6951 matches found
trident
trident El proyecto Trident es una herramienta automatizada de rociado de contraseñas desarrollada para cumplir con los siguientes requisitos: La capacidad de ser desplegado en varias plataformas en la nube/proveedores de ejecución La capacidad de programar campañas de rociado de acuerdo con la...
trident
trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...
netmap.js
netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...
Remote-DLL-Injection-with-Timer-based-Shellcode-Execution
Inyección Remota de DLL con Ejecución de Shellcode Basada en Temporizador Documentación actualizada por el error anterior en el título de inyección de procesos! ⚠ Solo para Investigación Educativa Este repositorio contiene investigación de seguridad con fines educativos y solo para uso autorizado...
hulk
Herramienta DoS Hulk Herramienta DoS HULK portada al lenguaje Go desde Python. Utilidad original en Python por Barry Shteiman http://www.sectorix.com/2012/05/17/hulk-web-server-dos-tool/ Simplemente porté el código tal cual, rápido y sucio. Los nombres de las funciones originales se mantienen y l...
CVE-2021-32537
CVE-2021-32537: Acceso fuera de los límites en RTKVHD64 que conduce a corrupción del pool. Este es un error que reporté a Realtek a principios de abril de 2021. El controlador afectado se llama RTKVHD64.sys y parece estar disponible en varios dispositivos de hardware convencional probé las...
CVE-2026-98104
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix duplicate handle when node ID pool is exhausted gennewkid falls back to returning max htid | 0xFFF when both idrallocu32 ranges are full, instead of reporting an error. u32change trusts that value and inser...
CVE-2026-97605
In the Linux kernel, the following vulnerability has been resolved: erofs: preserve LZMA decoders on resize failure The pool-resize path frees each stream's old decoder before allocating its replacement. If an allocation fails after some streams have already been replaced, the failed stream is pu...
CVE-2022-25262
CVE-2022-25262 PoC + detalles de la vulnerabilidad CVE-2022-25262 | JetBrains Hub: toma de control de la respuesta SAML con un solo clic CVE-2022-25262 Requisitos Uso ¿Cómo funciona? Pool de códigos de autorización para el intercambio «OAuth2 - SAML» Apropiación del código de autorización OAuth2 ...
CVE-2026-87721
Uncontrolled Resource Consumption CWE-400 / CWE-407 in the ANTLR 3 search query parser QueryParser / Query.g in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an unauthenticated remote attacker or an authenticated user if anonymous read...
CVE-2026-87721 Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review
Uncontrolled Resource Consumption CWE-400 / CWE-407 in the ANTLR 3 search query parser QueryParser / Query.g in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an unauthenticated remote attacker or an authenticated user if anonymous read...
CVE-2026-87721
Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 are vulnerable to Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser (QueryParser / Query.g ). An unauthenticated remote attacker can trigger a persistent deni...
EternalBlue-Exploit-Demonstration
Demostración del Exploit EternalBlue MS17-010 Laboratorio de ciberseguridad que demuestra la explotación de CVE-2017-0144 EternalBlue usando Metasploit contra un sistema Windows 7 vulnerable, obteniendo acceso a nivel de SYSTEM a través de Meterpreter. Este proyecto también simula un ataque de...
EternalBlue-Exploit-Demonstration-MS17-010
Demostración del Exploit EternalBlue MS17-010 Laboratorio de ciberseguridad que demuestra la explotación de CVE-2017-0144 EternalBlue usando Metasploit contra un sistema Windows 7 vulnerable, obteniendo acceso a nivel SYSTEM a través de Meterpreter. Este proyecto también simula un ataque de...
Windows-Kernel-Exploitation
1. Non-Paged Pool Overflow Exploitation with Named Pipes Techniques based on named pipes for pool overflow exploitation demonstrated on CVE-2020-17087 and an off-by-one overflow 2. Segment Heap VS Allocator Metadata Abuse Techniques for turning a potentially limited write primitive eg a pool...
CVE-2026-79758
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.8.0 until 2.5.1, authenticated Termix users can access the server-stats API without per-host authorization. GET /status returns statuses for hosts the requester cannot access, GET...
CVE-2026-24306
Azure Front Door Privilege Escalation – CVE-2026-24306 PoC For authorized red team / research use only. Author not responsible for misuse. Vulnerability allows: Arbitrary routing rule injection Backend pool / origin group modification WAF policy attachment / override Custom domain takeover on...
CVE-2026-23842-Denial-of-Service-via-Database-Connection-Pool-Exhaustion-version-1.2.10
CVE-2026-23842 Denial of Service via Database Connection Pool Exhaustion in ≤ 1.2.10 📌 Overview This repository documents my discovery and responsible disclosure of CVE-2026-23842 , a High Severity Denial-of-Service vulnerability in ChatterBot. GitHub Advisory: GHSA-v4w8-49pv-mf72 CVE ID:...
CVE-2022-22715
Blogpost: https://whereisk0shl.top/post/break-me-out-of-sandbox-in-old-pipe-cve-2022-22715-windows-dirty-pipe Exploit needs to be executed from LOW INTEGRITY Cleanup is not completed. The exploit just fix the overwritten TOKEN objects but not the VS pool structure. This part is explained in the...