YARA-Performance-Guidelines

YARA Performance Guidelines Writing efficient YARA rules is essential for maintaining fast and accurate scanning performance. This guide provides key principles and best practices to help you optimize your rules, reduce unnecessary computation, and avoid common pitfalls. It incorporates insights...

MalwareApiLibrary

MalwareApiLibrary : collection of apis used for malware development : StringManagementLib : manage strings, string hashes, and others WinApiManagementLib : replacement of GetModuleHandle and GetProcAddress functions SyscallsManagementLib : runs Hellsgate, TartarusGate, PerunsFart so far to unhook...

CVE-2024-29510

Original research and POC code: https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/ NOTE: I have made no changes to the POC apart from the command executed. Full credit goes to Thomas Rinsma @ Codean Labs for their amazing research and POC. Local Scenario 1...

ESXi-Ransomware-Scanner-mi

ESXiransomwarescanner A program that scans IP addresses for signs of ESXi compromise by grabbing the ransom note from an html page and comparing the strings. Requirements python 3.x requests BeautifulSoup tqdm colorama Installation Use the package manager pip to install the required packages. pip...

CVE-2025-50110

CVE-2025-50110 Cleartext Transmission of Sensitive Information in EagleEyes Lite Android Application 1. Overview Name : EagleEyesLite Version : 2.0.0 Vendor : AVTECH CWE : CWE-319: Cleartext Transmission of Sensitive Information, CWE-598: Use of GET Request Method With Sensitive Query Strings CVS...

CVE-2024-1346

CVE-2024-1346 Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants. Exploit Title: LaborOfficeFree 19.10 MySQL Root Password Calculator -...

ICT287-CVE-2022-42889

ICT287-CVE-2022-42889 To find full exploit setup and recreation report please find the CVE-2022-42889-Project Vulnerability Exploitation Report file. VM that was used to build and run the exploit isn't included in this repository. Setup and exploit recreation for CVE-2022-42889 Text4Shell...

CVE-2012-1823

PHP CGI Argument Injection CVE-2012-1823 Description sapi/cgi/cgimain.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to execute arbitrary code by...

wordlistgen

wordlistgen ¿Qué y por qué? wordlistgen es una herramienta para pasar una lista de URLs y obtener una lista de palabras relevantes para tus listas de palabras. Las listas de palabras son mucho más efectivas cuando tomas en cuenta el contexto de la aplicación. wordlistgen extrae componentes de URL...

Chimera

Chimera es un script de ofuscación de PowerShell brillante y muy improvisado diseñado para evitar AMSI y soluciones antivirus. Digiere PS1 maliciosos conocidos por activar AV y utiliza sustitución de cadenas y concatenación de variables para evadir firmas de detección comunes. Chimera fue creado...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Versión: 0.4 Bytes Revealer es una potente herramienta de ingeniería inversa y análisis binario diseñada para investigadores de seguridad, analistas forenses y desarrolladores. Con funciones como vista hexadecimal,...

CVE-2026-11115-Database-Connection-String-Injection-via-Env-Variable

CVE-2026-11115 – Database Connection String Injection via Env Variable Program Code Python dbconnector.py - Constructs DB connection string from environment import os, psycopg2 def connect: Reads DBURL; attacker can override via environment injection if they control an env var dburl =...

LeetObfuscator

LeetObfuscator ██╗ ███████╗███████╗████████╗ ██║ ██╔════╝██╔════╝╚══██╔══╝ ██║ █████╗ █████╗ ██║ ██║ ██╔══╝ ██╔══╝ ██║ ███████╗███████╗███████╗ ██║ ╚══════╝╚══════╝╚══════╝ ╚═╝ ██████╗ ██████╗ ███████╗██╗ ██╗███████╗ ██████╗ █████╗ ████████╗ ██████╗ ██████╗ ██╔═══██╗██╔══██╗██╔════╝██║...

CVE-2026-88785

The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN acce...

doona

Doona - Strumento di fuzzing di rete .:: Informazioni ::. Doona è un fork del Bruteforce Exploit Detector Tool BED. BED è un programma progettato per controllare i daemon per potenziali buffer overflow, bug di formato stringa, ecc. Doona è il termine australiano per piumino. Aggiunge un numero...

EUVD-2026-96773

The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN acce...

CVE-2026-88785

The Simple Membership WordPress plugin, in versions before 4.8.3 , is vulnerable to credential exposure. When the optional auto-login-after-registration feature is enabled, the plugin transmits a newly registered member's plaintext password within a URL query string . This exposure allows anyone ...

CVE-2026-88785 Simple Membership < 4.8.3 - Newly Registered Member Password Disclosure via URL Query String

The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN acce...

hardcodes

hardcodes extrae cadenas del código fuente hardcodes es una utilidad para buscar cadenas escritas directamente hardcoded por desarrolladores en los programas. Utiliza un tokenizador modular que puede manejar comentarios, cualquier cantidad de barras invertidas y casi cualquier sintaxis que se le...

m4ngl3m3

m4ngl3m3! Installazione rapida: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py Aiuto di base: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE OUTPUTFILE Common password...