BlueBunny

C2-решение, которое взаимодействует напрямую через Bluetooth-Low-Energy с вашим Bash Bunny Mark II. Отправляйте вашему Bash Bunny все необходимые инструкции просто по воздуху. Содержание Обзор Установка и запуск Ручная связь с Bash Bunny через Python Устранение неполадок В разработке...

DLPwn

DLPwn Предотвращение утечки данных через Bluetooth-колонку DLPwn — это инструмент Red Team, предназначенный для эксфильтрации файлов в обход систем безопасности, таких как EDR Endpoint Detection and Response, XDR Extended Detection and Response, DLP Data Loss Prevention и, в более широком смысле,...

QRExfil

QRExfiltrate Этот инструмент — утилита командной строки, которая позволяет преобразовать любой бинарный файл в GIF-анимацию из QR-кодов. Затем данные можно визуально восстановить, что позволяет выполнить эксфильтрацию данных в системах с воздушным зазором. Он был разработан как доказательство...

ONUS

ONUS - 자동 취약성 평가 및 침투 테스트 maverickaayush가 제작했습니다. 로컬 호스팅, 에어갭air-gapped 방식의 VAPT 도구: 승인된 대상 도메인을 지정하면 8개의 스캐닝 모듈을 병렬로 실행하고, 모든 발견 항목을 결정론적으로CVSS v3.1 점수화하며, 로컬 LLM을 통해 선택적으로 AI 생성 평이한 영어 설명을 추가하고, PDF 보고서와 실시간 웹 대시보드를 생성합니다. 외부 API 호출 없음 - 모든 것이 자체 네트워크에서 실행됩니다. ONUS 실행 방법은 두 가지입니다: 자체 호스팅이 저장소:...

qvm-create-windows-qube

Qvm-Create-Windows-Qube Быстро, легко и безопасно разворачивайте новые Windows-кубы О программе Qvm-Create-Windows-Qube — это инструмент для быстрой и удобной установки чистых новых Windows-кубов с автоматической установко...

tiuku

Tiuku Tiuku는 다양한 종류의 시스템과 환경에서 보안 관련 정보를 스캔하고 그 결과를 브라우저 기반 사용자 인터페이스로 표시하는 도구입니다. 또한 일부 문제를 자동으로 감지하고 강조 표시할 수 있습니다. 데이터 수집 스크립트와 사용자 인터페이스 모두 다운로드하여 완전히 오프라인에서 실행할 수 있으므로, 단절된 환경air-gapped에서도 작동합니다. Tiuku는 다른 보안 스캐닝 도구와 다음과 같은 점에서 차별화됩니다: 여러 플랫폼을 지원하며, 모든 플랫폼에서 통합된 사용자 경험을 제공합니다. M365 같은 SaaS...

nexus-os

Nexus OS Управляемая агентная операционная система ИИ 66 Крейтов | 675 Команд | 86 Страниц | 5,229 Тестов | 10/10 OWASP | Ноль заглушек Локально-ориентированная. С воздушным зазором. Готова к посткванту. Создана на Rust. Архитектура | Быстрый старт | Возможности | Статус аудита | Документация Nex...

CVE-2025-26686-poc-A-critical-RCE-vulnerability-in-Windows-TCP-IP-stack

Этот PoC был проверен в контролируемой, изолированной среде. Конфиденциальные детали эксплойта были удалены вырезаны — обращайтесь к сопровождающему за доступом, если у вас есть письменное разрешение...

NextPass

🚀 NextPass 프라이버시 중심의 AI 비밀번호 사전 생성기. NextPass는 규칙 기반 논리와 대규모 언어 모델을 모두 사용하여 비밀번호를 생성하는 특화된 비밀번호 사전 생성기입니다. 보안 연구자를 위해 설계되었으며, 이동 중에도 비밀번호 사전을 생성할 수 있는 오프라인 생성을 제공하고, 대상 데이터에 대한 엄격한 프라이버시 에어갭을 유지하면서 AI를 활용하여 인간과 유사한 비밀번호 패턴을 예측합니다. 🛡️ 프라이버시 우선 AI 아키텍처 대부분의 AI 도구는 민감한 대상 데이터이름, 생일, 취미를 LLM에 직접 전송하여...

Astra Linux – Vulnerability in Linux, Linux 5.10

“Specifically timed and handcrafted traffic can cause internal errors in a WLAN device, leading to improper Layer 2 Wi-Fi encryption. This may result in information disclosure over the air for a specific set of traffic.” In Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon...

CVE-2026-19787

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=savecargotype. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-19787 SourceCodester Air Cargo Management System Master.php save_cargo_type sql injection

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=savecargotype. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-19787

The CVE-2026-19787 affects SourceCodester Air Cargo Management System 1.0. The vulnerability is an SQL injection via manipulation of the argument ID in the file /classes/Master.php?f=save_cargo_type, which can be triggered remotely. Public exploit information exists. This entry documents the affe...

EUVD-2026-58572

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=savecargotype. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-19787

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=savecargotype. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2025-71411

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71411 In CPDLC, Broadcast Control Frames Can Disconnect Multiple Aircraft Simultaneously

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71411

The CVE-2025-71411 entry describes a CPDLC-related issue where broadcast control frames can remotely disconnect multiple aircraft, causing delayed clearances and ATC overload. Affected component is broadcast/control frames in CPDLC; root cause and vendor/version details are not specified in the p...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.2 security update

Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for the Red Hat Ansible Automation Portal bootable container image. Red Hat Ansible Automation Platform 2.2 delivers the Ansible Automation Portal as a bootable...

CVE-2026-66732

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...