DET

DET extensible Data Exfiltration Toolkit DET is provided AS IS, is a proof of concept to perform Data Exfiltration using either single or multiple channels at the same time. This is a Proof of Concept aimed at identifying possible DLP failures. This should never be used to exfiltrate sensitive/li...

inspec_cve_2019_15224

a malicious rest-client gem On August 19, 2019, it was discovered that the rest-client gem had had several versions published containing malicious code. In discovering the malicious rest-client, several other new gems were determined to be carrying similar code. Coverage:...

CVE-2021-43032

CVE-2021-43032 In XenForo ≤ 2.2.7, a threat actor with access to the admin panel can save cross-site scripting payloads in any function within the application that accepts HTML code. A payload placed within the 'Advertising' functionality will execute globally on the client side, allowing for...

whoishere.py

whoishere.py Detección de Clientes WiFi - Identifica personas asignando un nombre a un dispositivo que realiza una solicitud de sonda inalámbrica...

whoishere.py

whoishere.py WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request...

mitmproxy2swagger

mitmproxy2swagger https://user-images.githubusercontent.com/5400940/168086818-c48f60ab-3f95-42eb-b435-c8b1a6326b81.mp4 A tool for automatically converting mitmproxy captures to OpenAPI 3.0 specifications. This means that you can automatically reverse-engineer REST APIs by just running the apps an...

server

Hashtopolis LoC Hashtopolis is a multi-platform client-server tool for distributing hashcat tasks to multiple computers. The main goals for Hashtopolis's development are portability, robustness, multi-user support, and multiple groups management. To report a bug, please create an issue and try to...

sunlogin_rce

Foreword Nothing much to say, I'll just put the tool and the vulnerable version here. It's great for local testing, but do not use it for illegal tests. Tested Sunflower client vulnerable version: 11.0.0.33162 The vulnerable client is provided in the source code. Port scanning uses:...

interactsh-web

Cliente Web de Interactsh Una interfaz web basada en Next.js para Interactsh Primeros Pasos Requisitos Previos Node.js 20+ requerido para React 19 npm, yarn o pnpm Instalación 1. Clona el repositorio: git clone https://github.com/projectdiscovery/interactsh-web.git cd interactsh-web 2. Instala la...

resterm

Resterm An API-as-code workbench for the terminal. resterm.app · docs Resterm is an API client that uses .http/.rest files as source code. Almost all the features live in .http files, so they are easy to review in Git or any other version control. You can send requests, test API flows, record HTT...

CVE-2026-98318

The Linux kernel contains a vulnerability in the SMB client where absolute native symlink targets are not properly validated before NT fixups when symlinkroot is unset. This allows an absolute target to be copied without conversion to an NT drive path, causing subsequent code to assume an NT pref...

CVE-2026-98175

A use-after-free vulnerability exists in the Linux kernel 's SMB client. The issue occurs because clean_demultiplex_info() cancels server->echo delayed work but fails to cancel server->reconnect work before calling kfree_sensitive(server). This can lead to a use-after-free read of server-&g...

EUVD-2026-93102

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCPServerInfo.rlist is allocated via kzalloc which zeros both -next and -prev to NULL instead of pointing to itself, making listempty always return false and listadd...

CVE-2026-98174

The Linux kernel contains a vulnerability in the SMB client related to the TCP_Server_Info.rlist structure. The issue stems from using kzalloc, which incorrectly initializes ->next and ->prev pointers to NULL instead of pointing to the structure itself, causing list_empty() to return false ...

CVE-2026-98173

The Linux kernel contains a use-after-free vulnerability in the SMB client component within the cifs_try_adding_channels() function. The issue occurs because the function captures the next entry in ses->iface_list while holding iface_lock, but then drops the lock during cifs_ses_add_channel()....

EUVD-2026-93100

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbdconnection leak on cifsgettcpsession error When an RDMA connection is successfully established via smbdgetconnection but cifsgettcpsession later fails e.g. kthreadcreate returns an error, the error path frees...

CVE-2026-98172

The Linux kernel contains a vulnerability in the SMB client where an smbd_connection leak occurs. When an RDMA connection is successfully established via smbd_get_connection() but cifs_get_tcp_session() subsequently fails (for example, if kthread_create() returns an error), the error path incorre...

CVE-2026-98171

The Linux kernel contains a vulnerability in the SMB client 's handling of compound encrypted frames within the receive_encrypted_standard() function. The issue stems from pointer lifecycle errors and insufficient bounds checking. Specifically, a use-after-free can occur because next_buffer is no...

EUVD-2026-93098

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB struct field reads in movesmb2eatocifs In movesmb2eatocifs, the while srcsize 0 loop condition is insufficient. It allows iteration to continue even if the remaining srcsize is too small to contain a complete...

CVE-2026-98167

The Linux kernel SMB client contains a vulnerability in receive_encrypted_standard() where server->total_read incorrectly maintains the full decrypted frame size while processing sub-PDUs of a compound encrypted frame . This oversight causes cifs_handle_standard() to pass an incorrect size to ...