bitbang-cli

BitBang CLI BitBang CLI — это единый статический бинарный файл — мультиинструмент удалённого доступа: открывайте интерактивную оболочку, просматривайте и передавайте файлы, а также получайте доступ к веб-приложениям в сети удалённой машины из любого браузера — без проброса портов, без настройки и...

minion-ticket-bleed-plugin

Plugin Minion Ticketbleed Ceci est un plugin pour Minion qui exécute une vérification de la vulnérabilité Ticketbleed CVE-2016-9244 sur la couche TLS F5. Le test peut être exécuté soit comme un script Go, soit comme un binaire Linux. Le script est amélioré à partir de...

Fudge

Fudge 저는 피싱 공격에서 파일 내용을 base64로 인코딩하고, 이를 HTML 파일에 넣어 사용자가 HTML 파일을 열 때 디코딩되어 드롭되도록 하는 방법으로 성공을 거둔 적이 있습니다. 사용법 Windows 64비트 및 Linux 64비트용으로 미리 컴파일된 바이너리가 릴리스 탭에서 제공됩니다. Go 바이너리이므로 실행 권한을 부여하고 실행하는 것 외에는 아무것도 필요하지 않습니다. 시스템에 Go가 설정되어 있다면 다음 명령어로 리포지토리에서 최신 버전을 다운로드할 수 있습니다: root@kitploit: go get...

gogs

👉 Déployez sur DigitalOcean et obtenez 200 $ de crédits gratuits ! 🔮 Vision Le projet Gogs /gɑgz/ vise à construire un service Git auto-hébergé simple, stable et extensible qui peut être mis en place de la manière la plus indolore. Avec Go, cela peut être réalisé avec une distribution binaire...

otto-support

Otto Support MCP-сервер службы поддержки для AI-ассистентов написания кода. Один Go-бинарный файл, многоуровневая аутентификация, 19 инструментов на 4 уровнях ролей. Создан на основе mcp-go. Быстрый старт Вариант A: Docker-контейнер рекомендуется Запустите всё в изолированном контейнере. Claude...

Routeglass

Routeglass - высокоскоростной инструмент для идентификации роутеров и сетевых устройств Routeglass — это быстрый многопоточный инструмент для фингерпринтинга роутеров, написанный на Go. Цель проекта проста: идентифицировать веб-доступные роутеры, межсетевые экраны, шлюзы и встроенные сетевые...

MAL-2026-13366 Malicious code in @workoscalif/sudoku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6502011179b6d16c43f982d5d7bfb08feec7470444be52a5a3547cfafe0e217 package.json declares a postinstall script that spawns vendor/gridgen-linux-x64 during npm install. The README describes this file as a 34 kB static...

Malicious code in @workoscalif/sudoku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6502011179b6d16c43f982d5d7bfb08feec7470444be52a5a3547cfafe0e217 package.json declares a postinstall script that spawns vendor/gridgen-linux-x64 during npm install. The README describes this file as a 34 kB static...

MAL-2026-12028 Malicious code in sextant-cli-darwin-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2e5ab6503eb2b9c12bf64e34cb2fe12227c07b179231ebe23f13b8866181f1 The tarball contains a single 13.4 MB Mach-O darwin/amd64 Go binary at bin/sxt and a package.json with no source, no main, no bin mapping, and no...

MAL-2026-12029 Malicious code in sextant-cli-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab426dad8f1e5722f2836debe2f93730df98b7c109865426208edb687955b30 sextant-cli-linux-amd64 ships a Linux amd64 Go binary that, on execution, connects to a hardcoded WebRTC signaling relay at wss://relay.sextant.top a...

Malicious code in sextant-cli-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab426dad8f1e5722f2836debe2f93730df98b7c109865426208edb687955b30 sextant-cli-linux-amd64 ships a Linux amd64 Go binary that, on execution, connects to a hardcoded WebRTC signaling relay at wss://relay.sextant.top a...

MAL-2026-10610 Malicious code in proxy-check-ii (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a736498f3f882a4ba79f793dc893883db41d8cb5a74ecfe0c66dace9cc477a20 The wheel is advertised as 'proxy-check-ii' with a one-line summary of 'packaged command for running the bundled qsshd executable' and no README,...

[SECURITY] Fedora 35 Update: golang-github-rakyll-statik-0.1.7-4.fc35

Statik allows you to embed a directory of static files into your Go binary to be later served from an http.FileSystem...

Hashicorp vagrant-vmware-fusion 4.0.24 - Local Privilege Escalation

I have previously disclosed a couple of bugs in Hashicorp's vagrant-vmware-fusion plugin for vagrant. Unfortunately the 4.0.23 release which was supposed to fix the previous bug I reported didn't address the issue, so Hashicorp quickly put out another release - 4.0.24 - after that but didn't upda...

Hashicorp vagrant-vmware-fusion 4.0.24 Local Root Privilege Escalation Exploit

Exploit for windows platform in category local exploits I have previously disclosed a couple of bugs in Hashicorp's vagrant-vmware-fusion plugin for vagrant. Unfortunately the 4.0.23 release which was supposed to fix the previous bug I reported didn't address the issue, so Hashicorp quickly put o...