61285 matches found
No-Consolation
No-Consolation This is a Beacon Object File BOF that executes unmanaged PEs inline and retrieves their output without allocating a console i.e. spawning conhost.exe. Features Supports 64 and 32 bits Supports EXEs and DLLs Does not create new processes Does not create new threads Links modules to...
mitmAP
| / \ | \ | | / /\ | |/ / | ' | | | ' | || / | | | | | | | || | | | | | | | || | || || ||||| || || |/| 2.2 ⚠️ Warning! This project is no longer maintained and may not work as excepted. A python program to create a fake AP and sniff data. new in 2.0: SSLstrip2 for HSTS bypass Image capture...
pentestly
Pentestly Pentestly is a combination of expanding Python tools for use in penetration tests. The goal is to utilize a familiar user interface while making contributions to the framework easy with the power of Python. Blog post: Pentestly Framework: When Pentesting Meets Python and Powershell...
raptor
Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...
pupy
Pupy Instalación sencilla pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh Si deseas información más detallada,consulta la wiki Instalación de desarrollo git clone https://github.com/n1nj4sec/pupy cd pupy git checkout nextgen git submodule init gi...
btlejuice
BtleJuice Framework Introduction BtleJuice is a complete framework to perform Man-in-the-Middle attacks on Bluetooth Smart devices also known as Bluetooth Low Energy. It is composed of: an interception core an interception proxy a dedicated web interface Python and Node.js bindings How to install...
isip
isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet manipulation tools are...
isip
isip Kit interactivo de SIP para manipulación de paquetes, sniffing, ataques man-in-the-middle, fuzzing, simulación de ataques DoS. Video https://asciinema.org/a/11128 Configuración git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Uso Las herramientas de...
frida-fuzzer
Fuzzer de API de Frida v1.4 Derechos de autor C 2020 Andrea Fioraldi [email protected] Publicado bajo la Licencia Apache v2.0 Este fuzzer experimental está diseñado para fuzzing de API en memoria. El diseño está altamente inspirado y basado en AFL/AFL++. Por el momento, el mutador es bastant...
frida-fuzzer
Frida API Fuzzer v1.4 Copyright C 2020 Andrea Fioraldi [email protected] Released under the Apache License v2.0 This experimental fuzzer is meant to be used for API in-memory fuzzing. The design is highly inspired and based on AFL/AFL++. ATM the mutator is quite simple, just the AFL's havoc...
CVE-2026-11109-Bluetooth-Classic-KNOB-Attack-Key-Negotiation-of-Bluetooth-
CVE-2026-11109 – Bluetooth Classic KNOB Attack Key Negotiation of Bluetooth Program Code Python Simulated knobattacksim.py - Simulates negotiation of encryption key size to 1 byte import random, hashlib class BluetoothDevice: def negotiatekeysizeself, proposedsize: Vulnerable: accepts any key siz...
WEASEL
WEASEL: Un Beacon DNS Sigiloso WEASEL es un pequeño implante en memoria que utiliza Python 3 sin dependencias. El cliente baliza envía una pequeña cantidad de información identificativa sobre su host a una zona DNS que usted controla. El servidor WEASEL puede asignar a los clientes la ejecución d...
Remote-DLL-Injection-with-Timer-based-Shellcode-Execution
Remote DLL Injection with Timer-based Shellcode Execution Documentation updated from previous mistake proces injection title! ⚠ Educational Research Only This repository contains security research for educational purposes and authorized use only. Use responsibly and in accordance with all...
EUVD-2026-95333
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation...
PT-2026-108842
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects Search in Place: from n/a through 1.5.5...
PT-2026-108812
Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description The Netty-based HTTP client transport cxf-rt-transports-http-netty-client fails to verify that the hostname in the server TLS...
PT-2026-108850
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...
PT-2026-108851
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...
connectwise-automate-AiTM-rce
ConnectWise Automate Adversary-in-the-Middle Remote Code Execution Table of Contents Background Timeline Thoughts and Learnings Responsible Disclosure PoC Code Report Provided to ConnectWise Summary Vulnerable Configuration Impact Technical Details 1. HTTP Transport 2. Insufficient Protocol...
