msldap

🚩 Patrocinadores Si te gusta este proyecto, considera comprar licencias de OctoPwn, ¡nuestro conjunto completo de pruebas de penetración que se ejecuta en tu navegador! Para notificaciones sobre nuevas compilaciones/lanzamientos y otra información, únete a nuestro Discord msldap Librería LDAP par...

CLSA-2026-1791742369 TuxCare security update for league/flysystem (1 CVE)

TuxCare rebuilt league/flysystem to address 1 CVE. Fixed in 1.0.70-p2+tuxcare...

badsecrets

badsecrets Una biblioteca pura de Python para identificar el uso de secretos criptográficos conocidos o muy débiles en una variedad de plataformas. El proyecto está diseñado tanto para ser un repositorio de varios "secretos conocidos" por ejemplo, claves de máquina de ASP.NET encontradas en...

Openssl_1_1_0_CVE-2021-23841

OpenSSL 1.1.0g 2 Nov 2017 Copyright c 1998-2016 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

chepy

Chepy Chepy es una librería de Python con una práctica CLI que tiene como objetivo reflejar algunas de las capacidades de CyberChef. Se dedicó un esfuerzo razonable a Chepy para hacerlo compatible con las diversas funcionalidades que ofrece CyberChef, todo de manera puramente Pythonica. Hay algun...

external_expat_AOSP10_r33_CVE-2022-23852

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

haiti

HAITI HA sh I denT ifI er ¿Qué es? Una herramienta CLI y librería para identificar tipos de hash identificador de tipo de hash. CLI librería Características Más de 675 tipos de hash detectados Algoritmos modernos compatibles SHA3, Keccak, Blake2, etc. Referencias de Hashcat y John the Ripper...

CVE-2025-24071

CVE-2025-24071PoC CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Windows Explorer automatically initiates an SMB authentication request when a .library-ms file is extracted from a .rar archive, leading to NTLM hash disclosure. The user does not need to open or execute...

srikanth-lingala__zip4j_CVE-2018-1002202_1-3-2

zip4j This repository contains decompiled source code for the zip4j library versions 1.3.2 vulnerable and 1.3.3 fixed for CVE-2018-1002202, for the CWE-Bench-Java dataset. The original zip4j repository on Github doesn't include code from these versions. Versions Version 1.3.2 Vulnerable Tag : 1.3...

nasm_linux_x86_64_pure_sharedlib

NASM Linux x8664 pure no deps shared library .so Tested with "Reflective SO injection". A library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process...

AutoPwn-Titanic.htb

Titanic AutoPWN - HTB Machine This is an automated exploitation script for the Hack The Box machine Titanic. A full exploitation automation script for the Titanic HTB Linux machine on Hack The Box. Full write Up - WriteUp.md 📋 Description It performs the following actions: Phase 1: Retrieve and...

secator

La navaja suiza del pentester. Características • Comandos soportados • Instalación • Uso • Documentación • ¡Únete a nosotros en Discord! secator es un ejecutor de tareas y flujos de trabajo utilizado para evaluaciones de seguridad. Soporta docenas de herramientas de seguridad conocidas y está...

jenkinsci__workflow-cps-global-lib-plugin_CVE-2022-25174_544-vff04fa68714d

Pipeline Shared Libraries When you have multiple Pipeline jobs, you often want to share some parts of the Pipeline scripts between them to keep Pipeline scripts DRY. A very common use case is that you have many projects that are built in the similar way. This plugin adds that functionality by...

CVE-2021-29447

CVE-2021-29447 PoC This repository contains a Proof of Concept PoC exploit for the CVE-2021-29447 vulnerability, affecting WordPress 5.6 and 5.7 using PHP 8. The exploit demonstrates how an attacker, with the ability to upload files, can exploit an XML parsing vulnerability in the Media Library,...

msticpy

Herramientas de Seguridad en Python y Jupyter de MSTIC Herramientas de Seguridad en Python de Microsoft Threat Intelligence. msticpy es una biblioteca para investigación y caza en ciberseguridad en Jupyter Notebooks. Incluye funcionalidad para: consultar datos de registros de múltiples fuentes...

exploit-CVE-2017-7494

SambaCry RCE exploit for Samba 4.5.9 Samba is a free software re-implementation of the SMB/CIFS networking protocol. Samba provides file and print services for various Microsoft Windows clients and can integrate with a Microsoft Windows Server domain, either as a Domain Controller DC or as a doma...

CVE-2021-29447

WordPress XXE Vulnerability : CVE-2021-29447 A user with the ability to upload a malicious WAVE file like an Author can exploit an XML parsing issue in the Media Library in WordPress leading to XXE attacks and that could lead to file system disclosure Vulnerable code XML External Entity XXE...

sshtunnel

|Tests| |AppVeyor| |readthedocs| |coveralls| |version| |pyversions| |license| Author : Pahaz Repo : https://github.com/pahaz/sshtunnel/ Inspired by https://github.com/jmagnusson/bgtunnel, which doesn't work on Windows. See also: https://github.com/paramiko/paramiko/blob/master/demos/forward.py...

interactsh

Un servidor de recopilación de interacciones OOB y biblioteca cliente Características • Uso • Cliente Interactsh • Servidor Interactsh • Integración de Interactsh • Únete a Discord Interactsh es una herramienta de código abierto para detectar interacciones fuera de banda. Es una herramienta...

CVE-2024-3094-analysis

CVE-2024-3094 – Real-World Supply Chain Threat What is CVE-2024-3094? CVE-2024-3094 is a major backdoor vulnerability discovered in the xz compression library. It allows attackers to potentially execute code remotely through SSH. The vulnerability was introduced intentionally and affects critical...