wodat

wodat Windows Oracle Database Attack Tool Simple port of the popular Oracle Database Attack Tool ODAT https://github.com/quentinhardy/odat to C .Net Framework. Credit to https://github.com/quentinhardy/odat as lots of the functionality are ported from his code. Perform password based attacks e.g...

zBang

zBang is a special risk assessment tool that detects potential privileged account threats in the scanned network. Organizations and red teamers can utilize zBang to identify potential attack vectors and improve the security posture of the network. The results can be analyzed with the graphic...

evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

Invoke-SessionHunter

Invoke-SessionHunter Retrieve and display information about active user sessions on remote computers. No admin privileges required. The tool leverages the remote registry service to query the HKEYUSERS registry hive on the remote computers. It identifies and extracts Security Identifiers SIDs...

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

GlobalUnProtect

GlobalUnProtect PoC tool for decrypting and collecting GlobalProtect configuration, cookies, and HIP files from windows client installations. Blog post: https://rotarydrone.medium.com/4a1d8fc7773e Usage Run as standalone or in-memory via execute-assembly or equivalent. Collects all contents to an...

AdRem NetCrunch cross-session hijack startup RCE

Use victim sid@gid with unauthenticated attacker session x-sid to call SetScriptOptions + RestartNCServer. """AdRem NetCrunch Cross-Session Hijack RCE""" from future import annotations from kittysploit import from lib.protocols.http.httpclient import Httpclient from concurrent.futures import...

RCDevs WebADM logfile_viewer sid command injection RCE

Post-auth OS command injection in admin/logfileviewer.php sid parameter grep -E popen sink; proof via log readback. """RCDevs WebADM 2.4.14 - OS Command Injection in the Log Viewer sid Parameter CWE-78""" from future import annotations from kittysploit import from lib.protocols.http.httpclient...

RCDevs WebADM 2.4.14 - OS Command Injection in the Log Viewer `sid` Parameter (C — Detect

Fingerprint / reachability check for RCDevs WebADM 2.4.14 - OS Command Injection in the Log Viewer sid Parameter CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for RCDevs WebADM 2.4.14 - OS Command Injection in the Log Viewer sid Parameter CWE-78""" from kittysploit import from...

CVE-2024-3495-POC

CVE-2024-3495-POC The Country State City Dropdown CF7 WordPress plugin versions up to 2.7.2 is vulnerable to SQL Injection via 'cnt' and 'sid' parameters. Insufficient escaping and lack of preparation in the SQL query allow unauthenticated attackers to append queries, potentially extracting...

CVE-2026-116370

A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. The affected element is the function loadstring of the component Lua sandbox. Performing a manipulation results in type confusion. The attack may be initiated remotely. The exploit has been released to the publ...

EUVD-2026-109977

A security flaw has been discovered in 2K Games Sid Meier's Civilization IV 1.0.12.68. The affected element is the function loadstring of the component Lua sandbox. Performing a manipulation results in type confusion. The attack may be initiated remotely. The exploit has been released to the publ...

CVE-2026-116370

A security flaw exists in 2K Games Sid Meier's Civilization VI 1.0.12.68 within the Lua sandbox component. Specifically, the loadstring function is susceptible to manipulation that results in type confusion . This vulnerability can be triggered via a remote attack , potentially leading to signifi...

CVE-2026-116370 2K Games Sid Meier's Civilization VI Lua sandbox loadstring type confusion

A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. The affected element is the function loadstring of the component Lua sandbox. Performing a manipulation results in type confusion. The attack may be initiated remotely. The exploit has been released to the publ...

PT-2026-123411

A security flaw has been discovered in 2K Games Sid Meier's Civilization IV 1.0.12.68. The affected element is the function loadstring of the component Lua sandbox. Performing a manipulation results in type confusion. The attack may be initiated remotely. The exploit has been released to the publ...

CVE-2020-0665

CVE-2020-0665 - SID Filter Bypass Proof of Concept for CVE-2020-0665, which allows bypassing SID Filtering in Active Directory Forests Cross Forest Attack. Requirements for the attack Target Domain Controller machine must not be patched after February, 2020. Having previously compromised a Domain...

CVE-2026-111917

Vikunja 2.3.0 before 2.7.0 contains an improper session validation vulnerability that allows attackers to keep WebSocket access after revocation because handleAuth never checks the JWT sid claim against the sessions table. Attackers holding a stolen access token can open or maintain connections t...

EUVD-2026-103304

Vikunja 2.3.0 before 2.7.0 contains an improper session validation vulnerability that allows attackers to keep WebSocket access after revocation because handleAuth never checks the JWT sid claim against the sessions table. Attackers holding a stolen access token can open or maintain connections t...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Networking: dsa: mv88e6xxx: Fix –ENOENT when deleting VLANs and MST is not supported. Russell King reported that on version ZII dev rev B, deleting a bridge VLAN from a user port results in the error –ENOENT:...

CVE-2026-33795

A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a BGP Prefix-SID route advertisement that is subsequently re-advertised. This issue does not affect...