invoker

Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...

novahot

novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...

isip

isip Kit interativo de ferramentas SIP para manipulação de pacotes, sniffing, ataques de intermediário MITM, fuzzing, simulação de ataques DoS. Vídeo https://asciinema.org/a/11128 Configuração root@kitploit: git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.t...

isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup root@kitploit: git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet...

flare-qdb

FireEye Labs Query-Oriented Debugger flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set a breakpoint on each queried instruction and executes Python code when hit. flare-qdb frees the analyst to take a nonline...

DllShimmer

DllShimmer Machen Sie DLL-Hijacking ganz einfach zur Waffe. Hintertürchen für jede Funktion in jeder DLL, ohne den normalen Prozessbetrieb zu stören. So funktioniert es DllShimmer parst die ursprüngliche DLL und extrahiert Informationen über exportierte Funktionen Name, Ordnungszahl und...

PT-2026-79461

Name of the Vulnerable Software and Affected Versions Atlantis versions 0.19.8 through 0.44.0 Description Atlantis fails to consistently validate user-controlled workspace values provided via the repository-level atlantis.yaml configuration or the authenticated '/api/plan' endpoint before joining...

Calix GS7 XGS GS5239XG residential router contains missing authentication vulnerability

Overview The Calix GS7 XGS GS5239XG router running firmware EXOS/6.6.47 contains a missing authentication vulnerability that exposes its UPnP Universal Plug and Play WANIPConnection service on the public WAN interface. Description Calix GS7 XGS GS5239XG is a residential gateway that provides...

EUVD-2026-63743

Mailu is a mail server as a set of Docker images. Prior to version 2024.06.52, a missing authorization check in the Mailu admin REST API allows any unauthenticated attacker to remove any potential IP restriction or update the comment field from any existing user token provided the REST API is...

LazyDroid

Lazydroid 0.4 von Dani Martinez @dan1t0 Lazydroid ist ein als Bash-Skript geschriebenes Tool, das einige Aspekte eines Android-Assessments erleichtert. Es bietet einige gängige Aufgaben wie: Das Debug-Flag einer Anwendung auf true setzen Das Backup-Flag einer Anwendung auf true setzen Die Anwendu...

pip3line

pip3line Utilità di manipolazione di byte grezzi, in grado di applicare trasformazioni note e meno note. Lo sviluppo e la pagina principale si sono spostati su: https://github.com/metrodango/pip3line...

WhoWasI

WhoWasI Questa applicazione è in grado di impersonare qualsiasi utente con sessione attiva ed eseguire comandi nel contesto dell'utente impersonato. Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da: Chris Thomas, chris dot Thomas at nccgroup dot com...

CVE-2026-54481

A flaw was found in Gitea. The internal API HTTP client is configured to skip Transport Layer Security TLS certificate verification, which is an insecure practice. A remote attacker on the same network segment could exploit this vulnerability to perform man-in-the-middle MITM attacks. This allows...

Dropper-GCleaner-C2-Infrastructure-Kernel-Driver-PowerShell-Conhost-Payload-Analysis

1. Infrastruttura C2 – Server Resilienti e Ridondanti L'analisi della memoria di Process Hacker rivela un elenco completo di domini utilizzati dal Dropper GCleaner per la comunicazione C2. Questi domini sono ospitati su varie piattaforme Scaleway, Render, Replit, ecc., indicando un'infrastruttura...

CVE-2026-76993

A vulnerability was determined in GreyDGL PentestGPT up to 1.0.0. This vulnerability affects unknown code of the component Web-Page Crawling. Executing a manipulation of the argument Traceback can lead to injection. The attack can be executed remotely. A high complexity level is associated with...

php: ext-pgsql: PHP: SQL injection via improper backslash escaping

A flaw was found in PHP. Improper escaping of backslashes in attacker-provided parameters can lead to a SQL injection vulnerability. A remote attacker could exploit this flaw by crafting malicious input, potentially gaining unauthorized access to sensitive information, manipulating data, or causi...

CVE-2026-76988

A weakness has been identified in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This affects the function CipConnMgrClass::forwardopen of the file cipconnectionmanager.cc of the component ForwardOpen Handler. Executing a manipulation of the argument productcode can lead to...

CVE-2026-77070

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggregate operations, which parse the Query parameter as JSON after expression resolution without sanitizing MongoDB operators. An attacker who can influence the resolved query...

EUVD-2026-63220

A low privileged remote attacker with a valid session can submit a request to the user creation functionality exposed through /api/user/add.php to create new accounts with arbitrary role values, including the highest privilege level used by the application...

WordPress Salon Booking System - Free Version plugin < 10.30.34 - Unauthenticated Arbitrary Booking Total Tampering vulnerability

WordPress Salon Booking System - Free Version plugin 10.30.34 - Unauthenticated Arbitrary Booking Total Tampering vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Salon booking system versions 10.30.34...