ntqueueapcthreadex-ntdll-gadget-injection

🧪 NtQueueApcThreadEx NTDLL-Gadget-Injektion Einführung Diese neuartige Methode, NtQueueApcThreadEx zu verwenden, indem die Parameter ApcRoutine und SystemArgument0-3 missbraucht werden und ein zufälliges pop r32; ret-Gadget übergeben wird, kann für eine heimliche Code-Injektion genutzt werden. In...

DInvoke

DInvoke Sostituto dinamico di PInvoke su Windows. DInvoke contiene potenti primitive che possono essere combinate in modo intelligente per richiamare dinamicamente codice non gestito dal disco o dalla memoria con precisione. Può essere utilizzato per molti scopi come il parsing di PE, la...

CVE-2021-38163

CVE-2021-38163 CVE-2021-38163 - exploit per SAP NetWeaver SAP NetWeaver Visual Composer 7.0 RT versioni - 7.30, 7.31, 7.40, 7.50, senza restrizione, un utente autenticato come utente non amministrativo può caricare un file dannoso tramite rete e innescarne l'elaborazione, che è in grado di esegui...

EUVD-2026-68011

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js permits SQL injection when attacker-controlled Buffer parameters are escaped client-side under the big5, gbk, sjis,...

CVE-2026-55855

MariaDB Connector/Node.js is vulnerable to SQL injection when attacker-controlled Buffer parameters are escaped client-side under the big5, gbk, sjis, cp932, or gb18030 character sets. The root cause is in PacketOutputStream.writeBufferEscape (lib/io/packet-output-stream.js), which escaped bytes ...

CVE-2023-6634

Script di Exploit per CVE-2023-6634 Descrizione Questo repository contiene uno script Python progettato per sfruttare la vulnerabilità CVE-2023-6634 trovata nel plugin LearnPress per WordPress, versioni fino alla 4.2.5.7 inclusa. La vulnerabilità permette l'esecuzione remota di codice RCE a causa...

One-Liner-Collections

One-Liner-Sammlungen Dieses Repository enthält eine Liste von One-Linern mit Beschreibungen und Installationsanforderungen ──────────────────────────────────────────────────────────────────────── SQL Injection Installationsanforderungen 1. Subfinder : https://github.com/projectdiscovery/subfinder...

PPLmedic

PPLmedic Questo strumento implementa una catena di exploit in Userland per iniettare codice arbitrario in un PPL con tipo di firmatario Windows ed elevare al tipo di firmatario WinTcb. Queste tecniche sono state originariamente discusse da James Forshaw noto anche come @tiraniddo nel suo articolo...

Win32_Offensive_Cheatsheet

Cheatsheet Offensivo Win32 Tecniche di abuso di Win32 e Kernel per pentester e red teamer create da @UVision e @RistBS Modalità sviluppatore attiva, aperto a qualsiasi aiuto : Documentazione dei binari Windows Struttura PE Intestazioni PE Parsing PE Tabella degli Indirizzi di Esportazione EAT...

Black-Angel-Rootkit

Black Angel Rootkit Black Angel ist ein Windows 11/10 x64 Kernel-Mode-Rootkit. Das Rootkit kann bei aktiviertem DSE geladen werden, während es seine volle Funktionalität beibehält. Entwickelt für Red Teams. Rootkit-Funktionen Das Rootkit kann mit kdmapper geladen werden, um DSE zu umgehen. Der...

L1B3RT4S

L1B3RT45...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

frigate

Frigate NVR™ - Realtime Object Detection for IP Cameras English | 简体中文 A complete and local NVR designed for Home Assistant with AI object detection. Uses OpenCV and Tensorflow to perform realtime object detection locally for IP cameras. Use of a GPU or AI accelerator is highly recommended. AI...

HUNT

Estensioni proxy di HUNT Suite Cos'è HUNT Suite? HUNT Suite è una raccolta di estensioni per Burp Suite Pro/Free e OWASP ZAP. Identifica i parametri comuni vulnerabili a determinate classi di vulnerabilità Burp Suite Pro e OWASP ZAP. Organizza le metodologie di test Burp Suite Pro e Free. HUNT...

EUVD-2026-66403

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device...

EUVD-2026-66391

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...

EUVD-2026-66401

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...

EUVD-2026-66393

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

EUVD-2026-66392

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...

EUVD-2026-66360

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...