CVE-2024-38816-PoC

CVE-2024-38816 Prueba de Concepto PoC Esta es una prueba de concepto para la vulnerabilidad CVE-2024-38816, que demuestra un exploit de path traversal. Pasos de Ejecución 1. Construye la imagen de Docker: Spring Boot 3.0.13, basado en Spring Framework 6.0.3 docker build -t cve-2024-38816-poc . 2...

CVE-2026-105244

Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record instead of being escaped, so non-ASCII text and control characters such as tabs disappeared without notice. A party whos...

CVE-2026-105241

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

ZipExec

ZipExec ZipExec 是一个概念验证 POC 工具，用于将基于二进制的工具封装到受密码保护的 zip 文件中。该 zip 文件随后被 base64 编码成一个字符串，并重新构建到磁盘上。这个编码后的字符串被加载到一个 JScript 文件中，执行时会将受密码保护的 zip 文件重新构建到磁盘并执行它。这是通过使用 COM 对象以编程方式实现的，利用 Windows 中的 GUI 函数通过生成的 JScript 加载器，无需先解压即可直接执行受密码保护的 zip 内的加载器。通过密码保护 zip 文件，可以保护二进制文件免受 EDR 以及基于磁盘或反恶意软件扫描机制的影响。 安装...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

revshellgen

🚀 RevShellGen 反向 Shell 生成器 以优雅的方式自动化反向 Shell 生成 生成、编码、捕获反向 Shell，省去繁琐操作 功能 • 安装 • 用法 • Shell 类型 • 贡献 📖 关于 RevShellGen 是一个强大的命令行工具，简化了生成反向 Shell 命令的过程。无需再查找语法，无需手动编码，无需头疼的配置。本工具通过直观的界面处理一切。 🎯 主要功能 🖥️ 交互式 CLI - 用户友好的菜单驱动界面 🔄 自动编码 - 支持 URL 和 Base64 编码 📋 剪贴板集成 - 自动复制生成的命令 🌐 网络检测 - 自动发现 IP 地址 🎨 多种...

CVE-2026-105244

Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record instead of being escaped, so non-ASCII text and control characters such as tabs disappeared without notice. A party whos...

CVE-2026-105244 Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content

Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record instead of being escaped, so non-ASCII text and control characters such as tabs disappeared without notice. A party whos...

EUVD-2026-93870

Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record instead of being escaped, so non-ASCII text and control characters such as tabs disappeared without notice. A party whos...

CVE-2026-105244

The Apache log4net logging framework (versions 1.2.12 before 3.5.0 ) contains an Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender component. Instead of escaping non-ASCII characters and control characters (like tabs), the appender silently deletes them. This allow...

CVE-2026-105244 Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content

Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record instead of being escaped, so non-ASCII text and control characters such as tabs disappeared without notice. A party whos...

CVE-2026-105241

The Apache log4net logging framework (versions 1.2.9 before 3.5.0 ) is vulnerable to an Improper Handling of Unicode Encoding issue within the SmtpPickupDirAppender component. If the mail file writer encounters content it cannot encode, such as an unpaired UTF-16 surrogate , it causes the write o...

CVE-2026-105241 Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

CVE-2026-105241 Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

CVE-2026-105241

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

EUVD-2026-93866

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

http-protocol-exfil

HTTP协议版本外传工具 使用HTTP协议版本逐位发送文件（“HTTP/1.0”表示0，“HTTP/1.1”表示1）。它使用GET请求，因此蓝队只会看到发往你IP地址的请求。但发送较大文件需要很长时间，例如发送200 KB需要1小时，并且请求数量会非常高（文件字节数的8倍）。 创建监听器 运行监听器使用listener.py，带一个可选参数：监听端口。 python3 listener.py PORT 示例： python3 listener.py 8080 发送文件...

steganography

图像隐写工具 简单 C++ 加密 和 隐写 工具，使用密码保护加密来确保文件内容安全，然后通过最低有效位（LSB）编码将其嵌入图像的像素数据中。适用于 Linux、MacOS 和 Windows 系统。 编码 $ ./steganography encode -i data/orig.png -e data/jekyllandhyde.zip -o output.png Password: 1234 Image size: 640x426 pixels Encoding level: Low Default Max embed size: 132.38 KiB Embed size:...

ICMPExfil

ICMP Exfil ICMP Exfil 允许你通过合法的ICMP数据包传输数据。你使用客户端脚本传入要外传的数据，然后在接收设备上运行服务器。任何观察者（无论是人类还是安全系统）都只会看到合法的ICMP数据包，这些数据包的结构没有任何恶意。你的数据并未隐藏在ICMP数据包内部，因此查看数据包并不能告诉你外传了什么内容。 作者 Martino Jones，martinojones.com。 ASCII...

CVE-2026-82162

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...