ntlmv1-multi

Мультиинструмент NTLMv1 Этот инструмент преобразует NTLMv1-хэши в NTLM, точнее, приводит ответы на challenge NTLMv1 к формату, который можно взломать с помощью hashcat в режиме 14000. Вычисление CT3 Если указать --ct3, инструмент сам вычислит последние 4 символа NTLM-хэша; если указать --json, то...

flare-floss

Scripts FLOSS FLOSS permet de convertir sa sortie en scripts pour divers outils. Veuillez consulter les scripts de rendu dans ce répertoire. De plus, un autre plugin pour IDA permet à FLOSS d'extraire automatiquement les chaînes obfusquées et de les appliquer au module actuellement chargé dans ID...

http2smugl

http2smugl Cet outil aide à détecter et exploiter le smuggling de requêtes HTTP dans les cas où il peut être réalisé via la conversion HTTP/2 - HTTP/1.1 par le serveur frontal. Le schéma est le suivant : 1. Un attaquant envoie une requête HTTP/2 conçue au serveur cible, que nous appelons frontal...

oregami

Oregami """ À quoi sert ce registre ? Hmm.. Je vais juste le renommer en veryuniquename, faire une recherche textuelle, et trouver toutes les références ! Ok.. J'attends la fin de la recherche.. d'une minute à l'autre.. Fini ! Maintenant, je dois juste comprendre lesquels des résultats de recherc...

asnmap

Go CLI и библиотека для быстрого сопоставления сетевых диапазонов организации с использованием информации ASN. Возможности • Установка • Использование • Запуск asnmap • Присоединиться к Discord Возможности Поиск ASN → CIDR Поиск ORG → CIDR Поиск DNS → CIDR Поиск IP → CIDR Ввод ASN/DNS/IP/ORG Выво...

cve-2022-49186-research

CVE-2022-49186: Linux Kernel Privilege Escalation Research Overview Security research and proof-of-concept exploit for CVE-2022-49186, a Linux kernel vulnerability in the Visconti clock driver that enables local privilege escalation through array overflow. Vulnerability Details Type : Array...

shellnoob

ShellNoob Writing shellcodes has always been super fun, but some parts are extremely boring and error prone. Focus only on the fun part, and use ShellNoob! For a quick overview, check the slides for the Black Hat Arsenal talk: link Want to contribute? Feature request? Bug report? Swears? All...

CVE-2019-9766

CVE-2019-9766 Do my best About CVE Free MP3 CD Ripper It is a switcher between .mp3 files and other filetype converting a file. Bug According to the NVD we can find that, in the vision 2.6 there is a Stack-based Overflow in the Buffer Area. So we can create a Poc for it. Filetype changed to .mp3...

bopscrk

bopscrk Générer des listes de mots intelligentes et puissantes pour des attaques ciblées Explorer la documentation » Voir la démo · Signaler un bogue · Demander une fonctionnalité Table des matières 1. À propos du projet Nouveautés Construit avec 2. Pour commencer Installation Lancer le mode...

PT-2026-107663

Name of the Vulnerable Software and Affected Versions Excelize versions 2.1.0 through 2.11.0 Description An issue exists when processing Zip64 entries where an uncompressed size with the high bit set ranging from 2^63 through 2^64-1 is converted from a uint64 to a negative int64. This conversion...

PT-2026-107550

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in...

CVE-2022-36752

Description for CVE-2022-36752 png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted webp file when reversing the format back to png. Reproduction To reproduce the vulnerability, download the vulnerable version of...

CVE-2021-4034

CVE-2021-4034 $ make cc -Wall --shared -fPIC -o pwnkit.so pwnkit.c cc -Wall cve-2021-4034.c -o cve-2021-4034 echo "module UTF-8// PWNKIT// pwnkit 1" gconv-modules mkdir -p GCONVPATH=. cp /usr/bin/true GCONVPATH=./pwnkit.so:. $ ./cve-2021-4034 whoami root exit...

CVE-2023-23752

This is a conversion of Ruby language to Python of the vulnerability Joomla! v4.2.8 - Unauthenticated information disclosure. This code is in Exploit-DB written in Ruby by ALEXANDRE ZANNI. I had some issues with the libraries of Ruby and I decided to convert the code to Python and worked well...

Log4jPatcher

Log4jPatcher A Java Agent based mitigation for Log4j2 JNDI exploits. This agent employs 2 patches: Disabling all Lookup conversions on supported Log4j versions in org.apache.logging.log4j.core.pattern.MessagePatternConverter by setting noLookups to true in the constructor. Disabling the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fbcvthperiod In fbfindmodecvt, if mode-refresh happens to be 0x80000000, cvt.frefresh will become 0 when multiplied by 2 due to overflow. This value is then passed to fbcvthperiod, where...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fbmon: prevented division by zero in fbvideomodefromvideomode. The expression htotal vtotal can have a zero value during overflow. It is necessary to prevent division by zero, as seen in fbvartovideomode. This issue was identifie...

google_gax

googlegax patched Patched fork of googlegax v0.4.1 for compatibility with Tesla = 1.18.3. Why this fork exists Tesla 1.18.3 June 2, 2026 introduced strict validation of multipart field names via assertquotedstringsafe!/2 as part of security fixes for CVE-2026-48598. The upstream googlegax last...

ROS-20261005-73-0019

The vulnerability in rsync is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2024-4577

PHP-CGI Windows Platform Remote Code Execution Vulnerability CVE-2024-4577 Introduction PHP is an acronym for Hypertext Preprocessor. It is now a widely used open-source scripting language that is particularly suitable for web development and embedding in HTML, and is very simple to use. CGI, whi...