The vulnerability of the Test IT testing system lies in the use of external control inputs for class selection, allowing a perpetrator to execute arbitrary commands.

The vulnerability of the Test IT testing system relates to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

catsploit

CATSploit🐈 CATSploit 是一款利用网络安全攻击技术评分（CATS）方法的自动化渗透测试工具，无需渗透测试人员即可使用。 目前，渗透测试人员通常隐含地为待攻击的目标系统选择合适的攻击技术。 CATSploit 利用扫描器收集的系统配置信息（如操作系统、开放端口、软件版本），并为每个攻击技术计算针对目标系统的捕获得分（eVc）和可检测性得分（eVd）。 通过选择最高得分值，无需黑客技巧（专业渗透测试人员的技能）即可选出最适合目标系统的攻击技术。 CATSploit 按以下顺序自动执行渗透测试： 1. 信息收集与先验信息输入 首先，收集目标系统的信息。CATSploit 支持...

catsploit

CATSploit🐈 CATSploit is an automated penetration testing tool using Cyber Attack Techniques Scoring CATS method that can be used without pentester. Currently, pentesters implicitly made the selection of suitable attack techniques for target systems to be attacked. CATSploit uses system...

CVE-2026-106309

Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106309

Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106309

Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

KsDumper-11

KsDumper-11 https://github.com/mastercodeon314/KsDumper-11/assets/78676320/9452970c-27cf-44df-b091-0d18a07937e5 Novedades en v1.3.4 Nueva función añadida: Detección Anti Anti-Debugging Tools Título de la ventana principal aleatorizado, la mayoría de los títulos de controles y el nombre del archiv...

msfpc

MSFvenom Payload Creator MSFPC A quick way to generate various "basic" Meterpreter payloads via msfvenom part of the Metasploit framework. About MSFvenom Payload Creator MSFPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only...

hermes-osint

Hermes OSINT v3.0 🏛️🧠 El Analista OSINT Agentic Investigaciones impulsadas por IA conversacional. Lenguaje natural. Resultados expertos. 🤖✨ Novedades en v3.0 🎉️ Hermes 3.0 representa un cambio de paradigma completo: de la orquestación de herramientas basada en pipelines a una plataforma de...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

evilTrust

evilTrust 用于自动部署 Rogue AP 的理想工具，支持模板选择 + 2FA。 该工具提供了多种可用模板，包括自定义模板选项，攻击者可以部署自己的模板。 重要提示 ：无需有线连接，因此可以随时随地发起攻击。 现在该工具已拥有图形界面！ 工作原理 工具首先检查部署攻击所需的实用工具： 验证通过后，列出可用网络接口，此时需要选择已配置为监听模式的接口（工具会自动配置）： 选择监听模式接口后，需要指定要创建的接入点名称及其工作信道。指定后，接口将被配置为监听模式并作为路由器运行，默认网关设置为 IP 地址 192.168.1.1 ，以 DHCP 模式工作。...

Nmap-Cheat-Sheet

Nmap-Cheat-Sheet Selección de objetivos en Nmap Scan a single IP nmap 192.168.1.1 Scan a host nmap www.testhostname.com Scan a range of IPs nmap 192.168.1.1-20 Scan a subnet nmap 192.168.1.0/24 Scan targets from a text file nmap -iL list-of-ips.txt Selección de puertos en Nmap Scan a single Port...

AOSP-DownloadProviderDbDumperSQLiWhere

AOSP-DownloadProviderDbDumperSQLiWhere PoC que explota inyección SQL en el Proveedor de Descargas de Android en el parámetro Selection CVE-2019-2198 Aviso de seguridad Inyección SQL en el Proveedor de Descargas de Android AOSP en el parámetro de selección de consulta CVE-2019-2198 Demostración...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

prowler

Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...

DIRT

DIRT：驱动程序初始侦察工具 我编写这个工具是为了学习 C++，并对 Windows 系统上安装的驱动程序进行初步评估（例如 OEM 或企业开发的主映像）。它旨在帮助进行目标选择、发现容易利用的漏洞，并为深度二进制分析提供一些辅助。目前不稳定，正在积极开发中。 主要功能 列出非管理员用户可通过 DeviceIoControl 与之交互的内核模式驱动程序。 这有助于缩小范围，找到可能用于 LPE 的驱动程序。 检索与驱动程序关联的公司名称以确定归属。 这有助于在目标选择中区分第三方驱动程序和微软驱动程序。 解析用于处理 DeviceIoControl 请求的...

EUVD-2026-89336

simple-git: VISUAL editor environment variable is omitted from unsafe editor detection...

The-Axer

The axer 将取代手动使用 msfvenom 创建 payload 的过程，使其更简单、更快捷。 联系所有者 THE AXER 将让您选择平台、格式、编码器、与另一个文件绑定以及许多其他功能...

recipe-blog-encoding

recipe-blog-encoding !WARNING Este proyecto está completamente codificado al estilo "vibe" probablemente parcialmente plagiado de este repositorio y el autor es un tontorrón que solo pensó que la idea era divertida Usa preámbulos de recetas optimizados para SEO como vehículo para codificar mensaj...