PT-2026-87648

News: Windows Kerberos CVE-2026-69676 CVSS 8.8 lets a low-priv domain user replay a crafted auth request and run code on a DC; Exploitation More Likely; patch DCs now. https://t.co/eME8i0s2er...

CVE-2026-54424

CVE-2026-54424 Exploiting Parsec for Windows versions 150-104a to gain: Remote code execution as SYSTEM Arbitrary file read as SYSTEM NTLM hash capture for SYSTEM The exploits stem from the same vulnerability, but the actual paths diverge. Technical writeup:...

mimikat_ssp

mimikatssp Windows Password Capture, Bypass Antivirus...

AudioServer-Voip-Recorder

Goal: Demonstrate VoIP stream capture by hooking Android's audioserver specifically libaudioflinger.so and recording uplink mic and downlink speaker PCM buffers when the system is in communication mode. Project Design & Methodology Architecture: Controller App Android UI with 9 buttons to manage...

CVE-2022-29593

CVE-2022-29593 - Authentication Bypass by Capture Replay Dingtian-DT-R002 Title Authentication Bypass by Capture-replay Published: Version: 1.0 Vendor: Shenzhen Dingtian Technologies Co.,Ltd Product: 2 Channel Relay Board/Relay Card Version affected: Firmware V3.1.276A Product - Dingtian DTR004 A...

CVE-2026-42533-Config-Scanner

nginx capture-clobber scanner A read-only static scanner that flags nginx configurations vulnerable to the complexvalue two-pass capture-clobbering bug class F5/nginx SIRT advisory, July 2026. It parses your config and reports the vulnerable pattern with the reason and location. It does not explo...

CVE-2026-42945-nginx-rift-poc

NGINX Rift — CVE-2026-42945 RCE proof-of-concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. Enables unauthenticated remote code execution against servers using rewrite ... ?... + set capture combinations. Original vulnerability...

pywintrace

ETW Event Tracing for Windows ETW es una facilidad de rastreo que permite a un usuario registrar eventos en un archivo o búfer. Una descripción general de ETW se puede encontrar aquí. La arquitectura básica incluye un Proveedor, un Controlador y un Consumidor. El controlador define y controla una...

Xenotix-Python-Keylogger

Xenotix Python Keylogger for Windows IMPORTANT: PROJECT DEVELOPMENT AND SUPPORT IS DISCONTINUED usage: xenotixpythonlogger.py mode optional mode: local: store the logs in a file keylogs.txt remote: send the logs to a Google Form. You must specify the Form URL and Field Name in the script. email:...

[slackware-security] libpcap

New libpcap packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libpcap-1.10.7-i586-1slack15.0.txz: Upgraded. This libpcap release fixes a number of vulnerabilities. For more information, see:...

SCRAPPER

🕷️ سكربّر من BertUI مراقب الجلسة لأتمتة الويب سكربّر ليس أداة كشط — إنه مراقب جلسة يلتقط بيانات متصفحك الحقيقية لاستخدامها في أي أداة أتمتة. مبني على إطار عمل BertUI React GitHub: BunElysiaReact/SCRAPY لا نطاق. لا سحابة. كل شيء محلي. كل شيء لك. 📋 جدول المحتويات المشكلة التي يحلها سكربّر ما هو...

wifit3

wifit3: USB Wireless Auditor A wireless auditor that runs on Linux and Windows, comes with its own built-in drivers. At least one of the supported USB adapters is required. wifit3 is fundamentally different from its predecessor, wifite2: Only supports certain popular USB cards see Supported...

teamcity-CVE-2026-63077-pcap

teamcity-CVE-2026-63077-pcap teamcity teamcity-CVE-2026-63077 exploitation pcap info: https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/ https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077/ Target: teamcity server 2025.11.3 docker 192.168.64.31 po...

hostapd-mana

hostapd-mana Overview A featureful rogue access point first presented at Defcon 22 by Dominic White @singe & Ian de Villiers @ sensepost [email protected] Documentation Check the wiki for information of getting and using hostapd-mana. Features KARMA/MANA Mode - respond to any device looking...

CVE-2026-42945

NGINX CVE-2026-42945 Rift — local defensive lab Two Dockerized NGINX instances: pattern-based “risky rewrite” snippet vs remediated named-capture snippet, pinned to nginx:1.30.0-alpine / nginx:1.30.1-alpine. Scripts run benign curls, dump nginx -T, and archive evidence. For configuration review...

CVE-2020-13941

CVE-2020-13941: Abusing UNC Paths in Windows Environments in Apache Solr Multiple Solr endpoints have been found to accept absolute paths. In Windows systems these absolute path can be forced to make the OS connect to an attacker-controlled SMB server. This behaviour may result in attacks such as...

Sapito

Sapito Authors: Sebastian Garcia [email protected], @eldracote, Veronica Valeros [email protected], @verovaleros About Sapito Sapito is a multicast DNS mDNS sniffer and interpreter written in Python. Sapito sniffs packets from a pcap or interface and interprets the findings. This means...

CVE-2026-23751-poc

CVE-2026-23751-PoC Proof-of-concept implementation of the .NET HTTP Remoting technique described in Code White's NewRemotingTricks, targeting Tungsten Automation Kofax Capture. CVE-2026-23751 Title: Tungsten Automation Kofax Capture Unauthenticated File Read/Write and Command Execution via .NET...

CVE-2021-4034-Capture-the-flag

CVE-2021-4034-Capture-the-flag Video Demonstration of Capture the Flag: https://www.youtube.com/watch?v=1N3x23X4FMk&t=103s...

ddos-traffic-monitor

DDoS Traffic Monitor A real-time traffic monitoring tool that detects and displays network traffic volume per IP address to identify potential DDoS attacks. The tool is built with Python 2.7 using Flask as the backend and a web-based frontend for visualization. Features Real-time Monitoring :...