rainbowcrackalack

Rainbow Crackalack Author: Joe Testa @therealjoetesta About This project produces open-source code to generate rainbow tables as well as use them to look up password hashes. While the current release only supports NTLM, future releases may support MD5, SHA-1, SHA-256, and possibly more. Both Linu...

kekeo

kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...

kekeo

kekeo kekeo は、Microsoft Kerberos を C 言語で操作するために（そして楽しみのために）開始した小さなツールボックスです。 ASN.1 ライブラリ kekeo では、Kerberos ASN.1 構造を扱うために外部の商用ライブラリを使用しています：OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html これは、Microsoft C プロジェクトで簡単に動作する 唯一の コード生成ライブラリでした。 多くの依存関係なしで動作します。 魔法のようなドキュメント。...

EUVD-2026-72026

MikroTik RouterOS accepts malformed RSA/PKCS1 v1.5 signatures during X.509 validation. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting an outbound RouterOS TLS connection can use the root’s public certificate - without its private key - to forge a trusted...

CVE-2026-67278

MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures during X.509 validation. Because its trust store includes a root CA with e=3 , an attacker who controls or redirects an outbound TLS connection can use the root's public certificate—without its private key—to forge a trusted intermedi...

CVE-2025-51726

ご要望のとおり、両方の脆弱性（BA2022 & BA2015）について、実際の悪用シナリオとPoCエビデンスを用いて実証しました。これは、攻撃者が現実世界のコンテキストでこれらの問題を悪用する方法を示しています。 📌 1. BA2022 コード署名における弱いハッシュ – SHA-1悪用のデモンストレーション 元のCyberGhostVPNSetup.exeは署名済みで信頼できるように見えますが、SHA-1ハッシュを使用した自己署名証明書を使って偽のインストーラー（fakeCyberGhost.exe）の作成に成功しました。 ✅ 技術的証明：...

CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-

CVE-2025-24201 WebKit 脆弱性検出器 PoC この概念実証コードは、WebKit ベースのブラウザが CVE‑2025‑24201 に対して脆弱かどうかを検出します。これは、WebGL 実装における不適切な機能検証によって引き起こされる、深刻度の高いバッファ外書き込み（out-of-bounds write）の脆弱性 です。 🔍 脆弱性の概要 CVE‑2025‑24201 は、WebGLRenderingContext（WebGL 1）が定数 PRIMITIVERESTARTFIXEDINDEX（0x8D69）の有効化を許可したときに発生します。この機能は WebGL...

hash-identifier

hash-identifier Software to identify the different types of hashes used to encrypt data and especially passwords. Encryption formats supported: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

BOF-pack-1

BOF-pack-1 レッドチームのエンゲージメントに役立つBOFのケアパッケージ GetAppLockerPolicy ドメインのEffective AppLockerPolicyを出力します TokenElevate winlogonのトークンを使用してプロセスを作成しますデフォルトで有効なTcb Privilegeや、その他のwinlogon固有の特権を含みます。SCMを使用せずに管理者コンテキストからSYSTEMへ昇格する別の方法です。 PrivChanger 現在またはリモートのプロセスで複数のトークン特権を無効化・有効化します。...

CVE-2026-24061-payload

CVE-2026-24061 - GNU InetUtils telnetd 参数注入认证绕过 GNU InetUtils 1.9.3 至 2.7 版本中的 telnetd 服务器存在远程认证绕过漏洞。telnetd 守护进程在将 USER 环境变量作为命令行参数传递给 login1 程序之前，未能正确清理该变量。当 telnet 客户端发送包含命令行标志（如 -f root）的 USER 环境变量时，telnetd 会直接将该未清理的值传递给 login 程序。login 工具会将 -f 标志解释为绕过认证的指令，从而允许攻击者在无需提供任何凭据的情况下获得未经授权的 root 访问权...

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/takeaction.php?id=. id: CVE-2022-31984 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: high description: | Online Fire Reporting System v1.0 is vulnerable to SQL...

XWiki >= 2.5-milestone-2 - Cross-Site Scripting

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the resubmit template to perform a XSS, e.g. by using URL such as:...

CVE-2026-82631 affecting package valkey for versions less than 8.0.11-1

CVE-2026-82631 affecting package valkey for versions less than 8.0.11-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-15157 affecting package nodejs for versions less than 24.20.0-1

CVE-2026-15157 affecting package nodejs for versions less than 24.20.0-1. An upgraded version of the package is available that resolves this issue...

VulnHub-DC1-Writeup

VulnHub-DC1-Writeup "Penetration testing lab writeups documenting full attack chains — from recon to root." 🔓 VulnHub — DC-1 Boot-to-Root Writeup Difficulty: Beginner–Intermediate Platform: VulnHub Goal: Capture all 4 flags and achieve full root-level compromise Attacker OS: Kali Linux VirtualBox...

CVE-2026-82728

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a remote HTTP server to exhaust memory on the client host and cause a denial of service. Two HTTP/1 response-parser states accumulate server data without any cap. In lib/mint/http1.ex, decodestatusline/4...

CVE-2026-82728 Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a remote HTTP server to exhaust memory on the client host and cause a denial of service. Two HTTP/1 response-parser states accumulate server data without any cap. In lib/mint/http1.ex, decodestatusline/4...

CVE-2026-82728

Mint (the Elixir HTTP client library, elixir-mint/mint) suffers from unbounded buffering in its HTTP/1 response parser. In lib/mint/http1.ex, decode_status_line/4 and decode_body/5 accumulate unconsumed server data in conn.buffer without any size cap, because the :max_header_list_size budget is o...

CVE-2026-82729 Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoS

Inefficient Algorithmic Complexity vulnerability in elixir-mint mint allows a remote HTTP server to exhaust CPU on the client host and cause a denial of service. parsehexprefix/2 in lib/mint/http1/parse.ex folds each hex digit of a chunked response's chunk-size field into an arbitrary-precision...