mongobleed-detector

MongoBleed Detector Offline MongoDB Analysis Tool for CVE-2025-14847 MongoBleed A standalone Linux command-line tool that analyzes MongoDB data to identify likely exploitation of CVE-2025-14847 using multiple detection modules. Table of Contents Overview Detection Modules Requirements Installatio...

CVE-2018-20250

exp para Extraer Ejecución de Código de Winrar poc por Ridter ¿cómo usarlo? solo necesitas instalar Python 3.7 y preparar un archivo malicioso que quieras ejecutar, establecer los valores que desees, ¡este script exp generará el archivo malicioso automáticamente! 1. establece los valores que dese...

mongobleed

mongobleed CVE-2025-14847 - Explotación de fuga de memoria no autenticada en MongoDB Un exploit de prueba de concepto para la vulnerabilidad de descompresión zlib de MongoDB que permite a atacantes no autenticados filtrar memoria sensible del servidor. Vulnerabilidad Un fallo en la descompresión...

CVE-2026-14266

CVE-2026-14266 Poc: 7-Zip XZ Heap Buffer Overflow PoC Generator Proof of Concept generator for reproducing the XZ heap buffer overflow vulnerability in 7-Zip. The script creates a specially crafted .xz archive designed to reproduce the crash condition in the vulnerable multi-threaded XZ...

BurpSuiteJSBeautifier

Burp Suite JSBeautifier Most of the websites compress their resources such as JS files in order to increase the loading speed. However, security testing and debugging a compressed resource is not an easy task. This is a Burp Suite open source extension which makes it possible to beautify most of...

pyxamstore

Explorador de Xamarin AssemblyStore pyxamstore Esta es una versión alfa de un analizador de assemblies.blob AssemblyStore escrito en Python. La herramienta es capaz de desempaquetar y reempaquetar archivos assemblies.blob y assemblies.manifest de Xamarin desde un APK. Instalación Ejecute el scrip...

CVE-2025-14847

mongoExploit CVE-2025-14847 mongoExploit es una herramienta de explotación de prueba de concepto PoC para CVE-2025-14847 , una vulnerabilidad de fuga de memoria en MongoDB. Esta herramienta explota un error en la descompresión zlib para filtrar memoria del servidor a través de nombres de campos...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

CVE-2026-90559

snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in the Snappy.uncompress(ByteBuffer, ByteBuffer) method. The root cause is that the destination buffer capacity is never validated against the decompressed size, allowing an attacker to supply valid compressed data that de...

CVE-2018-20250

exp para Extrayendo ejecución de código desde Winrar poc por Ridter ¿cómo se usa? solo necesitas instalar Python 3.7 y preparar un archivo malicioso que quieras ejecutar, establece los valores que quieras, este script exp generará automáticamente el archivo comprimido malicioso! 1. establece los...

loki-parse

loki-parse Un script de Python que puede detectar y analizar el tráfico de red relacionado con loki-bot malware entre un host comprometido y un servidor C2. Este script puede ser útil para analistas de DFIR e investigadores de seguridad que quieran saber qué datos se están exfiltrationando al C2,...

mtk-su-reverse-cve-2020-0069

mtk-su solo algunas de mis notas Tabla de cadenas obtén la tabla de cadenas descomprimida usando binwalk -Xe stringtabledump vuelca desde la dirección en el idb 0x1F098 tamaño comprimido: 1260 si quieres el idb, abre un issue con tu correo y te lo enviaré. es un buen punto de partida si quieres...

smoke_conf_extract

Smoke Config Extraction 개요 이 프로젝트는 smokeloader 샘플에서 초기 단계부터 구성을 추출하는 것을 목표로 합니다. 정적으로 수행하기로 결정했기 때문에, 더 복잡한 구성 요소 중 일부를 우회하기 위해 Unicorn과 같은 도구에 의존해야 했습니다. 이 추출 방식이 이 패밀리에서 어떻게 작동하는지와 관계없이, 이 저장소는 비전통적인 악성코드 패밀리에서 구성 추출이 어떻게 작동할 수 있는지에 대한 예시가 될 수 있습니다. 미리보기 기능 난독화 해제 최종 스테이지 언패킹 구성 추출 TO-DO Python...

PT-2026-90719

snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompressByteBuffer, ByteBuffer because destination buffer capacity is never validated against decompressed size. Attackers can supply valid compressed data that decompresses larger than the destination buffer,...

CVE-2026-89616

A flaw was found in the Linux kernel's NTFS3 filesystem driver. When decompressing LZNT data, the nireadframe function may not fully zero out memory after a partial decompression. This can lead to the disclosure of previously used kernel memory pages to a local attacker who reads a specially...

CVE-2026-80945

A flaw was found in the Linux kernel's cryptography module, specifically within the Intel Analytics Accelerator IAA driver. When a hardware error occurs during data decompression, the system attempts to use a software-based fallback. However, due to improper handling of memory buffers during this...

qualcomm_baseband_scripts

qualcommbasebandscripts Qualcomm 베이스밴드 / 모뎀 펌웨어 리버싱을 위한 스크립트 모음 스크립트의 모든 오프셋/주소는 Pixel 5 3월 펌웨어 기준으로 업데이트되어 있으며, 다른 버전을 사용할 경우 변경해야 합니다. 병합 mergemodemfirmware.py는 모든 modem.bmodem.b00, modem.b01 등 파일을 modem.bin이라는 단일 모놀리식 바이너리로 병합합니다. 이렇게 하면 IDA와 Ghidra에 훨씬 쉽게 로드할 수 있습니다. 압축 해제 cladeextractor와...

CVE-2026-89616

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in nireadframe nireadframe decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompresslznt's return value: uncsize = decompresslzntframeondisk,...

DEBIAN-CVE-2026-89616

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in nireadframe nireadframe decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompresslznt's return value: uncsize = decompresslzntframeondisk,...

CVE-2026-89616 fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in nireadframe nireadframe decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompresslznt's return value: uncsize = decompresslzntframeondisk,...