ExifSmugglingPoC

Exif Smuggling A Proof-of-Concept evolution of Cache Smuggling. This attack conceals an executable payload inside a JPG's Exif data. As a result, image caching such as that of a Web Browser can be used to passively download the payload. As a result, the example loader chromepoc.ps1 does not need ...

FARO

FARO Document Sensitivity Detector Table of contents What is this What's in here? Run FARO with Docker Run FARO on host machine Prerequisites Virtual environment Dependencies NER models FARO Spider Single File Detection Technical Details FARO entity detector Configuration Supported Input File...

IP-reputation-snort-rule-generator

IP-reputation-snort-rule-generator A tool to generate Snort rules or Cisco IDS signatures based on public IP/domain reputation data Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Will Alexander, will dot alexander at nccgroup dot com...

seekr

A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...

seekr

Un conjunto de herramientas multiuso para recopilar y gestionar datos OSINT con una elegante interfaz web. Introducción Seekr es un conjunto de herramientas multiuso para recopilar y gestionar datos OSINT con una elegante interfaz web. Nuestra vista de escritorio te permite tener todas tus...

CVE-2024-24919

EN Is a Proof of Concept PoC script to check for vulnerability CVE-2024-24919. The script is designed to send HTTP POST requests to specified URLs and analyze the responses for possible security issues, like unauthorized access or sensitive data leaks. The script provides a simple yet powerful wa...

SharpDNSExfil

SharpDNSExfil SharpDNSExfil es una herramienta de exfiltración escrita en C. El objetivo principal es exfiltrar cualquier archivo "en disco" sin tener que preocuparse por conexiones salientes restringidas. Requisito previo La máquina remota debe poder resolver DNS ¿Por qué hice esto? Obtuve RCE...

AperiSolve

Aperi'Solve Pruébalo ahora: https://www.aperisolve.com Apoya a Aperi'Solve: Aperi'Solve es una plataforma web de esteganálisis de código abierto que realiza análisis automatizados sobre imágenes para detectar y extraer datos ocultos mediante herramientas y técnicas de esteganografía comunes...

CVE-2024-0044

CVE-2024-0044- CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13 CVE-2024-0044 Exploit Script This Bash script demonstrates how to exploit CVE-2024-0044. For educational and testing purposes only. Prerequisites ADB Android Debug Bridge installed an...

Phirautee

Phirautee Un virus criptográfico de prueba de concepto para concienciar a los usuarios sobre ataques e implicaciones de los ransomware. Phirautee está escrito puramente en PowerShell y no requiere bibliotecas de terceros. Esta herramienta roba información, mantiene los datos de una organización...

CVE-2026-107375

Applications generated using JHipster (versions 7.0.0 through 9.4.0) are vulnerable to SQL Injection when using Spring WebFlux , Spring Data R2DBC , and a SQL database. The vulnerability exists because the sort request parameter from paginated entity-list endpoints is passed into the createOrderB...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install $ pip install hsecscan Usage $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POST data' -x PROX...

steganographer

Steganography in Python This script will hide files inside images and save the modified image to disk The maximum size of file which can be hidden inside an image depends on the dimension of the image. maxfilesize = heightofimage widthofimage 6 / 8 bytes '100k words.txt' is hidden in...

RpcInvestigator

RPC Investigator Lea nuestro anuncio del blog. RPC Investigator RPCI es una aplicación de interfaz de usuario de Windows Forms en .NET/C que ofrece una interfaz avanzada de descubrimiento y análisis para puntos finales RPC de Windows. La herramienta proporciona una interfaz visual alrededor de la...

CVE-2026-5530

CVE-2026-5530 Ollama SSRF via OCI registry redirect with full response exfiltration. Writeup: https://davidrochester.com/posts/cve-2026-5530 Disclosure Ollama was contacted multiple times with no response. Usage Three modes: enum, exfil, and probe. Enum Finds live internal endpoints reachable fro...

http-protocol-exfil

http-protocol-exfil Usa la versión del protocolo HTTP para enviar un archivo bit a bit "HTTP/1.0" es un 0 y "HTTP/1.1" es un 1. Utiliza peticiones GET, por lo que el Blue Team solo vería las solicitudes a tu dirección IP. Sin embargo, se necesita mucho tiempo para enviar archivos grandes; por...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

CVE-2026-2058-PoC

CVE-2026-2058-PoC – CloudClassroom PHP Project SQL Injection Overview A SQL Injection vulnerability exists in the Post Query functionality of the CloudClassroom PHP Project v1.0. The vulnerability allows attackers to inject arbitrary SQL commands via the squeryx POST parameter, leading to databas...

KnockOutlook

KnockOutlook "La mejor sensación es ganar por nocaut." - Nonito Donaire Resumen KnockOutlook es un proyecto en C que interactúa con el objeto COM de Outlook para realizar varias operaciones útiles en compromisos de red team. Uso desde la línea de comandos / /// / // \ / // / / / / , / / / / /// /...