wotop

Web-On-Top-Of-Protocol WOTOP ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a tool meant to...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

telegram-c2

Telegram C2 Comando y control de un servidor a través de bots de Telegram. Instalación Tutorial Video Crea un bot de Telegram Edita main.py, establece BOTAPIKEY como la clave API del bot y telegramuserid como tu ID de Telegram Instala las siguientes dependencias pip install -r requirements.txt...

whoc

whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...

sshtunnel

|CircleCI| |AppVeyor| |readthedocs| |coveralls| |version| |pyversions| |license| Author : Pahaz Repo : https://github.com/pahaz/sshtunnel/ Inspired by https://github.com/jmagnusson/bgtunnel, which doesn't work on Windows. See also: https://github.com/paramiko/paramiko/blob/master/demos/forward.py...

CVE-2025-6514

mcp-remote Connect an MCP Client that only supports local stdio servers to a Remote MCP Server, with auth support: Note: this is a working proof-of-concept but should be considered experimental. Why is this necessary? So far, the majority of MCP servers in the wild are installed locally, using th...

CVE-2023-23752

Binaries for CVE-2023-23752 For ethical and educational purposes only 😉 Usage CVE-2023-23752 -u http://someserverexample.com Build from source Go If you have Go installed, do: git clone https://github.com/gunzf0x/CVE-2023-23752.git cd CVE-2023-23752 go run main.go -u http://someserverexample.com...

CVE-2022-29464

Exploit CVE-2022-29464 Este repositorio contiene un script para explotar la vulnerabilidad CVE-2022-29464, que permite subir archivos a servidores vulnerables. Úsalo únicamente en entornos autorizados y con fines educativos. Requisitos Python 3.8 o superior Instalación Paso 1: Clonar el repositor...

CVE-2025-63408

CVE-2025-63408 path-traversal.py: A re-implementation of https://github.com/eric-m-holub/double-agent/blob/main/doubleagent.py Uses uuids as part of the requested filename to avoid remote server crashing after first path traversal exploitation. run.py / shell.py: wrapper on top of podman to run...

CVE-2014-6271

CVE-2014-6271 Bash Shellshock and Aftershock Tester for Ansible 1. Install Ansible http://docs.ansible.com/introinstallation.html 2. Add servers to inventory file example: username@ip 3. Copy your public key to remote servers' .ssh/authorizedkeys 4. execute test $ ansible-playbook -i inventory...

CVE-2023-39141-LFI-enumerator

Enumerate remote server files by exploiting CVE-2023-39141 See POC: https://gist.github.com/JafarAkhondali/528fe6c548b78f454911fb866b23f66e...

Security Bulletin: WebSphere Application Server, which is bundled with IBM WebSphere Remote Server, is affected by an HTTP request smuggling vulnerability (CVE-2026-11710)

Summary WebSphere Application Server is shipped with IBM WebSphere Remote Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

Security Bulletin: WebSphere Application Server, which is bundled with IBM WebSphere Remote Server, is affected by a privilege escalation (CVE-2026-11545)

Summary WebSphere Application Server is shipped with IBM WebSphere Remote Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

PT-2026-96124

Name of the Vulnerable Software and Affected Versions CuteNews version 2.1.2 Description An unrestricted file upload issue exists in the core/modules/media.php file. Remote authenticated users with access to the Media Manager panel can upload files of dangerous types to execute arbitrary code...

EUVD-2026-81696

In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion encodelayoutstatsmaxsz budgets XDRQUADLENPNFSLAYOUTSTATSMAXSIZE, i.e. 256 bytes, for the layoutupdate4 body written by the layout driver. The flexfiles record can exceed that...

OESA-2026-3733 git security update

Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Git is easy to learn and has a tiny footprint with lightning fast performance. It outclasses SCM tools like Subversion, CVS, Perforce, and...

Astra Linux - Vulnerability in Squid

A vulnerability was discovered in Squid 4.x versions prior to 4.15 and 5.x versions prior to 5.0.6. If a remote server sends a specific response header via HTTP or HTTPS, it results in a denial of service. This header could plausibly occur in normal network traffic...

Astra Linux – Vulnerability in Python 3.7, Python 2.7

A flaw was discovered in Python. Improper handling of HTTP responses in the Python HTTP client code may allow a remote attacker, who controls the HTTP server, to cause the client script to enter an infinite loop, consuming CPU resources. The greatest threat of this vulnerability is to system...

CVE-2026-78254

A flaw was found in Apache Ant. The ftp and scp tasks, used for downloading files, are vulnerable to a path traversal issue. A malicious remote server can exploit this by providing specially crafted relative paths, allowing it to write files outside the intended download directory. This could lea...