reconerator

Resumen Este es un ensamblado .NET personalizado que realiza una serie de actividades de reconocimiento situacional. Hay varios conjuntos de funcionalidades actuales: BASIC - Obtiene información del disco y del registro. LDAP - Permite realizar consultas LDAP personalizadas de Active Directory...

pwndrop

pwndrop es un servicio de alojamiento de archivos autodesplegable para enviar cargas útiles de red team o compartir de forma segura tus archivos privados a través de HTTP y WebDAV. Si alguna vez has necesitado configurar rápidamente un servidor web nginx/apache para alojar tus archivos y nunca...

httpdoom

HttpDoom - Analizador de superficie de ataque HTTP Valide grandes superficies de ataque basadas en HTTP de forma rápida y fiable. Inspirado en Aquatone. Instalación Debe tener el SDK dotnet en la versión 6+: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg...

CVE-2026-108569

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack ...

CVE-2026-108570 Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine

A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special...

CVE-2026-108570

A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special...

CVE-2026-108570 Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine

A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special...

CVE-2026-108570

A security flaw exists in the Furion .NET Framework (up to version 4.9.9.95) within the View Engine component. Specifically, the RunCompile function in the file framework/Furion/ViewEngine/Engines/ViewEngine.cs fails to properly neutralize special elements used in the template engine when process...

nimcrypt

nimcrypt Nimcrypt es un Crypter de .NET PE escrito en Nim, basado completamente en el trabajo del proyecto OffensiveNim de @byt3bl33d3r: https://github.com/byt3bl33d3r/OffensiveNim Esta herramienta fue inspirada por la publicación de blog de @S3cur3Th1sSh1t hace unos meses, ya que es esencialment...

CVE-2026-108569

A SQL injection vulnerability exists in the Furion .NET Framework up to version 4.9.9.92 . The issue is located within the String.Replace function in the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. Specifically, improper handling of the Name argument allows for injection...

CVE-2026-108569 Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack ...

EUVD-2026-96875

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack ...

msmap

MSMAP Msmap es un generador de WebShells en Memoria. Compatible con varios Contenedores, Componentes, Codificadores, WebShell / Proxy / Killer y Clientes de Gestión. 简体中文 La idea detrás I, La idea detrás II, La idea detrás III Características WIP Función Menú Dinámico Compilación Automática Gener...

shed

Shed - Inspector de tiempo de ejecución de .NET Shed es una aplicación que permite inspeccionar el tiempo de ejecución .NET runtime de un programa para extraer información útil. Puede usarse para inspeccionar aplicaciones maliciosas y obtener una primera visión general de qué información se...

powersap

PowerSAP PowerSAP es una reimplementación simple en PowerShell de técnicas populares y efectivas de todas las herramientas públicas como Bizploit, módulos auxiliares de Metasploit o scripts de Python disponibles en Internet. Esta reimplementación no contiene ninguna vulnerabilidad nueva o no...

inject-assembly

inject-assembly - Ejecutar .NET en un Proceso Existente Esta herramienta es una alternativa a la ejecución tradicional fork and run para Cobalt Strike. El cargador puede ser inyectado en cualquier proceso, incluido el Beacon actual. Los ensamblados de larga duración continuarán ejecutándose y...

CVE-2026-19577: Out-of-bounds Read

netrouteipv6packet in subsys/net/ip/routeipv6.c resolved the nexthop's link-layer address with netnbrgetlladdrnbr-idx without first checking whether the neighbor cache entry actually had a linked link-layer address. An unresolved neighbor carries idx == NETNBRLLADDRUNKNOWN 0xff, and netnbrgetllad...

CVE-2026-108569: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack ...

PT-2026-110101

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack ...

PT-2026-110222

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An issue exists in the RFC 6528 initial-sequence-number ISN implementation within subsys/net/ip/tcp.c. The system derives the TCP ISN using a 128-bit secret uniq...