sashay

Sashay...

CVE-2018-16858-Python

CVE-2018-16858-Python Python-Implementierung von CVE-2018-16858 Basiert auf Arbeiten von hier und hier...

pypykatz

🚩 Sponsoren Wenn Ihnen dieses Projekt gefällt, erwägen Sie den Kauf von Lizenzen von OctoPwn, unserer vollständigen Pentesting-Suite, die in Ihrem Browser läuft! Für Benachrichtigungen über neue Builds/Releases und andere Informationen besuchen Sie unseren Discord pypykatz Mimikatz-Implementierun...

CVE-2023-27163

CVE-2023-27163 Python-Implementierung von CVE-2023-27163 Installation Gehen Sie folgendermaßen vor, um die Projektabhängigkeiten zu installieren: 1. Klonen Sie das Repository: root@kitploit: git clone https://github.com/yourusername/yourrepository.git 2. Wechseln Sie in das Projektverzeichnis:...

domain_generation_algorithms

Domain-Generierungsalgorithmen In Python neu implementierte Domain-Generierungsalgorithmen DGAs von Malware. Übersicht banjori aka MultiBanker 2, BankPatcher Links http://johannesbader.ch/2015/02/the-dga-of-banjori/ Beispieldomains earnestnessbiophysicalohax.com kwtoestnessbiophysicalohax.com...

rdpy

RDPY Remote Desktop Protocol em Python com Twisted. RDPY é uma implementação puramente Python do protocolo Microsoft RDP Remote Desktop Protocol lado cliente e servidor. RDPY é construído sobre o motor de rede orientado a eventos Twisted. RDPY suporta a camada de segurança RDP padrão, RDP sobre S...

pstf2

pstf^2 Passive Security Tools Fingerprinting Framework Haben Sie jemals einen einfachen, unauffälligen Umgehungsweg für mehrere Klassen von Sicherheitsprodukten gesucht? pstf^2 ausgesprochen pstf-Quadrat ist eine Implementierung eines HTTP-Servers, die passives Browser-Fingerprinting ermöglicht –...

paramiko

|version| |python| |license| |ci| |coverage| .. |version| image:: https://img.shields.io/pypi/v/paramiko :target: https://pypi.org/project/paramiko/ :alt: PyPI - Package Version .. |python| image:: https://img.shields.io/pypi/pyversions/paramiko :target: https://pypi.org/project/paramiko/ :alt:...

routopsy

routopsy Routopsy is a toolkit built to attack often overlooked networking protocols. Routopsy currently supports attacks against Dynamic Routing Protocols DRP and First-Hop Redundancy Protocols FHRP. Most of the attacks currently implemented make use of a weaponised 'virtual router' as opposed t...

PyADRecon

Implementação em Python3 de um ADRecon melhorado para Pentesters e Equipas Azuis. ADRecon é uma ferramenta que recolhe informações sobre o MS Active Directory e gera um relatório XSLX para fornecer uma imagem holística do estado atual do ambiente AD alvo. !TIP Se és uma Equipa Vermelha, podes...

crypto-attacks

مقدمة تطبيقات بلغة Python للهجمات والأدوات التشفيرية. المتطلبات SageMath مع Python 3.9 PyCryptodome يمكنك التحقق من إصدار Python الخاص بـ SageMath باستخدام الأمر التالي: $ sage -python --version Python 3.9.0 root@kitploit: إذا كان إصدار SageMath Python أقدم من 3.9.0، فقد لا تعمل بعض الميزات في بع...

CVE-2026-71554

h2 is a pure-Python implementation of a HTTP/2 protocol stack. Versions up to and including 4.4.0 accept request header blocks containing more than one Host header, and forward every Host header to the consuming application. Where the consumer downgrades HTTP/2 to HTTP/1.1, the resulting request...

CVE-2026-47180

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.5, DNSIncoming.decodelabelsatoffset recurses once per DNS-name compression pointer, and a single mDNS packet carrying chained pointers can trigger a RecursionError that escapes DNSIncoming.init, causing...

UBUNTU-CVE-2026-48487

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.16, readcharacterstring and readstring in src/zeroconf/protocol/incoming.py advanced self.offset by attacker-declared RDLENGTH without checking it against self.datalen, allowing unauthenticated hosts on th...

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the bz2.BZ2Decompressor objects. An attacker can cause out-of-bounds writes to a stack buffer by reusing a decompressor object after a decompression error and providing crafted input. This can result in...

PYSEC-0000-CVE-2026-48524

PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient.getsigningkey forces a fresh HTTP request to the JWKS endpoint for every JWT with an unknown kid value, with no rate limiting. Since kid comes from the unverified token header, an attacker can trigger unlimited...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in cbor2 [CVE-2026-26209]

Summary IBM Watson Speech Services Cartridge is vulnerable to adenial of service in cbor2, caused by uncontrolled recursion when decoding deeply nested CBOR structures CVE-2026-26209. Cbor2 is used in our speech runtimes. This vulnerabilitiy has been addressed. Please read the details for...

CVE-2026-44661

python-utcp is the python implementation of UTCP. Prior to 1.1.3, the utcp-http plugin is vulnerable to a blind Server-Side Request Forgery SSRF caused by a trust-boundary inconsistency between manual discovery and tool invocation. registermanual validates the discovery URL against an HTTPS /...

Universal Tool Calling Protocol 安全漏洞

Universal Tool Calling Protocol is an official Python implementation of the UTCP open-source protocol. Versions prior to 1.1.3 of Universal Tool Calling Protocol contained security vulnerabilities; these vulnerabilities stemmed from the prepareenvironment method passing complete environment...

Universal Tool Calling Protocol 代码问题漏洞

Universal Tool Calling Protocol is an official Python implementation of the UTCP open-source protocol. Versions prior to 1.1.3 of Universal Tool Calling Protocol had code vulnerabilities, which stemmed from inconsistent trust boundaries and could lead to man-in-the-middle server request forgery...