35421 matches found
golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect
A flaw was found in the net/http package of the Golang standard library. The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header redirected to b.com/ will not send that header to b.com. However, the...
net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service
A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...
golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...
Microsoft Security Advisory CVE-2026-69522 β .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2026-69522 β .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...
EUVD-2026-73720
Microsoft Security Advisory CVE-2026-69439 β .NET and Visual Studio Elevation of Privilege Vulnerability...
Microsoft Security Advisory CVE-2026-69439 β .NET and Visual Studio Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2026-69439 β .NET and Visual Studio Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...
cont-flood-poc
PoC for CVE-2023-45288 This is a proof-of-concept code for the CONTINUATION flood vulnerability found and documented by Bartek Nowotarski. The technical details are very well documented in his blog post here. While my focus was on the Go bug as documented by the researcher, this code should be...
Microsoft Security Advisory CVE-2026-71328 β .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2026-71328 β .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...
DesckVB-RAT
DesckVB RAT v2.9 β Modular .NET RAT, Multi-Stage Delivery & Plugin Ecosystem Toolchain Linkage to βPjoao1578β Author: ShadowOpCode X/Twitter: https://x.com/ShadowOpCode This repository accompanies a full technical report documenting an active malware ecosystem centered around DesckVB RAT , a...
SharpMove
SharpMove - .NET authenticated execution for remote hosts Building To compile open Visual Studio project and compile for release. Options WMI SCM DCOM Multiple Task Scheduler Service DLL Hijack DCOM Server Hijack Modify Scheduled Task Modify Service binpath root@kitploit: SharpMove.exe action=que...
MemTracer
MemTracer MemTracer is a tool that offers live memory analysis capabilities, allowing digital forensic practitioners to discover and investigate stealthy attack traces hidden in memory. The MemTracer is implemented in Python language, aiming to detect reflectively loaded native .NET framework...
WebGoat.NET
Webgoat.NET Source Code: https://github.com/jerryhoff/WebGoat.NET Download zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master This web application is a learning platform that attempts to teach about common web security flaws. It contains generic security flaws that apply to most web...
NimPackt-v1
A Nim-based packer for .NET executables and raw shellcode ByCas van Cooten @chvancooten With special thanks to Marcello Salvati @byt3bl33der and Fabian Mosch @S3cur3Th1sSh1t Description Update: NimPackt-v1 is among the worst code I have ever written I was just starting out learning Nim. Because o...
PulseAPK-Core
PulseAPK π Languages English | Deutsch | EspaΓ±ol | FranΓ§ais | Χ’ΧΧ¨ΧΧͺ | νκ΅μ΄ | ΠΠ΅Π»Π°ΡΡΡΠΊΠ°Ρ | Suomi | LatvieΕ‘u | Eesti | LietuviΕ³ | ΔeΕ‘tina | SlovenΔina | Magyar | Ψ§ΩΨΉΨ±Ψ¨ΩΨ© | PortuguΓͺs | Π ΡΡΡΠΊΠΈΠΉ | Π£ΠΊΡΠ°ΡΠ½ΡΡΠΊΠ° | δΈζ PulseAPK is a professional-grade, cross-platform GUI for Android reverse engineering and...
NxRansomware
NxRansomware A next generation of ransomware. Fully written using a .Net Framework + C&C System Created By: Guilherme Bacellar Moralez Disclaimer This code is created and maintened only for a research proposal. Please do not use for other proposes. Please, do not run the code with a release...
MemoryMapper
Memory Mapper Memory Mapper is a lightweight library which allows the ability to map both native and managed assemblies into memory by either using process injection of a process specified by the user or self-injection; the technique of injecting an assembly into the currently running process...
ReClass.NET
ReClass.NET This is a port of ReClass to the .NET platform with lots of additional features. Features Support for x86 / x64 File import from ReClass 2007-2016 and ReClass QT Memory Nodes Arrays and Pointers to every other node types Hex 8 / 16 / 32 / 64 Int 8 / 16 / 32 / 64 UInt 8 / 16 / 32 / 64...
CVE-2017-8759
Exploit tool CVE-2017-8759 Exploit tool CVE-2017-8759 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim...
Emojify
Emojify root@kitploit: πβππ β π΅ π΅ π π‘ π₯ π π’πΉπΉ π¬ π½ π ππ¨ ππ π π πΌ π π π¬π½ βπ·π π΅ π¬ π΅ β½ π± π₯ π π’πΉπΉ π© π π π π± β½ πΌ π π π β π΅ π΅ π πͺ π π₯ π π’ π πβππ π π πͺπ π½πΌπΌ π π π© Obfuscates charcater and string literals into emojis and randomises classes, interfaces, methods and variable names. NB Inherited, overriden a...
POSTDump
POSTDump Another tool to perform minidump of LSASS process using few technics to avoid detection. POSTDump is the C / .NET implementation of the ReactOS minidump function like nanodump, thus avoiding call to the Windows API MiniDumpWriteDump function. The dump logic code is saved under the...