MemTracer

MemTracer MemTracer is a tool that offers live memory analysis capabilities, allowing digital forensic practitioners to discover and investigate stealthy attack traces hidden in memory. The MemTracer is implemented in Python language, aiming to detect reflectively loaded native .NET framework...

VulnerableDotNetHTTPRemoting

Vulnerable Dot Net HTTP Remoting Project This repository contains a vulnerable C application client/server that uses .NET Remoting over HTTP. This can be used for testing purposes and can be compiled using different versions of .NET Framework. It also includes a copy of ysoserial.net 15/03/2018...

Blacklist3r

Blacklist3r The goal of this project is to accumulate the secret keys / secret materials related to various web frameworks, that are publicly available and potentially used by developers. These secrets will be utilized by the Blacklist3r tools to audit the target application and verify the usage ...

SharpWhispers

SharpWhispers C porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub. Read the blog post for the technical details: https://www.secforce.com/blog/sharpasm-sharpwhispers/ Requirements Visual Studio .NET Framework = 3.5 Python3 Usage / / / | | /| / / /...

SharpKiller

SharpKiller Lifetime AMSI bypass AMSI-Killer by @ZeroMemoryEx ported to .NET Framework 4.8. Additional Obfuscation required https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=VirTool:MSIL/SharpKiller.A&ThreatID=2147895059 Newly integrated features: x - Live scan fo...

WebGoat.NET

Webgoat.NET Source Code: https://github.com/jerryhoff/WebGoat.NET Download zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master This web application is a learning platform that attempts to teach about common web security flaws. It contains generic security flaws that apply to most web...

DotNetHookerToolkit

InjectorCli + ManagedHookHostProj This repository contains two projects that are designed to be used together: InjectorCli: A .NET Framework 4.8 console injector built on frida-clr Frida.dll ManagedHookHostProj: A .NET Framework 4.8 helper DLL with native exports via 3F .NET DllExport used to...

CVE-2017-8759_-SOAP_WSDL

What is CVE-2017-8759 is Remote Code Execution Vulnerability On SOAP WDSL A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take control of an...

cve-2017-8760

Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...

Linux Distros Unpatched Vulnerability : CVE-2026-105242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET...

SharpShooter

/ // / / // / / / \ / / / / \ / / / / / / / / / / / / // / / / // // / / / / // / // / // / / /// //,// / ./// /////// // Description SharpShooter is a payload creation framework for the retrieval and execution of arbitrary CSharp source code. SharpShooter is capable of creating...

CVE-2026-108398

A flaw was found in .NET Framework. An untrusted search path vulnerability allows an authenticated local attacker to bypass security features. By placing a malicious file in a search directory used by the application, an attacker can trick the system into loading unauthorized resources, potential...

CVE-2026-97801

A flaw was found in .NET Framework. An unauthenticated remote attacker could exploit improper input validation by sending specially crafted input over the network. Successful exploitation allows an attacker to tamper with application data and make unauthorized modifications to the system state...

Linux Distros Unpatched Vulnerability : CVE-2026-70035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network. CVE-2026-70035 Note that Nessus relies on th...

Linux Distros Unpatched Vulnerability : CVE-2026-85363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network. CVE-2026-85363 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2026-70007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. CVE-2026-70007 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-70194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-70194 Note that Nessus...

CVE-2026-70194

Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network...

Microsoft .NET Framework (October 2026)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. CVE-2026-70007 -...

Microsoft Patches More Than 1,400 Security Flaws

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond. Just one of t...