CVE-2019-3980

CVE-2019-3980 このリポジトリは、カスタムC実行ファイルを使用してNessus POCを活用し、リモートホスト上でコマンドを実行してその出力を取得するために作成されました。 Pythonファイルは、Webサーバーを起動し、エクスプロイトを実行し、Webサーバーを介して結果を取得するために使用されます。 Cのexeは、エクスプロイトを介してターゲットにアップロードされます。 ターゲット上で実行されると、exeは指定されたIP/ポートにコールバックし、実行するコマンドを取得します（パスは /cmd です）。 コマンドが完了すると、exeは同じWebサーバーに出力を送信します。...

igoat

!GSOC...

CVE-2026-66054

The Apache Thrift C++ bindings are vulnerable to a Denial of Service (DoS) attack due to a flaw in how the software handles highly compressed data. Specifically, the C++ THeaderTransport component fails to enforce the configured maxFrameSize , allowing a remote, unauthenticated attacker to send s...

EUVD-2026-91627

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66055

The Apache Thrift framework (versions before 0.25.0 ) is vulnerable to an Allocation of Resources Without Limits or Throttling (CWE-770) flaw. Specifically, the TJSONProtocol component accepts a single JSON string or number that exceeds the configured size limit across multiple language bindings,...

kekeo

kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...

kekeo

kekeo kekeo は、Microsoft Kerberos を C 言語で操作するために（そして楽しみのために）開始した小さなツールボックスです。 ASN.1 ライブラリ kekeo では、Kerberos ASN.1 構造を扱うために外部の商用ライブラリを使用しています：OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html これは、Microsoft C プロジェクトで簡単に動作する 唯一の コード生成ライブラリでした。 多くの依存関係なしで動作します。 魔法のようなドキュメント。...

CVE-2023-29357-ExE

CVE-2023-29357-ExE Recreation of the SharePoint PoC for CVE-2023-29357 in C from LuemmelSec Usage: CVE-2023-29357.exe https://yoursharepoint.lol -v...

SharpSpray

SharpSpray SharpSpray is a Windows domain password spraying tool written in .NET C. Introduction SharpSpray is a C port of DomainPasswordSpray with enhanced and extra capabilities. This tool uses LDAP Protocol to communicate with the Domain active directory services. Features Can operate from...

Bramble

🌱 Bramble a new hacking Open source suite. 📜 Summary Bramble software has been designed for the bramble project. It incorporates many features of pentesting and IT Security. It's easy to use and completely editable. It allows beginners to learn hacking and gives more experienced users a...

copy-fail-CVE-2026-31431-cpp

此存储库没有 README。...

CVE-2026-66858 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml)

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

EUVD-2026-91585

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

CVE-2026-66858

Apache Thrift versions before 0.25.0 are vulnerable to a Denial of Service (DoS) attack due to a flaw in the protocol skip routine. Specifically, multiple language bindings fail to enforce recursion limits when processing skipped fields in incoming messages. A remote, unauthenticated attacker can...

nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

CVE-2026-94652

Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-92834

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-82458

Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

CVE-2026-85088

Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries install a default access manager for client sockets — TSSLSocketFactory does so in C++, and the accessManager property does so in D — which compares the peer certificate against the...

imaginaryC2

Imaginary C2 author: Felix Weyne website Twitter Imaginary C2 is a python tool which aims to help in the behavioral network analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to...