B2R2

B2R2 B2R2 es un marco de análisis binario completamente administrado escrito en F. Proporciona un amplio conjunto de algoritmos, funciones y herramientas para ingeniería inversa, análisis de programas e inspección a nivel binario. El nombre B2R2 se inspira en R2-D2, el icónico robot de Star Wars...

CVE-2026-24061-lab

CVE-2026-24061 — Laboratorio de Reproducción ⚠️ Con fines educativos únicamente. Entorno de laboratorio aislado. Francés abajo Resumen Bypass de autenticación crítico CVSS 9.8 en GNU InetUtils telnetd ≤ 2.7. Al inyectar -f root como variable USER mediante la opción Telnet NEWENVIRON, un atacante n...

CVE-2020-27976

CVE-2020-27976 Exploit osCommerce Phoenix CE . Esto ha producido los mejores resultados durante las pruebas. Los saltos de línea en el payload se reemplazan con espacios antes de la subida. ================== Fuentes: https://www.tenable.com/cve/CVE-2020-27976...

CVE-2024-25832-PoC

CVE-2024-25830 y CVE-2024-25832 - DataCube3: Control de Acceso Inadecuado y Carga de Archivos Sin Restricciones. Resumen Este repositorio presenta una Prueba de Concepto PoC para una cadena de explotación de dos pasos dirigida a dispositivos DataCube3. Combina CVE-2024-25830 Control de Acceso...

see

Entorno de Ejecución en Aislamiento :Fuente: https://github.com/F-Secure/see :Documentación: https://see.readthedocs.io :Descarga: https://pypi.python.org/pypi/python-see |travis badge| |docs badge| .. |travis badge| image:: https://travis-ci.org/F-Secure/see.svg?branch=master :target:...

FLAIR

F-Secure Lightweight Acquisition for Incident Response FLAIR This document describes the purpose and basic operation of the FLAIR acquisition script. Purpose During investigation of incidents on client estate, there are occasions where no EDR deployed which the IR team can make use of to collect...

lazarus-sigma-rules

Lazarus Sigma Rules The Sigma rules in this repository were created by the F-Secure Countercept Detection and Response Team to provide detection coverage for the Tools, Techniques and Procedures recently used by the Lazarus Group. The blog posts discussing the creation of these Sigma rules can be...

FMD Android

FMD Android Encuentra tu dispositivo a través de SMS, mensajería instantánea o una interfaz web FMD Server. FMD te permite localizar, hacer sonar, borrar y enviar otros comandos a tu dispositivo cuando está perdido. Su objetivo es ser una alternativa de código abierto segura a Encontrar mi...

RTOS-F-16-Exploit---CVE-2019-7711

Green Hills INTEGRITY RTOS F-16 Exploit - CVE-2019-7711 Full Format String Exploitation Chain Realistic Ground Maintenance Attack on F-16 Avionics 📋 Description This repository contains a Proof of Concept PoC for CVE-2019-7711 — a Format String vulnerability in the Interpeak IPCOMShell TELNET...

F-Scrack

Para evitar el uso malicioso de este script, este proyecto ha sido eliminado...

Tylium

Tylium Tuberías de datos primarias para detección de intrusiones, análisis de seguridad y caza de amenazas Estos archivos contienen configuraciones para producir datos EDR detección y respuesta en endpoints además de los registros de sistema estándar. Estas configuraciones permiten la producción ...

f-for-java

f-for-java a project written in go and java i abandoned for CVE-2021-44228 try to fix it if you can XD THE MODULE IN JAVA IS NOT MINE...

nextcloud_android

Nextcloud Android app Codacy Badge The Android client forNextcloud. Easily work with your data on your Nextcloud. How to contribute If you want to contribute to Nextcloud, you are very welcome: on our IRC channels and on freenode our forum at https://help.nextcloud.com for translations of the app...

F-logic DataCube3 - SQL Injection

SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the reqid parameter. id: CVE-2024-31750 info: name: F-logic DataCube3 - SQL Injection author: DhiyaneshDK severity: high description: | SQL injection vulnerability in f-logic...

Malicious Package

Overview kartykgithub-ph-f is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

sagemcom-fast-3890-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt vulnerability to pop a shell on the Sagemcom F@ST 3890 50.10.19 cable modem, from local network access. Firmware version 50.10.21 or newer should be secure against Cable Haunt. This Proof of concept has specifically been designed to onl...

CVE-2026-33980

CVE-2026-33980 — KQL Injection in adx-mcp-server via tablename parameter Severity : High CVSS 8.3 CWE : CWE-943 — Improper Neutralization of Special Elements in Data Query Logic Affected : adx-mcp-server = 1.1.0 Advisory : GHSA-vphc-468g-8rfp NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-33980...

CVE-2026-42208_lab

LiteLLM Proxy SQL Injection GHSA-r75f-5x8p-qvmc A reproduction environment for the SQL injection vulnerability in LiteLLM Proxy's API key authentication flow. Vulnerability Summary Item| Detail ---|--- Advisory| GHSA-r75f-5x8p-qvmc Type| SQL Injection CWE-89 Severity| Critical Affected| litellm...

telnet-inetutils-auth-bypass-CVE-2026-24061

CVE-2026-24061: GNU inetutils-telnetd Authentication Bypass A Docker lab to demonstrate CVE-2026-24061 — a critical authentication bypass vulnerability in GNU inetutils telnetd that went unpatched for 11 years. The Vulnerability Telnetd passes the USER environment variable directly to...

CVE-2026-24061-Telnetd

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass CVE: CVE-2026-24061 Severity: Critical CVSS: 9.8 Critical CWE: CWE-88 — Improper Neutralization of Argument Delimiters in a Command Affected Component: GNU Inetutils telnetd Affected Versions: 1.9.3 through 2.7 Overview CVE-2026-24061 is ...