process-enumeration-stealth

🚴 process-enumeration-stealth ¿Qué es esto? Este es un PoC simple que te permite devolver una lista de PIDs que están usando actualmente NTFS, consultando el dispositivo base \ntfs\ el objeto base del sistema de archivos de Windows. Utilizar este método evita la necesidad de usar APIs típicas, co...

CVE-2026-0092

CVE-2026-0092 En Package Manager, existe una posible omisión del controlador de bloqueo del dispositivo debido a una verificación de permisos faltante. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. No se necesita interacción del usuar...

usbrip

usbrip （名称源自“USB Ripper”，而非“USB R.I.P.”）是一款简单的命令行取证工具，可让您跟踪 Linux 机器上的 USB 设备痕迹（即 USB 事件历史）。 目录： 描述 快速开始 展示 系统日志结构 依赖项 deb pip 手动安装 Git Clone install.sh 路径 Cron uninstall.sh 用法 概要 帮助 示例 鸣谢与参考 加星者图表 后记 描述 usbrip 是一款小型软件，用于分析 Linux 日志数据：journalctl 输出或 /var/log/syslog（或...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

urh

The Universal Radio Hacker URH is a complete suite for wireless protocol investigation with native support for many common Software Defined Radios. URH allows easy demodulation of signals combined with an automatic detection of modulation parameters making it a breeze to identify the bits and byt...

knxmap

KNXmap A tool for scanning and auditing KNXnet/IP gateways on IP driven networks. KNXnet/IP defines Ethernet as physical communication media for KNX EN 50090, ISO/IEC 14543. KNXmap also allows to scan for devices on the KNX bus via KNXnet/IP gateways. In addition to scanning, KNXmap supports othe...

bleah

This repository is DEPRECATED, please usebettercap as this tool has been ported to its BLE modules...

trommel

TROMMEL TROMMEL sifts through embedded device files to identify potential vulnerable indicators. TROMMEL identifies the following indicators related to: Secure Shell SSH key files Secure Socket Layer SSL key files Internet Protocol IP addresses Uniform Resource Locator URL email addresses shell...

lockphish

Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...

lockphish

Lockphish v2.0 Lockphish是首个（2020年4月7日）针对锁屏的钓鱼攻击工具，旨在使用HTTPS链接获取Windows凭证、Android PIN和iPhone密码。 LockPhish教程：https://www.kalilinux.in/2020/05/lockphish.html 作者：The Linux Choice（已删除其GitHub仓库） 推特：https://twitter.com/linuxchoice 功能： 用于Windows、Android和iPhone的锁屏钓鱼页面 自动检测设备 通过Ngrok进行端口转发 IP追踪器 法律免责声明：...

adbsploit

ADBSploit 一个基于Python的工具，用于通过ADB利用和管理Android设备 当前开发中 屏幕录制 流式屏幕录制 提取联系人 提取短信 提取即时通讯应用聊天记录（WhatsApp/Telegram/Line） 安装后门 以及更多... 安装 首先下载或克隆仓库 git clone https://github.com/mesquidar/adbsploit.git 进入目录 cd adbsploit 安装 python setup.py install 执行 adbsploit 尽情享受！ 要求 Python 3.X 使用说明 执行命令：devices...

adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation First Download or clone repo git...

Optergy Proton/Enterprise - Unauthenticated RCE via Backdoor Console

Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console. id: CVE-2019-7276 info: name: Optergy Proton/Enterprise - Unauthenticated RCE via Backdoor Console author: daffainfo severity: critical description: | Optergy Proton/Enterprise devices allow Remote Root Cod...

eBPF-hid_guard

eBPF-hidguard 请参见下文存档原因。 一个 Linux 内核空间安全监控工具，用于检测和阻止 HID 注入攻击（Rubber Ducky、O.MG Cable、基于 ESP32 的键盘模拟器），利用 eBPF HID-BPF structops。 功能介绍 恶意 HID 设备会模拟键盘并以远超人类打字速度的速度注入按键。本工具检测到这种时序异常后，会在攻击完成前将恶意设备从内核 HID 驱动中解绑。 启动时，工具会快照当前所有已连接的 HID 设备并忽略它们——仅监控新连接的设备。支持 USB 和蓝牙 HID 设备。 分支结构 main — 可用的概念验证...

dcsgonebadge

DEF CON Singapore One Badge This project manages the hardware design of the Circuit Crafters first project, an electronic hardware badge intended for distribution at the DEF CON Singapore 2026 security conference at the Marina Bay Sands Expo and Convention Centre. License This project is licensed...

CVE-2020-9332

CVE-2020-9332 描述 FabulaTech 的“USB for Remote Desktop”和“USB over Network”中存在一个有漏洞的总线驱动程序，允许低权限用户添加一个完全受控的软件 USB 设备，这可能在常见情况下被攻击者利用以提升权限 漏洞类型 不正确的访问控制 产品供应商 FabulaTech 受影响的产品代码库 USB for Remote Desktop USB over Network 攻击类型 本地 权限提升影响 true CVE 其他影响 添加由非特权用户完全控制的受信任软件 USB HID 设备 发现者 来自 SentinelOne 的...

UBUNTU-CVE-2026-97946

In the Linux kernel, the following vulnerability has been resolved: x86/amdnode: Fix PCI device reference counting in amdsmninit The local "root" pointer is a temporary variable used during the device search. Therefore, refcount related to the search iterators should be cleaned up after the searc...

Linux Distros Unpatched Vulnerability : CVE-2026-97986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtioinput: stop callbacks before unregistering input device virtinputremove unregisters the input device before resetting the virtio device. virtinputrecveven...

CVE-2026-17545: Improper Handling of Windows Device Names

On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW and opens a device instead of the...