kraken

Warning I have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement the server needs some work too. In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel...

CVE-2024-52510

Nextcloud X-E2EE-SIGNATURE Bypass POC Summary During normal operation of Nextcloud's E2EEv2 protocol, clients cryptographically sign folder-metadata before uploading to the server. This ensures the metadata has not been tampered with when it is re-fetched for the purposes of file-sharing or synci...

btlejack

BtleJack: a new Bluetooth Low Energy swiss-army knife Btlejack provides everything you need to sniff, jam and hijack Bluetooth Low Energy devices. It relies on one or more BBC Micro:Bit . devices running a dedicated firmware. You may also want to use anAdafruit's Bluefruit LE sniffer or a nRF5182...

sak1to-shell

sak1to-shell Multi-threaded, multi-os/platform Linux/Windows c2 server and Windows reverse TCP shell client both written in C. Compiling reverse TCP shell client with i686-w64-mingw32-gcc: i686-w64-mingw32-gcc sakitorevshell.c lib/windows/sakitowincore.c -o sakitorevshell.exe -s -ffunction-sectio...

TLS-Scanner

TLS-Scanner TLS-Scanner es una herramienta para ayudar a pentesters e investigadores de seguridad en la evaluación de configuraciones de servidores y clientes TLS. Tenga en cuenta: TLS-Scanner es una herramienta de investigación destinada a desarrolladores de TLS, pentesters, administradores e...

cve-2019-1108

CVE-2019-1108 Exploitation CVE-2019-1108 Remote Desktop Protocol Client Information Disclosure Vulnerability Published: 07/09/2019 | Last Updated : 11/19/2019 MITRE CVE-2019-1108 An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its...

pybatfish

有问题、反馈或功能请求？加入我们在Slack! 上的社区！ Pybatfish Pybatfish 是 Batfish 的 Python 客户端。 什么是 Batfish？ Batfish 是一个网络验证工具，通过分析网络设备的配置，为安全性、可靠性和合规性提供正确性保证。它从设备配置构建完整的网络行为模型，并发现网络策略（内置、用户定义和最佳实践）的违规行为。 Batfish 的一个主要用途是在部署 之前 验证配置变更（尽管它也可以用于验证已部署的配置）。部署前验证是现有网络自动化工作流中的一个关键缺口。通过在自动化工作流中集成...

ip-finder-cli

IPFinder CLI Command Line Interface https://ipfinder.io/ Supports Single IP Address, asn, ranges, firewall as Input Supports Bulk Exports Results to Screen or to An Output File Supports IPv4 and IPv6 Supports ASN number , RANGES , Firewall Getting Started sign up for a free account at...

CVE-2021-21985

CVE-2021-21985 The vSphere Client HTML5 contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. VMware has evaluated the severity of this issue to be in the Critical severity range with a...

PrettyTrusts

PrettyTrusts Try it out at:http://peewpw.github.io/PrettyTrusts Visualizes the output of PowerView's Get-DomainTrustMapping | Export-CSV -NoTypeInformation trusts.csv. Hand it the csv file and get a pretty diagram to play with! Should work with older and new PowerView outputs. Everything is...

njutils

njutils ./njclient.py 192.168.56.101 5552 -k "You won't find keylogs here" -u "5k1d d357r0y3r" -p "m41nfr4m3-3000" -f "TRACKING LOCATION - PREPARING DRONE STRIKE" -o "Mac OSX 9.9" Use njclient.py -K option to open your l33t ascii art upon successfully connecting. Example: ./njclient.py...

DET

DET extensible Data Exfiltration Toolkit DET is provided AS IS, is a proof of concept to perform Data Exfiltration using either single or multiple channels at the same time. This is a Proof of Concept aimed at identifying possible DLP failures. This should never be used to exfiltrate sensitive/li...

inspec_cve_2019_15224

a malicious rest-client gem On August 19, 2019, it was discovered that the rest-client gem had had several versions published containing malicious code. In discovering the malicious rest-client, several other new gems were determined to be carrying similar code. Coverage:...

CVE-2021-43032

CVE-2021-43032 In XenForo ≤ 2.2.7, a threat actor with access to the admin panel can save cross-site scripting payloads in any function within the application that accepts HTML code. A payload placed within the 'Advertising' functionality will execute globally on the client side, allowing for...

whoishere.py

whoishere.py WIFI客户端检测 - 通过为执行无线探测请求的设备分配名称来识别人员。...

whoishere.py

whoishere.py WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request...

sunlogin_rce

Foreword Nothing much to say, I'll just put the tool and the vulnerable version here. It's great for local testing, but do not use it for illegal tests. Tested Sunflower client vulnerable version: 11.0.0.33162 The vulnerable client is provided in the source code. Port scanning uses:...

CVE-2026-98318

The Linux kernel contains a vulnerability in the SMB client where absolute native symlink targets are not properly validated before NT fixups when symlinkroot is unset. This allows an absolute target to be copied without conversion to an NT drive path, causing subsequent code to assume an NT pref...

CVE-2026-98175

A use-after-free vulnerability exists in the Linux kernel 's SMB client. The issue occurs because clean_demultiplex_info() cancels server->echo delayed work but fails to cancel server->reconnect work before calling kfree_sensitive(server). This can lead to a use-after-free read of server-&g...

EUVD-2026-93102

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCPServerInfo.rlist is allocated via kzalloc which zeros both -next and -prev to NULL instead of pointing to itself, making listempty always return false and listadd...