sccmsqlclient

sccmsqlclient Un cliente MSSQL dedicado para la exploración y explotación de bases de datos SCCM. Consultas de reconocimiento Ejecutar scripts de PowerShell en clientes administrados Extraer secretos Instalación PIPX root@kitploit: $ pipx install git+https://github.com/synacktiv/sccmsqlclient/ PI...

nimrm

nimrm Cliente de shell WinRM nativo escrito en Nim Versión 1.2.0 · Autor Chokri Hammedi blue0x1 · Licencia MIT...

PowerShx

SharpShx Ejecución de PowerShell no administrada usando DLLs o un ejecutable independiente. Introducción PowerShx es una reescritura y expansión del proyecto PowerShdll. PowerShx proporciona funcionalidades para evadir AMSI y ejecutar PS Cmdlets. Funcionalidades Ejecutar PowerShell con DLLs usand...

DSCourier_BOF

DSCourier BOF Esta es una implementación BOF del proyecto DSCourier de Dylan Davis y Matthew Schramm. Utiliza la interfaz COM de WinGet para ejecutar código arbitrario de PowerShell en un proceso firmado y de confianza de Microsoft. Su blog de investigación completo se encuentra aquí. A diferenci...

Invoke-PSImage

Invoke-PSImage Codifica un script de PowerShell en los píxeles de un archivo PNG y genera un comando de una línea para ejecutarlo Invoke-PSImage toma un script de PowerShell y codifica los bytes del script en los píxeles de una imagen PNG. Genera un comando de una línea para ejecutar desde un...

Sunflower Simple and Personal 1.0.1.43315 - Remote Code Execution

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

DKMC

No mates a mi gato DKMC Windows 10 ahora limita la ejecución adecuada del payload de shellcode debido a la necesidad de una página RWX para decodificar y ejecutar el shellcode. DKMC puede actualizar la configuración de una página de memoria con el permiso adecuado. No mates a mi gato es una...

CcmMessagingBackdoor

CcmMessagingBackdoor Proof of Concept tooling to build and install a rogue CcmMessaging service to maintain access on a Management Point Usage Compile and install the rogue COM service on the Management Point root@kitploit: Compile PS C:\ C:\Windows\Microsoft.NET\Framework64\v2.0.50727\csc.exe...

Dropper-GCleaner-C2-Infrastructure-Kernel-Driver-PowerShell-Conhost-Payload-Analysis

1. Infraestructura C2: servidores resilientes y redundantes El análisis de memoria con Process Hacker revela una lista completa de dominios utilizados por el Dropper GCleaner para la comunicación C2. Estos dominios están alojados en varias plataformas Scaleway, Render, Replit, etc., lo que indica...

Follina_MSDT_CVE-2022-30190

Microsoft explica que “existe una vulnerabilidad de ejecución remota de código cuando se llama a MSDT utilizando el protocolo URL desde una aplicación que realiza la llamada, como Word. Un atacante que explote esta vulnerabilidad con éxito puede ejecutar código arbitrario con los privilegios de l...

Malicious code in @solana-js/web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b539591552f3e960f65ceb70d946bc56f240f9bdb1400c501723aa32fd305ec Package name @solana-js/web3 impersonates the legitimate @solana/web3.js SDK, and package.json falsely attributes authorship to 'Solana Labs' with a...

Linux Distros Unpatched Vulnerability : CVE-2026-71312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP...

PT-2026-68331

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.75.0 Description In the backend/sftp/sftp.go file, the software interpolates remote SFTP paths into PowerShell hash commands. The quoteOrEscapeShellPath function only escapes ASCII apostrophes, failing to account for...

Malicious code in tailwind-gutenberg-block-zero (npm)

The npm package tailwind-gutenberg-block-zero is a supply-chain dropper disguised as a WordPress / Gutenberg block plugin. The published tarball carries the trappings of a real plugin a my-tailwind-blocks.php, a wp-scripts build configuration, a README and a screenshot, but its real behaviour liv...

PYSEC-2026-3425 Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS

HTTP transports expose unauthenticated PowerShell control with wildcard CORS There is an issue in the SSE and Streamable HTTP transport modes. The default stdio mode is not affected, but the documented HTTP modes expose the MCP control plane without authentication and add wildcard CORS handling...

Malicious code in checkmarx-claude-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a16e61d88e467ada75205ee93a9339cdf2fb65f3ded068282b4d83b6cb05e9 When the CLI runs the documented npx checkmarx-claude-cache invocation pattern, bin/cli.js performs an HTTPS GET to a hardcoded URL on a lookalike ho...

MAL-2026-6576 Malicious code in checkmarx-claude-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a16e61d88e467ada75205ee93a9339cdf2fb65f3ded068282b4d83b6cb05e9 When the CLI runs the documented npx checkmarx-claude-cache invocation pattern, bin/cli.js performs an HTTPS GET to a hardcoded URL on a lookalike ho...

CVE-2026-48989

Windows-MCP is an open-source project that integrates AI agents with Windows. In versions prior to 0.7.5, certain HTTP modes exposed the MCP control plane without authentication while enabling wildcard CORS alloworigins=, allowmethods=, allowheaders=. Because the same server also exposed a...

CVE-2026-48989 Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS

Windows-MCP is an open-source project that integrates AI agents with Windows. In versions prior to 0.7.5, certain HTTP modes exposed the MCP control plane without authentication while enabling wildcard CORS alloworigins=, allowmethods=, allowheaders=. Because the same server also exposed a...

CVE-2026-48989 Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS

Windows-MCP is an open-source project that integrates AI agents with Windows. In versions prior to 0.7.5, certain HTTP modes exposed the MCP control plane without authentication while enabling wildcard CORS alloworigins=, allowmethods=, allowheaders=. Because the same server also exposed a...