sashay

Sashay...

CVE-2018-16858-Python

CVE-2018-16858-Python Python-Implementierung von CVE-2018-16858 Basiert auf Arbeiten von hier und hier...

CVE-2023-27163

CVE-2023-27163 Python-Implementierung von CVE-2023-27163 Installation Gehen Sie folgendermaßen vor, um die Projektabhängigkeiten zu installieren: 1. Klonen Sie das Repository: root@kitploit: git clone https://github.com/yourusername/yourrepository.git 2. Wechseln Sie in das Projektverzeichnis:...

pypykatz

🚩 Sponsor Se ti piace questo progetto, considera l'acquisto di licenze di OctoPwn, la nostra suite completa di penetration testing che gira nel tuo browser! Per notifiche su nuove build/rilasci e altre informazioni, unisciti al nostro Discord pypykatz Implementazione di Mimikatz in puro Python...

domain_generation_algorithms

Domain-Generierungsalgorithmen In Python neu implementierte Domain-Generierungsalgorithmen DGAs von Malware. Übersicht banjori aka MultiBanker 2, BankPatcher Links http://johannesbader.ch/2015/02/the-dga-of-banjori/ Beispieldomains earnestnessbiophysicalohax.com kwtoestnessbiophysicalohax.com...

rdpy

RDPY Protocollo Remote Desktop in twisted python. RDPY è un'implementazione puramente Python del protocollo Microsoft RDP Remote Desktop Protocol lato client e server. RDPY è costruito sul motore di rete basato su eventi Twisted. RDPY supporta il livello di sicurezza RDP standard, RDP su SSL e...

pstf2

pstf^2 Framework di Fingerprinting Passivo per Strumenti di Sicurezza Hai mai desiderato un modo semplice, facile e furtivo per bypassare molteplici classi di prodotti di sicurezza? pstf^2 pronunciato pstf-quadrato è un'implementazione di un server HTTP in grado di eseguire fingerprinting passivo...

paramiko

|version| |python| |license| |ci| |coverage| .. |version| image:: https://img.shields.io/pypi/v/paramiko :target: https://pypi.org/project/paramiko/ :alt: PyPI - Package Version .. |python| image:: https://img.shields.io/pypi/pyversions/paramiko :target: https://pypi.org/project/paramiko/ :alt:...

routopsy

routopsy Routopsy is a toolkit built to attack often overlooked networking protocols. Routopsy currently supports attacks against Dynamic Routing Protocols DRP and First-Hop Redundancy Protocols FHRP. Most of the attacks currently implemented make use of a weaponised 'virtual router' as opposed t...

PyADRecon

Implementazione in Python3 di un ADRecon migliorato per Pentesters e Blue Teams. ADRecon è uno strumento che raccoglie informazioni su MS Active Directory e genera un report XSLX per fornire un quadro completo dello stato attuale dell'ambiente AD di destinazione. !TIP Se sei un Red Team, puoi dar...

crypto-attacks

مقدمة تطبيقات بلغة Python للهجمات والأدوات التشفيرية. المتطلبات SageMath مع Python 3.9 PyCryptodome يمكنك التحقق من إصدار Python الخاص بـ SageMath باستخدام الأمر التالي: $ sage -python --version Python 3.9.0 root@kitploit: إذا كان إصدار SageMath Python أقدم من 3.9.0، فقد لا تعمل بعض الميزات في بع...

CVE-2026-71554

h2 is a pure-Python implementation of a HTTP/2 protocol stack. Versions up to and including 4.4.0 accept request header blocks containing more than one Host header, and forward every Host header to the consuming application. Where the consumer downgrades HTTP/2 to HTTP/1.1, the resulting request...

CVE-2026-47180

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.5, DNSIncoming.decodelabelsatoffset recurses once per DNS-name compression pointer, and a single mDNS packet carrying chained pointers can trigger a RecursionError that escapes DNSIncoming.init, causing...

UBUNTU-CVE-2026-48487

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.16, readcharacterstring and readstring in src/zeroconf/protocol/incoming.py advanced self.offset by attacker-declared RDLENGTH without checking it against self.datalen, allowing unauthenticated hosts on th...

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the bz2.BZ2Decompressor objects. An attacker can cause out-of-bounds writes to a stack buffer by reusing a decompressor object after a decompression error and providing crafted input. This can result in...

PYSEC-0000-CVE-2026-48524

PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient.getsigningkey forces a fresh HTTP request to the JWKS endpoint for every JWT with an unknown kid value, with no rate limiting. Since kid comes from the unverified token header, an attacker can trigger unlimited...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in cbor2 [CVE-2026-26209]

Summary IBM Watson Speech Services Cartridge is vulnerable to adenial of service in cbor2, caused by uncontrolled recursion when decoding deeply nested CBOR structures CVE-2026-26209. Cbor2 is used in our speech runtimes. This vulnerabilitiy has been addressed. Please read the details for...

CVE-2026-44661

python-utcp is the python implementation of UTCP. Prior to 1.1.3, the utcp-http plugin is vulnerable to a blind Server-Side Request Forgery SSRF caused by a trust-boundary inconsistency between manual discovery and tool invocation. registermanual validates the discovery URL against an HTTPS /...

Universal Tool Calling Protocol 安全漏洞

Universal Tool Calling Protocol is an official Python implementation of the UTCP open-source protocol. Versions prior to 1.1.3 of Universal Tool Calling Protocol contained security vulnerabilities; these vulnerabilities stemmed from the prepareenvironment method passing complete environment...

Universal Tool Calling Protocol 代码问题漏洞

Universal Tool Calling Protocol is an official Python implementation of the UTCP open-source protocol. Versions prior to 1.1.3 of Universal Tool Calling Protocol had code vulnerabilities, which stemmed from inconsistent trust boundaries and could lead to man-in-the-middle server request forgery...