QRExfil

QRExfiltrate This tool is a command line utility that allows you to convert any binary file into a QRcode GIF. The data can then be reassembled visually allowing exfiltration of data in air gapped systems. It was designed as a proof of concept to demonstrate weaknesses in DLP software; that is, t...

tiuku

Tiuku Tiuku is a tool for scanning various kinds of systems and environments for security related information and displaying the results in a browser-based user interface. It can also detect and highlight some issues automatically. Both the data collection scripts and the user interface can be...

BlueBunny

C2 solution that communicates directly over Bluetooth-Low-Energy with your Bash Bunny Mark II. Send your Bash Bunny all the instructions it needs just over the air. Table of contents Overview Installation & Start Manual communication with the Bash Bunny through Python Troubleshooting Working on...

DLPwn

DLPwn Предотвращение утечки данных через Bluetooth-колонку DLPwn — это инструмент Red Team, предназначенный для эксфильтрации файлов в обход систем безопасности, таких как EDR Endpoint Detection and Response, XDR Extended Detection and Response, DLP Data Loss Prevention и, в более широком смысле,...

ONUS

ONUS - 자동 취약성 평가 및 침투 테스트 maverickaayush가 제작했습니다. 로컬 호스팅, 에어갭air-gapped 방식의 VAPT 도구: 승인된 대상 도메인을 지정하면 8개의 스캐닝 모듈을 병렬로 실행하고, 모든 발견 항목을 결정론적으로CVSS v3.1 점수화하며, 로컬 LLM을 통해 선택적으로 AI 생성 평이한 영어 설명을 추가하고, PDF 보고서와 실시간 웹 대시보드를 생성합니다. 외부 API 호출 없음 - 모든 것이 자체 네트워크에서 실행됩니다. ONUS 실행 방법은 두 가지입니다: 자체 호스팅이 저장소:...

qvm-create-windows-qube

Qvm-Create-Windows-Qube Быстро, легко и безопасно разворачивайте новые Windows-кубы О программе Qvm-Create-Windows-Qube — это инструмент для быстрой и удобной установки чистых новых Windows-кубов с автоматической установко...

nexus-os

Nexus OS Управляемая агентная операционная система ИИ 66 Крейтов | 675 Команд | 86 Страниц | 5,229 Тестов | 10/10 OWASP | Ноль заглушек Локально-ориентированная. С воздушным зазором. Готова к посткванту. Создана на Rust. Архитектура | Быстрый старт | Возможности | Статус аудита | Документация Nex...

CVE-2025-26686-poc-A-critical-RCE-vulnerability-in-Windows-TCP-IP-stack

Этот PoC был проверен в контролируемой, изолированной среде. Конфиденциальные детали эксплойта были удалены вырезаны — обращайтесь к сопровождающему за доступом, если у вас есть письменное разрешение...

NextPass

🚀 NextPass 프라이버시 중심의 AI 비밀번호 사전 생성기. NextPass는 규칙 기반 논리와 대규모 언어 모델을 모두 사용하여 비밀번호를 생성하는 특화된 비밀번호 사전 생성기입니다. 보안 연구자를 위해 설계되었으며, 이동 중에도 비밀번호 사전을 생성할 수 있는 오프라인 생성을 제공하고, 대상 데이터에 대한 엄격한 프라이버시 에어갭을 유지하면서 AI를 활용하여 인간과 유사한 비밀번호 패턴을 예측합니다. 🛡️ 프라이버시 우선 AI 아키텍처 대부분의 AI 도구는 민감한 대상 데이터이름, 생일, 취미를 LLM에 직접 전송하여...

Astra Linux – Vulnerability in Linux, Linux 5.10

“Specifically timed and handcrafted traffic can cause internal errors in a WLAN device, leading to improper Layer 2 Wi-Fi encryption. This may result in information disclosure over the air for a specific set of traffic.” In Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon...

CVE-2026-19787

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=savecargotype. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-19787 SourceCodester Air Cargo Management System Master.php save_cargo_type sql injection

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=savecargotype. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-19787

The CVE-2026-19787 affects SourceCodester Air Cargo Management System 1.0. The vulnerability is an SQL injection via manipulation of the argument ID in the file /classes/Master.php?f=save_cargo_type, which can be triggered remotely. Public exploit information exists. This entry documents the affe...

EUVD-2026-58572

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=savecargotype. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-19787

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=savecargotype. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2025-71411

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71411 In CPDLC, Broadcast Control Frames Can Disconnect Multiple Aircraft Simultaneously

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71411

The CVE-2025-71411 entry describes a CPDLC-related issue where broadcast control frames can remotely disconnect multiple aircraft, causing delayed clearances and ATC overload. Affected component is broadcast/control frames in CPDLC; root cause and vendor/version details are not specified in the p...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.2 security update

Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for the Red Hat Ansible Automation Portal bootable container image. Red Hat Ansible Automation Platform 2.2 delivers the Ansible Automation Portal as a bootable...

CVE-2026-66732

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...