4409 matches found
reconness
ReconNess Web App Why ReconNess? Well, we have seen a lot of bugbounty hackers organizing his recon using txt and doing a lot of bash scripts to filter the output to keep everything organized with the intention to focus only on the potentially vulnerable targets. But realistically this demands a...
dotnet-gargoyle
dotnet-gargoyle A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique https://www.countercept.com/blog/gargoyle-memory-scanning-evasion-for-net/...
clroxide
ClrOxide ClrOxide is a rust library that allows you to host the CLR and dynamically execute dotnet binaries. I wanted to call it Kepler for no particular reason, but there's already a package named kepler in cargo. : I have been working on hosting CLR with rust on and off for 2 years now, and...
DotNET_XorCryptor
DotNET XorCryptor You can also pay attention to an older project - NET-MalwareCryptor This is a .NET executable packer with payload encryption. Use for educational purposes only. How to use? --file path - specify file name --flood - add junk classes to file --proxy - move original entry point to...
DotDumper
DotDumper An automatic unpacker and logger for DotNet Framework targeting files! This tool has been unveiled at Black Hat USA 2022. At Black Hat Asia 2023, DotDumperGUI and DotDumperNative were published, along with version 1.1-stable of DotDumper. These three tools are meant to be used together,...
sc2elf
sc2elf Simple dotnet Native AOT app that uses LibObjectFile to convert shellcode to ELF. Both 32-bit and 64-bit x86, x64 shellcode is supported - resulting in 32-bit or 64-bit ELF. Releases are compiled for both linux-x64 and win-x64. Description It is compiled to Native AOT format to demonstrate...
de4dot
Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...
CVE-2026-70162
A flaw was found in dotnet. The Microsoft Common Object Runtime Library improperly handles incoming web requests. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted web requests to an affected application, resulting in a Denial of Service DoS...
.NET Framework - Leaking ObjRefs via HTTP .NET Remoting
.NET Framework Information Disclosure Vulnerability id: CVE-2024-29059 info: name: .NET Framework - Leaking ObjRefs via HTTP .NET Remoting author: iamnoooob,rootxharsh,DhiyaneshDk,pdresearch severity: high description: .NET Framework Information Disclosure Vulnerability impact: | Attackers can...
dotnet: dotnet: Denial of Service via specially crafted web requests
A flaw was found in dotnet. The Microsoft Common Object Runtime Library improperly handles incoming web requests. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted web requests to an affected application, resulting in a Denial of Service DoS...
dotnet: dotnet: arbitrary code execution via untrusted data deserialization
A flaw was found in dotnet. A remote attacker can achieve arbitrary code execution by tricking an application or user into processing maliciously crafted data during deserialization the process of reconstructing data into an application object. Successful exploitation allows the attacker to execu...
CVE-2026-112044
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...
CVE-2026-112044 dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...
EUVD-2026-104053
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...
CVE-2026-112044 dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...
CVE-2026-112044
A security vulnerability exists in dotnet eShop (up to commit 913acea66708a59595351174cee9b29f37179d29). The flaw is located in the AddApplicationServices function within the file src/Catalog.API/Extensions/Extensions.cs of the Catalog API component. This vulnerability allows for improper authent...
CVE-2026-112044: Improper Authentication
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...
CVE-2026-87697
A flaw was found in dotnet. A remote attacker can achieve arbitrary code execution by tricking an application or user into processing maliciously crafted data during deserialization the process of reconstructing data into an application object. Successful exploitation allows the attacker to execu...
