SMBCompScan

SMBCompScan Scanner script to identify hosts vulnerable to CVE-2020-0796 Advisory Disclaimer This script can help to identify machines with the SMBv3 vulnerablity by checking for enabled compression. Still, it might return "vulnerable" for machines which have KB4551762 installed. Requirements Per...

DisableSMBCompression

DisableSMBCompression CVE-2020-0796 脆弱性の緩和策 - Active Directory 管理用テンプレート 新しい SMB3 の脆弱性について私たちが知っている限りでは、SMB3 サーバー向けに以下の緩和策が提供されています。 Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" DisableCompression -Type DWORD -Value 1 -Force...

wa-tunnel

wa-tunnel - Whatsapp を介した TCP トンネリング これは Baileys をベースにしたコードで、2つのWhatsappアカウントを介してTCPデータをトンネリングできます。 これは様々な状況で使用できます。例えば、WhatsAppデータが無制限のネットワークキャリアや、ソーシャルネットワークデータが無制限の飛行機内などです。 Baileysを使用しているのは、WSベースのマルチデバイスWhatsAppライブラリであり、将来的にはTermuxなどを使用してAndroidでも使用できる可能性があるからです。...

zipdefrag

This Dump Is A Puzzle or Advanced Shotgun Parsing for Fools and Rebels il était une fois Once upon a time, dear reader, on a dark and stormy night, your faithful author stumbled upon a perplexing and mysterious situation - a system where the only thing preventing chip off memory analysis and...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ Advanced MongoDB Memory Leak Exploit Tool Keep Learning | Keep Hacking with Alexcyberx 🔥 About MongoBleed-Pro is an advanced exploitation tool for CVE-2025-14847 , a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security...

CVE-2026-32945

CVE-2026-32945 PJSIP DNS Compression Pointer Heap OOB Read Remote DoS Description getnamelen and getname in pjlib-util/src/pjlib-util/dns.c read a 2-byte DNS compression pointer via pjmemcpy&offset, p, 2 without checking that both bytes lie within the packet buffer. When a 0xC0 byte compression...

cart

CaRT Compressed and RC4 Transport The CaRT file format is used to store/transfer malware and its associated metadata. It neuters the malware so it cannot be executed and encrypts it so anti-virus software cannot flag the CaRT file as malware. Advantages FAST: CaRT is just as fast as zipping a fil...

dnsteal

dnsteal v 2.0 これは、偽のDNSサーバーであり、DNSリクエストを通じて被害者のマシンからファイルをステルス的に抽出できるようにするものです。 以下に、複数ファイル転送と単一の詳細ファイル転送の例を示すいくつかの画像を示します。 複数ファイルのサポート Gzip圧縮対応 サブドメイン、サブドメインあたりのバイト数、ファイル名の長さのカスタマイズをサポート ヘルプは以下を参照： ヘルプが理解できない場合は、デフォルトオプションでプログラムを使用してください！ python dnsteal.py 127.0.0.1 -z -v...

CVE-2023-36319

CVE-2023-36319 By modifying the compression plug-in command, the attacker can cause the server to execute arbitrary commands during the upload process. Only used for authorized security testing, please do not use it for illegal purposes. Violations have nothing to do with the author. Affected...

CVE-2025-14847-MongoBleed-Exploit

CVE-2025-14847 - MongoBleed 👨‍💻 Author: Furkan KAYAPINAR @FurkanKAYAPINAR ⚠️ EDUCATIONAL PURPOSE ONLY Lab environment and exploit script for the critical unauthenticated memory-leak vulnerability in MongoDB Server. 📋 Table of Contents Vulnerability Overview Affected Versions Installation Lab...

CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 Vulnerability Environment with a PoC https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An client-side exploit of the Server...

CVE-2026-49975-HTTP-2-Bomb

A triage not exploitation tool to identify attack surfaces exposed to CVE-2026-49975 — "HTTP/2 Bomb". ⚠️ This script does not send attack payloads. It only makes normal HTTP requests and analyzes response headers to flag hosts that warrant manual version/patch verification. About CVE-2026-49975...

Mongobleed-Detector-CVE-2025-14847

MongoBleed Scanner A professional vulnerability scanner for CVE-2025-14847 MongoBleed - MongoDB Memory Leak Vulnerability. +================================================================+ | MongoBleed Scanner v1.3.0 | | CVE-2025-14847 - MongoDB Memory Leak Vulnerability |...

POC-CVE-2026-49975

-red CVE-2026-49975 HTTP/2 Bomb — HPACK 压缩炸弹 + 流控保持 PoC 由 naheeju 进行的安全研究 PoC ⚠️ 这是一个可用的内存耗尽型 DoS 工具——不是玩具。 它会打开流，迫使目标分配内存，并通过 HTTP/2 流控技巧保持这些流处于打开状态。只要进程在运行，它就会持续保持连接，并在服务器断开连接时自动重连 ——它不会自行停止。影响程度直接取决于 --threads、--streams 和 --headers。停止进程（Ctrl+C）会释放被保持的流，让服务器得以恢复，但默认操作方式绝非"温和"——请将每次运行都视为实弹测试。 1...

Rocky Linux 10.2 [CIQ] Security Update: mod_http2 / mod_http2-debuginfo / mod_http2-debugsource (crlsa-2026_25225)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202625225 advisory. httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 Tenable has extracted the preceding description block...

Rocky Linux 9.6 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-dracut / etc (ALMALINUX9.6:CLSA-2026:1790264968)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790264968 advisory. - In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and...

Rocky Linux 8 [CIQ] Security Update: mingw32-zlib / mingw32-zlib-debuginfo / mingw32-zlib-static / etc (crlsa-2022_7813)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227813 advisory. zlib: A flaw found in zlib when compressing not decompressing certain inputs CVE-2018-25032 Tenable has extracted the preceding description block directly from the...

Rocky Linux 8 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-debugsource / httpd-devel / etc (crlsa-2026_25090)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202625090 advisory. httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 Tenable has extracted the preceding description block direct...

Rocky Linux 8 [CIQ] Security Update: zlib / zlib-debuginfo / zlib-debugsource / zlib-devel / zlib-static (crlsa-2022_1642)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20221642 advisory. zlib: A flaw found in zlib when compressing not decompressing certain inputs CVE-2018-25032 Tenable has extracted the preceding description block directly from the...

CentOS Linux 8 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-libs (CENTOS-STREAM8:CLSA-2026:1790264021)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1790264021 advisory. - In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and...