bitbang-cli

BitBang CLI bitbang es una multitool de acceso remoto de un único binario estático. Desde cualquier navegador: una shell interactiva y un explorador de archivos para acceder a la máquina remota. También puedes acceder a aplicaciones web en la red de esa máquina. Más allá del navegador, ofrece...

otto-support

Soporte Otto Servidor MCP de atención al cliente para asistentes de codificación con IA. Un único binario de Go, autenticación por niveles, 19 herramientas en 4 niveles de rol. Construido con mcp-go. Inicio rápido Opción A: Contenedor Docker recomendado Ejecuta todo en un contenedor aislado. Clau...

Fudge

Fudge I had some success with on Phishing engagements by base64 encoding the contents of a file, putting it into a HTML file and having it decode and drop when the user opened the HTML file. Usage There are precompiled binaries available on the releases tab for both Windows 64-bit and Linux 64-bi...

gogs

👉 Implementa en DigitalOcean y obtén $200 en créditos gratis! 🔮 Visión El proyecto Gogs /gɑgz/ tiene como objetivo construir un servicio Git autoalojado simple, estable y extensible que se pueda configurar de la manera más sencilla. Con Go, esto se puede lograr con una distribución binaria...

minion-ticket-bleed-plugin

Plugin Minion Ticketbleed Este es un plugin para Minion que ejecuta una verificación de la vulnerabilidad Ticketbleed CVE-2016-9244 en la capa TLS de F5. La prueba puede ejecutarse como un script de Go o como un binario de Linux. El script es una mejora de https://filippo.io/Ticketbleed/...

hayduk

Hayduk: Open-source Metasploit GUI and Armitage alternative Hayduk is a free, open-source Metasploit GUI for authorized penetration testing. It brings the Armitage workflow to your browser: map hosts, browse modules, manage Meterpreter and shell sessions, and export campaign reports. Download one...

copy-fail-cve-2026-31431

Comprobador de CVE para Copy Fail CVE-2026-31431 Autores/Colaboradores : Patrick Doyle Autor/Mantenedor, Effie Renard Coautora, Kimberly-Lee Banks Coautora, Chris F. Soporte/Revisión de código Divulgación de IA : Claude Code se utilizó para escribir archivos de pruebas, escribir datos de prueba y...

Routeglass

Routeglass - Herramienta de fingerprinting de alta velocidad para routers y dispositivos de red Routeglass es una herramienta rápida y multiproceso de fingerprinting de routers escrita en Go. El objetivo del proyecto es simple: identificar routers, firewalls, pasarelas y dispositivos de red...

brutus v1.15.0

Brutus "Et tu, Brute?" — The last words before credentials fall. Modern credential testing tool in pure Go Installation • Quick Start • Pipeline • Protocols • Enumeration • Proxy • Library Overview Brutus is a multi-protocol authentication testing tool designed to address a critical gap in...

CVE-2026-53611

Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC ConnectRPC API, an embedded SvelteKit web UI, and a lg-cli client. Prior to version 1.3.5, there ...

EUVD-2026-70199

Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC ConnectRPC API, an embedded SvelteKit web UI, and a lg-cli client. Prior to version 1.3.5, there ...

MAL-2026-13366 Malicious code in @workoscalif/sudoku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6502011179b6d16c43f982d5d7bfb08feec7470444be52a5a3547cfafe0e217 package.json declares a postinstall script that spawns vendor/gridgen-linux-x64 during npm install. The README describes this file as a 34 kB static...

Malicious code in @workoscalif/sudoku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6502011179b6d16c43f982d5d7bfb08feec7470444be52a5a3547cfafe0e217 package.json declares a postinstall script that spawns vendor/gridgen-linux-x64 during npm install. The README describes this file as a 34 kB static...

MAL-2026-12028 Malicious code in sextant-cli-darwin-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2e5ab6503eb2b9c12bf64e34cb2fe12227c07b179231ebe23f13b8866181f1 The tarball contains a single 13.4 MB Mach-O darwin/amd64 Go binary at bin/sxt and a package.json with no source, no main, no bin mapping, and no...

Malicious code in sextant-cli-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab426dad8f1e5722f2836debe2f93730df98b7c109865426208edb687955b30 sextant-cli-linux-amd64 ships a Linux amd64 Go binary that, on execution, connects to a hardcoded WebRTC signaling relay at wss://relay.sextant.top a...

MAL-2026-12029 Malicious code in sextant-cli-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab426dad8f1e5722f2836debe2f93730df98b7c109865426208edb687955b30 sextant-cli-linux-amd64 ships a Linux amd64 Go binary that, on execution, connects to a hardcoded WebRTC signaling relay at wss://relay.sextant.top a...

MAL-2026-10610 Malicious code in proxy-check-ii (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a736498f3f882a4ba79f793dc893883db41d8cb5a74ecfe0c66dace9cc477a20 The wheel is advertised as 'proxy-check-ii' with a one-line summary of 'packaged command for running the bundled qsshd executable' and no README,...

[SECURITY] Fedora 35 Update: golang-github-rakyll-statik-0.1.7-4.fc35

Statik allows you to embed a directory of static files into your Go binary to be later served from an http.FileSystem...

Hashicorp vagrant-vmware-fusion 4.0.24 - Local Privilege Escalation

I have previously disclosed a couple of bugs in Hashicorp's vagrant-vmware-fusion plugin for vagrant. Unfortunately the 4.0.23 release which was supposed to fix the previous bug I reported didn't address the issue, so Hashicorp quickly put out another release - 4.0.24 - after that but didn't upda...

Hashicorp vagrant-vmware-fusion 4.0.24 Local Root Privilege Escalation Exploit

Exploit for windows platform in category local exploits I have previously disclosed a couple of bugs in Hashicorp's vagrant-vmware-fusion plugin for vagrant. Unfortunately the 4.0.23 release which was supposed to fix the previous bug I reported didn't address the issue, so Hashicorp quickly put o...