CVE-2025-47827

CVE-2025-47827 Prova di concetto e rapporto di vulnerabilità per CVE-2025-47827. Contenuti Descrizione Divulgazione Impatto Rilevamento Mitigazione Binari Prova di concetto Risorse Descrizione In IGEL OS precedenti alla v11, Secure Boot può essere aggirato perché il modulo igel-flash-driver...

CVE-2021-22893_HoneyPoC2

CVE-2021-22893 QUESTO NON È UN VERO EXPLOIT È UN HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ Script Proof-of-Concept PoC per sfruttare Pulse Secure CVE-2021-22893. NON ESEGUIRE QUESTO. Utilizzo Consente RCE su Pulse Secure VPN root@kitploit: chmod +x exploit.sh ./exploit.sh 10.0.0.1...

USSH

USSH USSH è un protocollo shell e una coppia client/server costruita su USTP-Secure. Non è un tunnel TCP e non incapsula SSH in TCP. Stato: Beta Licenza: MIT Nomi dei cifrari AEAD chacha20 = CHACHA20POLY1305 aes-256-gcm = AES256GCM aes-128-gcm = AES128GCM Cifrario AEAD predefinito: chacha20 Porta...

sniffglue

sniffglue sniffglue is a network sniffer written in rust. Network packets are parsed concurrently using a thread pool to utilize all cpu cores. Project goals are that you can run sniffglue securely on untrusted networks and that it must not crash when processing packets. The output should be as...

CVE-2026-54467

On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...

CVE-2026-54467

Trusted Firmware-M (TF-M) versions 2 through 2.3.0 (before commit 00d1b3e) contain a vulnerability in the mailbox initialization routine on PSOC64 and RP2350 platforms. The root cause is acceptance of a non-secure, unvalidated pointer supplied during initialization, which could allow compromise o...

CVE-2026-54467

On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...

EUVD-2026-66233

On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...

CVE-2026-54467

On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...

CVE-2026-54467

On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...

ivanti-cve-2023-35080-privilege-escalation-bof

Ivanti Connect Secure VPN Escalation dei privilegi Ivanti Secure Access precedentemente Pulse Secure escalation dei privilegi Cobalt Strike BOF CVE-2023-35080. Exploit di Alex e BOF di Tijme. Reso possibile da Northwave Cyber Security Descrizione Questo è un Cobalt Strike CS Beacon Object File BO...

skf-flask

OLD and archived Security Knowledge Framework Please note that this is the archived version of SKF, we are busy building a brand new Security Knowledge Framework. For more updates please visit this github repo: https://github.com/Security-Knowledge-Framework/Platform...

PT-2026-81926

On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...

Ivanti-Connect-Around-Scan

Ivanti Connect Around Vulnerability Checker Ivanti Connect Around Vulnerability Checker Visão Geral Recursos Tipos de Verificações WEB ACCESS SYSTEM INFO BYPASS DETECTED Explicação dos Tipos de Status Começando Requisitos Uso Argumentos Especificação de Alvos Variáveis Personalizadas Estilização ...

pulse-meter

Pulse Meter هذه أداة قيد التطوير لتحليل "System Snapshot" لقطة النظام من جهاز Ivanti Connect Secure لتحديد مؤشرات الاختراق المحتملة IOCs المرتبطة بـ CVE-2023-46805 وCVE-2024-21887 وCVE-2025-0282. تنبيه : من الممكن حدوث نتائج إيجابية خاطئة، لذا من الأفضل التحقق يدويًا لتأكيد أي نتائج. ملاحظة حول ف...

CVE-2014-6271-Shellshock-

CVE-2014-6271-Shellshock- Questo è un compito individuale per la programmazione di rete sicura...

ivanti_shell

CVE-2024-21887 का Ngrok रिवर्स शेल के साथ शोषण यह रिपॉजिटरी एक Python स्क्रिप्ट प्रदान करता है जो Ivanti Connect Secure गेटवेज़ में CVE-2024-21887 भेद्यता के शोषण को प्रदर्शित करने के लिए डिज़ाइन किया गया है। यह शैक्षिक और नैतिक परीक्षण उद्देश्यों के लिए एक रिवर्स शेल स्थापित करने के लिए Ngrok का...

Phishious

Phishious क्या है? Phishious एक ओपन-सोर्स सिक्योर ईमेल गेटवे SEG मूल्यांकन टूलकिट है जो रेड-टीमर्स के लिए डिज़ाइन किया गया है और CanIPhish टीम द्वारा विकसित किया गया है। Phishious यह देखने की क्षमता प्रदान करता है कि विभिन्न सिक्योर ईमेल गेटवे तकनीकें फिशिंग सामग्री प्रस्तुत किए जाने पर कैसे...

mallory

mallory HTTP/HTTPS proxy over SSH. Installation Local machine: go install github.com/justmao945/mallory/cmd/mallory@latest Remote server: need our old friend sshd Configuration Config file Default path is $HOME/.config/mallory.json, can be set when start program root@kitploit: mallory -config...

zerologon

zerologon Controlla gli eventi che indicano dispositivi non compatibili - CVE-2020-1472 EventID 5827 EventID 5828 EventID 5829 EventID 5830 EventID 5831 Ad agosto Microsoft ha corretto CVE-2020-1472. Con quella patch c'è un periodo di attesa fino al 9 febbraio 2021 in cui le connessioni non sicur...