ByteCaster

ByteCaster Swiss Army Knife for payload encryption, obfuscation, and conversion to byte arrays – all in a single command! It supports 3 encryption algorithms, 4 encoding / obfuscation algorithms and 14 output formats. Installation Download the compiled binary or compile Go source code. Usage...

Ivanti-Connect-Secure-Logs-Parser

Ivanti Secure Connect Logs Parser This repository provides a Python script designed to convert Ivanti Secure Connect .vc0 log files into CSV format for digital forensics and incident response. In particular, the parser: Extracts timestamps from Ivanti log files notably from .vc0 files. Converts...

EUVD-2026-93553

ImageSharp: ICC LUT16 output channel count can write beyond Vector4...

CVE-2024-2961

CVE-2024-2961 CVE-2024–2961 Security Issue Mitigation Script Description This repository contains a Bash script to check and mitigate the buffer overflow vulnerability identified in GNU libc glibc versions 2.39 and older, known as CVE-2024-2961. This vulnerability affects PHP when the iconv...

shellcode2assembly

ShellcodeToAssembly Replace in shellcodetoasm.py with your shellcode. Endian type is little endian. shellcode = '' Installation git clone https://github.com/blacknbunny/ShellcodeToAssembly.git && cd ShellcodeToAssembly/ && pip2 install -r requirements.txt && python2 shellcodetoasm.py Modules manu...

CVE-2026-106567

A flaw was found in ImageMagick. An attacker can cause a Denial of Service DoS by providing a specially crafted Photoshop Document PSD file for processing. Due to an integer-conversion error in the PSD decoder on 32-bit systems, the application enters an infinite loop, causing it to hang and beco...

EXCELntDonut

| \ / / | | | | || \ | | | | \ / | | | | | | ' | | | | |/ | ' | | | | | | | / \ || || || | | | || || | | | | | || | | |//\|||| |||/ /|| ||,|| by @JoeLeonJr @FortyNorthSec EXCELntDonut is a XLM Excel 4.0 macro generator. Start with C source code EXE and end with a XLM Excel 4.0 macro that...

CVE-2024-2961-Remote-File-Read

CVE-2024-2961 Remote File Read This script demonstrates how to exploit a vulnerability in systems using the iconv library when it mishandles character encoding conversions, as described in CVE-2024-2961. It allows an attacker to read arbitrary files from the server by taking advantage of PHP filt...

DEBIAN-CVE-2026-106567

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in...

CVE-2026-106567

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in...

CVE-2020-29599

CVE-2020-29599 Библиотека Artifex ImageMagick Версии Artifex 6.9.11-40 и 7.0.10-40: файлы SVG будут преобразованы в изображения...

EUVD-2026-94382

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in...

ntlmv1-multi

Мультиинструмент NTLMv1 Этот инструмент преобразует NTLMv1-хэши в NTLM, точнее, приводит ответы на challenge NTLMv1 к формату, который можно взломать с помощью hashcat в режиме 14000. Вычисление CT3 Если указать --ct3, инструмент сам вычислит последние 4 символа NTLM-хэша; если указать --json, то...

POC-CVE-2024-38820

CVE-2024-38820 Proof of Concept Overview This project demonstrates CVE-2024-38820 , a vulnerability in Spring Framework's DataBinder that allows bypassing disallowedFields protection due to locale-dependent case conversion issues. Vulnerability Details CVE ID : CVE-2024-38820 Affected Component :...

Adobe-Flash-Exploits_17-18

Adobe Flash Exploits CVE-2015-3090, CVE-2015-3105, CVE-2015-5119, and CVE-2015-5122 Python3 Script Converted Metasploit exploits for Adobe Flash vulnerabilities CVE-2015-3090, CVE-2015-3105, CVE-2015-5119, and CVE-2015-5122 to a Python3 script. Information This script will host a web server that...

flare-floss

Scripts FLOSS FLOSS permet de convertir sa sortie en scripts pour divers outils. Veuillez consulter les scripts de rendu dans ce répertoire. De plus, un autre plugin pour IDA permet à FLOSS d'extraire automatiquement les chaînes obfusquées et de les appliquer au module actuellement chargé dans ID...

CVE-2023-25203

CVE-2023-25203: Application vulnerable to SSRF Server Side Request Forgery attacks Description CVE-2023-25203 identifies a vulnerability within the Therefore solution, which is susceptible to Server-Side Request Forgery SSRF attacks due to its use of Aspose software for converting uploaded files...

http2smugl

http2smugl Cet outil aide à détecter et exploiter le smuggling de requêtes HTTP dans les cas où il peut être réalisé via la conversion HTTP/2 - HTTP/1.1 par le serveur frontal. Le schéma est le suivant : 1. Un attaquant envoie une requête HTTP/2 conçue au serveur cible, que nous appelons frontal...

oregami

Oregami """ À quoi sert ce registre ? Hmm.. Je vais juste le renommer en veryuniquename, faire une recherche textuelle, et trouver toutes les références ! Ok.. J'attends la fin de la recherche.. d'une minute à l'autre.. Fini ! Maintenant, je dois juste comprendre lesquels des résultats de recherc...

asnmap

Go CLI и библиотека для быстрого сопоставления сетевых диапазонов организации с использованием информации ASN. Возможности • Установка • Использование • Запуск asnmap • Присоединиться к Discord Возможности Поиск ASN → CIDR Поиск ORG → CIDR Поиск DNS → CIDR Поиск IP → CIDR Ввод ASN/DNS/IP/ORG Выво...