63879 matches found
ligolo-mp
Ligolo-MP : pivoting like a VPN, now with friends! Ligolo-MP is an advanced version of Ligolo-ng, with client-server architecture, enabling pentesters to play with multiple concurrent tunnels collaboratively. It manages all your TUNs automatically, while also providing a clean GUI to track...
chisel
Chisel Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server. Written in Go golang. Chisel is mainly useful for passing through firewalls, though it can also be used to provide a secure endpoint into your network. Table of...
PrettyTrusts
PrettyTrusts Try it out at:http://peewpw.github.io/PrettyTrusts Visualizes the output of PowerView's Get-DomainTrustMapping | Export-CSV -NoTypeInformation trusts.csv. Hand it the csv file and get a pretty diagram to play with! Should work with older and new PowerView outputs. Everything is...
DET
DET extensible Data Exfiltration Toolkit DET is provided AS IS, is a proof of concept to perform Data Exfiltration using either single or multiple channels at the same time. This is a Proof of Concept aimed at identifying possible DLP failures. This should never be used to exfiltrate sensitive/li...
whoishere.py
whoishere.py WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request...
mitmproxy2swagger
mitmproxy2swagger https://user-images.githubusercontent.com/5400940/168086818-c48f60ab-3f95-42eb-b435-c8b1a6326b81.mp4 A tool for automatically converting mitmproxy captures to OpenAPI 3.0 specifications. This means that you can automatically reverse-engineer REST APIs by just running the apps an...
server
Hashtopolis LoC Hashtopolis is a multi-platform client-server tool for distributing hashcat tasks to multiple computers. The main goals for Hashtopolis's development are portability, robustness, multi-user support, and multiple groups management. To report a bug, please create an issue and try to...
sunlogin_rce
Foreword Nothing much to say, I'll just put the tool and the vulnerable version here. It's great for local testing, but do not use it for illegal tests. Tested Sunflower client vulnerable version: 11.0.0.33162 The vulnerable client is provided in the source code. Port scanning uses:...
resterm
Resterm An API-as-code workbench for the terminal. resterm.app · docs Resterm is an API client that uses .http/.rest files as source code. Almost all the features live in .http files, so they are easy to review in Git or any other version control. You can send requests, test API flows, record HTT...
CVE-2026-98318
The Linux kernel contains a vulnerability in the SMB client where absolute native symlink targets are not properly validated before NT fixups when symlinkroot is unset. This allows an absolute target to be copied without conversion to an NT drive path, causing subsequent code to assume an NT pref...
CVE-2026-98175
A use-after-free vulnerability exists in the Linux kernel 's SMB client. The issue occurs because clean_demultiplex_info() cancels server->echo delayed work but fails to cancel server->reconnect work before calling kfree_sensitive(server). This can lead to a use-after-free read of server-&g...
CVE-2026-98174
The Linux kernel contains a vulnerability in the SMB client related to the TCP_Server_Info.rlist structure. The issue stems from using kzalloc, which incorrectly initializes ->next and ->prev pointers to NULL instead of pointing to the structure itself, causing list_empty() to return false ...
CVE-2026-98173
The Linux kernel contains a use-after-free vulnerability in the SMB client component within the cifs_try_adding_channels() function. The issue occurs because the function captures the next entry in ses->iface_list while holding iface_lock, but then drops the lock during cifs_ses_add_channel()....
CVE-2026-98172
The Linux kernel contains a vulnerability in the SMB client where an smbd_connection leak occurs. When an RDMA connection is successfully established via smbd_get_connection() but cifs_get_tcp_session() subsequently fails (for example, if kthread_create() returns an error), the error path incorre...
CVE-2026-98171
The Linux kernel contains a vulnerability in the SMB client 's handling of compound encrypted frames within the receive_encrypted_standard() function. The issue stems from pointer lifecycle errors and insufficient bounds checking. Specifically, a use-after-free can occur because next_buffer is no...
CVE-2026-98167
The Linux kernel SMB client contains a vulnerability in receive_encrypted_standard() where server->total_read incorrectly maintains the full decrypted frame size while processing sub-PDUs of a compound encrypted frame . This oversight causes cifs_handle_standard() to pass an incorrect size to ...
lsawhisper-bof
LSA Whisperer BOF A Cobalt Strike Beacon Object File BOF port of LSA Whisperer — the tool that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, without touching LSASS process memory even when PPL and Credential Guard is enabled. Why This Exists...
tinyshell
tinyshell Small PHP shell, Controlled by Python Client , connecting over protocol method features connect with direct session with no need for reverse connection . support password protection . can be binded to any file with no damage . using GET/POST request with error handling . usage the proje...
brook
Brook A cross-platform programmable network tool. Sponsor : Shiliew - Focuses on providing stable network services Server bash You may want to use brook link to customize some parameters Docs https://www.txthinking.com/brook.html Brook Script Gallery https://brook.app...