Malicious code in @coopeuch/config (npm)

Source: amazon-inspector 0c9b2c76aac3e901d6585717a7e1f9729699bf3a4e280eb20a68bcef4d507d0d The package publishes to the @coopeuch npm scope at version 1.999.999 with a stub index.js, a shape designed to win resolution over an internal scope registry when an organization's scope-to-registry mapping...

CVE-2026-108584 FunnyWolf Viper config hard-coded credentials

A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the...

CVE-2026-108584

A security flaw in FunnyWolf Viper (up to version 3.1.11 ) allows for the disclosure of hard-coded credentials . The vulnerability stems from an unknown function within the file /root/viper/.git/config, where specific manipulation can trigger the leak. Remote exploitation is possible, and an expl...

EUVD-2026-96928

A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the...

Panoptic

Panoptic Panoptic is an open source penetration testing tool that automates the search and retrieval of common log and config files through path traversal vulnerabilities. Features Async concurrent scanning with configurable worker pool --concurrency Automatic discovery of common log and...

iCULeak.py

iCULeak.py Tool zum Auffinden und Extrahieren von Anmeldeinformationen aus Telefonkonfigurationsdateien in Umgebungen, die von Cisco CUCM Call Manager verwaltet werden. Bei Verwendung von Cisco CUCM Call Manager werden Telefonkonfigurationsdateien auf einem TFTP-Server gespeichert. Diese...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

CiscoExploit

CiscoExploit Cisco-Scan IP/Port/HostName/Boot/Version https://www.cnblogs.com/k8gege/p/10679491.html CVE-2019-1821 Cisco Prime Infrastructure Remotecodeausführung https://srcincite.io/blog/2019/05/17/panic-at-the-cisco-unauthenticated-rce-in-prime-infrastructure.html Cisco SNMP RCE...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. See Benchmark...

TrickBot-Toolkit

TrickBot Uma coleção de ferramentas para trabalhar com o TrickBot ConfigDecrypter.py Usado para descriptografar as configurações do TrickBot encontradas no diretório de instalação sob o nome config.conf Exemplo de uso: ConfigDecrypter.py -input config.conf -output config.txt FileDownloader.py Usa...

how2heap

Educational Heap Exploitation This repo is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases. You can run apt source libc6 to download the source code of the Libc you are using...

CVE-2023-24055_PoC

CVE-2023-24055 PoC KeePass 2.5x Em discussão e análise... https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/ https://sourceforge.net/p/keepass/feature-requests/2773/ Um invasor que tenha acesso de escrita ao arquivo de configuração do KeePass pode modificá-lo e injetar gatilho...

malduck

🦆 Malduck Installation ⚙️ | Dokumentation 📚 Malduck ist Ihr Entenbegleiter auf Reisen durch die Malware-Analyse. Es basiert hauptsächlich auf dem Roach-Projekt, das viele Konzepte aus der mlib-Bibliothek von Maciej Kotowicz übernimmt. Der Zweck des Forks war, Roach unabhängig vom Cuckoo...

samplicator

UDP Samplicator This small program receives UDP datagrams on a given port, and resends those datagrams to a specified set of receivers. In addition, a sampling divisor N may be specified individually for each receiver, which will then only receive one in N of the received packets. DOWNLOADING Thi...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

DahuaConsole

Dahua Console Versão: Pré-alfa Bugs: Com certeza TODO: Muitas coisas Instalar dependências sudo pip3 install -r requirements.txt Argumentos -h, --help show this help message and exit --rhost RHOST Remote Target Address IP/FQDN --rport RPORT Remote Target Port --proto dhip,dvrip,3des,http,https...

hashcatch

hashcatch Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog Written by @SivaneshAshok PoC of hashcat...

bopscrk

bopscrk Generate smart and powerful wordlists for targeted attacks Explore the docs » View Demo · Report Bug · Request Feature Table of contents 1. About the Project What's new Built with 2. Getting started Installation Run interactive mode 3. Usage How it works Tips Advanced usage Lyricpass 4...

bluez

BlueZ - Pilha de protocolos Bluetooth para Linux Copyright C 2000-2001 Qualcomm Incorporated Copyright C 2002-2003 Maxim Krasnyansky [email protected] Copyright C 2002-2010 Marcel Holtmann [email protected] Compilação e instalação Para compilar os utilitários Bluetooth, você precisa dos...