR de Android y extrae las API HTTP utilizadas por la aplicación — endpoints de Retrofit, llamadas OkHttp, URLs hardcodeadas, patrones de autenticación —...

IIS-ShortName-Scanner

IIS Short Name Scanner - 2012-2023 y sigue dando de sí... Última presentación: Más allá de la divulgación de nombres cortos de archivos en Microsoft IIS Última entrada del blog: https://soroush.me/blog/2023/07/thirteen-years-on-advancing-the-understanding-of-iis-short-file-name-sfn-disclosure/...

ExtensionSpoofer

ExtensionSpoofer ExtensionSpoofer is a Visual Basic .NET desktop app that demonstrates how file names and icons can be visually manipulated on Windows while the underlying executable file type remains unchanged. It uses the Unicode Right-to-Left Override character U+202E to reverse displayed...

CVE-2023-38831-Winrar-Exploit-Generator-POC

CVE-2023-38831 Winrar Exploit Generator POC This is a basic proof of concept for the CVE-2023-3883 exploit targeting WinRAR up to 6.22. Modified some existing internet-sourced POCs by introducing greater dynamism and incorporated additional try-except blocks within the code. Description from...

dismember

🔪 Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

go_parser

Otro analizador de binarios Golang para IDAPro Inglés |中文 NOTA : Ahora la última rama master es la versión de Python3. La rama master anterior se ha cambiado a la rama py2 , y temporalmente no se mantiene. Instrucciones para la rama Python3 Esta versión se desarrolla y prueba en macOS/Windows,...

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

RiskySPN

RiskySPNs RiskySPNs es una colección de scripts de PowerShell enfocados en detectar y abusar de cuentas asociadas con SPN Nombre de Principal de Servicio. Este módulo puede ayudar a los equipos azules a identificar SPN potencialmente riesgosos, así como a los equipos rojos a escalar privilegios...

pretender

pretender Tu compañero MitM para ataques de retransmisión que incluye toma de control de DNS por DHCPv6, así como suplantación de mDNS, LLMNR y NetBIOS-NS pretender es una herramienta desarrollada por RedTeam Pentesting para obtener posiciones de intermediario MitM mediante resolución de nombres...

cve-2023-40429-ez-device-name

HostName Overview HostName is a sample application demonstrating how a third-party app can access a user's device name without the com.apple.developer.device-information.user-assigned-device-name entitlement. Details In iOS 16, Apple added the...

fastfuz-chrome-ext

FastFuzz Chrome Extension Fast fuzzing websites with chrome extension Screenshot Install Add Your Custom Files Open files.txt Paste your file or directory name in line by line Happy Hunting TODO Add response size foundings Add new specific file and directory names Add Extension to chrome extensio...

CVE-2022-22909

CVE-2022-22909 Hotel Druid 3.0.3 - Remote Code Execution RCE Exploit by kaal Exploits 1. HotelDruidExploit.py This Exploit will create new room with our PHP payload as a room name . Usage : $ ./HotelDruidExploit.py -h $ ./HotelDruidExploit.py -u http://127.0.0.1/hoteldruid 2...