ExtensionSpoofer

ExtensionSpoofer ExtensionSpoofer is a Visual Basic .NET desktop app that demonstrates how file names and icons can be visually manipulated on Windows while the underlying executable file type remains unchanged. It uses the Unicode Right-to-Left Override character U+202E to reverse displayed...

trojanizer

TROJANIZER Version release : v1.1 Stable Author : pedro ubuntu r00t-3xp10it Codename: TroiaRevisited Distros Supported : Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 FRAMEWORK DESCRIPTION The Trojanizer tool uses WinRAR SFX to compress the two files input by...

CVE-2025-50154

CVE-2025-50154, CVE-2025-59214 Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure By Ruben Enkaoua and Cymulate First Blog: Zero Click, One NTLM: Microsoft Security Patch Bypass CVE-2025-50154 Second Blog: Patched Twice, Still Bypassed: New NTLM Leak CVE-2025-50154 Patch Bypass Descripti...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

CVE-2026-106469

The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with Contributor-level access and above to store malicious SVG that executes JavaScript in th...

EUVD-2026-100884

The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with Contributor-level access and above to store malicious SVG that executes JavaScript in th...

CVE-2026-106469

The Gutenverse Form WordPress plugin (versions before 3.0.11 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to sanitize SVG icon markup stored within form blocks before it is decoded and rendered in a browser. This allows authenticated users with Contributor-le...

CVE-2026-106469 Gutenverse Form < 3.0.11 - Contributor+ Stored XSS via SVG Icon

The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with Contributor-level access and above to store malicious SVG that executes JavaScript in th...

SiYuan Note - Cross-Site Scripting

SiYuan Note through version 3.6.1 is vulnerable to unauthenticated reflected Cross-Site Scripting XSS in the /api/icon/getDynamicIcon endpoint due to improper filtering of SVG elements with a namespace prefix such as . By using a namespaced script element, attackers can bypass the SanitizeSVG...

PT-2026-113663

The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with Contributor-level access and above to store malicious SVG that executes JavaScript in th...

CVE-2023-3450

CVE-2023-3450 fofa：iconhash="-399311436" 案例：http://123.54.231.201:6060 Usage: python3 CVE-2023-3450.py -h, --help python3 CVE-2023-3450.py -u URL, --url URL python3 CVE-2023-3450.py -f FILE, --file FILE...

trojanizer

TROJANIZER Version release : v1.1 Stable Author : pedro ubuntu r00t-3xp10it Codename: TroiaRevisited Distros Supported : Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam desarrollado @2017 DESCRIPCIÓN DEL FRAMEWORK La herramienta Trojanizer usa WinRAR SFX para comprimir los dos...

usbhijacking

CVE-2017-8464 PoC Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via ...

fav-up

Fav-up Búsquedas de IP real a partir del icono favicon y usando Shodan. Instalación pip3 install -r requirements.txt Clave de API de Shodan no la gratuita Uso CLI Primero define cómo pasas la clave de API: -k o --key para pasar la clave por stdin -kf o --key-file para pasar el nombre del archivo...

CVE-2023-31853

CVE-2023-31853 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/bandwidth has reflected XSS via the icon parameter. The methods of exploitation would involve sending a specially crafted request to the victim tha...

blenny

Blenny is a proof-of-concept payload obfuscation tool for Windows which hides executable payload data within the icon of the executable. It is named after the sabre-toothed blenny fish, which mimmicks the behavior and looks of cleaner fish to prey on unsuspecting fish. Why? I can't recall exactly...

lnkbomb

Lnkbomb Lnkbomb se utiliza para subir archivos de acceso directo maliciosos a recursos compartidos inseguros. La vulnerabilidad existe debido a que Windows busca un archivo de icono para asociar con el archivo de acceso directo. Este archivo de icono puede dirigirse a la máquina del probador de...

metasploitavevasion

Metasploit AV Evasion Metasploit payload generator that avoids most Anti-Virus products. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/metasploitavevasion Released under AGPL see...

CVE-2021-43798-Grafana-File-Read

Grafana-File-Read Grafana Unauthorized File Read Affected versions: 8.0.0-latest poc: /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd GET /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1 Host: 127.0.0.1:3000...

IconJector

IconJector This is a Windows Explorer DLL injection technique that uses the change icon dialog on Windows. It can trick users into loading a malicious DLL into their explorer process: https://github.com/0xda568/IconJector/assets/61665703/06428402-764c-4279-b762-1d01082552c8 Additionally, it can b...