slowloris

slowloris.py - 简单的 Python slowloris 什么是 Slowloris？ Slowloris 基本上是一种影响多线程服务器的 HTTP 拒绝服务攻击。它的工作原理如下： 1. 我们开始发起大量 HTTP 请求。 2. 我们定期（每约 15 秒）发送头部信息，以保持连接处于打开状态。 3. 除非服务器主动关闭，否则我们从不关闭连接。如果服务器关闭了一个连接，我们就创建一个新连接并继续做同样的事情。 这会耗尽服务器的线程池，导致服务器无法响应其他用户。 引用 如果你觉得这个作品有用，请按以下方式引用它 root@kitploit:...

CVE-2021-45046

tejas-nagchandi/CVE-2021-45046 Ataque Descripción Se descubrió que la corrección para abordar CVE-2021-44228 en Apache Log4j 2.15.0 era incompleta en ciertas configuraciones no predeterminadas. Esto podría permitir a atacantes con control sobre los datos de entrada del Thread Context Map MDC cuan...

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...

Anti_suspend

Antisuspend Just an example of using shellcode to secure a process. Prevents: 1Freezing process threads you can use anti-attach for debugger 2Hardware breakpoints 3Hide thread from the debugger Problem: Use code in non legit modules This will raise the flags of AV...

moneta

/ \ / | / \ / \ / \ / / \ \ / Y | \ /| | / | //| | / | / / / / / Moneta v1.0 | Forrest Orr | 2020 REQUIRED -m |region|referenced|ioc -p |PID OPTIONAL -v detail|debug|surface -d --option from-base|statistics --filter unsigned-module|clr-prvx|clr-heap|metadata-modules --address --region-size -m...

BeaconHunter

BeaconHunter Herramienta de monitoreo y caza basada en comportamiento construida en C que aprovecha el rastreo ETW. Los equipos azules pueden usar esta herramienta para detectar y responder a posibles beacons de Cobalt Strike. Los equipos rojos pueden usar esta herramienta para investigar omision...

PoolParty

PoolParty 一个利用 Windows 线程池实现完全免杀的进程注入技术集合。在 Black Hat EU 2023 简报会上以标题 The Pool Party You Will Never Forget: New Process Injection Techniques Using Windows Thread Pools 进行展示 PoolParty 变体 变体 ID| 变体描述 ---|--- 1| 覆盖目标工作线程工厂的启动例程 2| 向目标进程的线程池插入 TPWORK 工作项 3| 向目标进程的线程池插入 TPWAIT 工作项 4| 向目标进程的线程池插入 TPIO...

threadfire

threadfire 该程序使用线程劫持技术向标准 Win32 应用程序注入原生 Shellcode。我制作此程序时年仅 15 岁——请忽略不规范的代码。 关于 我开发这个小项目是为了继续体验不同的代码注入方法，并让红队安全专业人员能够利用此方法作为一种独特的方式进行软件渗透测试。通过线程劫持，hijacker.exe 程序可以挂起 target.exe 程序中的一个线程，从而允许我们将 shellcode 写入该目标线程，并随后执行（通过 WriteProcessMemory、SetThreadContext、ResumeThread、CreateThread）。 示例 GIF 用法...

CVE-2018-6389

doser.py 用于HTTP请求的DoS工具（灵感来自Hulk，但功能更多），使用Python编写： 示例 999个线程发送GET请求： root@kitploit: python doser.py -t 999 -g 'https://targeted.site.com' 999个线程发送带有JSON数据的POST请求： root@kitploit: python doser.py -t 999 -p 'https://targeted.site.com' -ah 'Content-Type: application/json' -d '"json": "payload"' 用法...

elevationstation

Elevation Station Stealing and Duplicating SYSTEM tokens for fun & profit! We duplicate things, make twin copies, and then ride away. You have used Metasploit's getsystem and SysInternals PSEXEC for getting system privs, correct? Well, here's a similar standalone version of that...but without the...

wpbf

wpbf! wpbf is a bruteforce tool to remotely test password strength, username enumeration and plugin detection on a WordPress site. Description ^^^^^^^^^^^ The script will try to login into the WordPress dashboard through the login form using a mixture of enumerated usernames, a wordlist and...

CVE-2026-89334 Better Messages <= 2.15.33 - Missing Authorization to Authenticated (Custom+) Chat-Room Transcript Disclosure via '/thread/<id>' REST Endpoint

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.15.33. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...

CVE-2026-89334

The Better Messages plugin for WordPress (chat rooms, group chat, private messages & AI chat bots) is vulnerable to authorization bypass in all versions up to and including 2.15.33 . The plugin fails to properly verify user authorization on the /thread/ REST endpoint , allowing any authenticated ...

Driver-HideKernelThread-IoCancelIrp

Driver-HideKernelThread-IoCancelIrp no es mi código. solo para guardarlo https://bbs.pediy.com/thread-272795.htm Principio Establece la dirección de entrada del hilo en IoCancelIrp y el contexto en el irp que creaste. Entonces el hilo llamará a IoCancelIrp. cuando sea llamado, realizará la...

keystone

Keystone Engine Keystone est un framework d'assembleur léger, multiplateforme et multi-architecture. Il offre des fonctionnalités inégalées : Multi-architecture, avec prise en charge d'Arm, Arm64 AArch64/Armv8, Ethereum Virtual Machine, Hexagon, Mips, PowerPC, RISC-V, Sparc, SystemZ et X86 y...

doser.go

doser.go Herramienta DoS para peticiones HTTP inspirada en hulk pero con más funcionalidades escrita en Go: ¿Cómo usarla? 1. Compílala root@kitploit: go build doser.go 2. Úsala Por ejemplo: 999 hilos envía peticiones GET. Nota: Por favor, no ataques realmente mi sitio web root@kitploit: ./doser -...

CVE-2026-91149 Cockpit: cockpit: denial of service via unbounded connection thread spawning

A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. This forces the service to create an unbounded number of detached threads, consuming system resources such as...

CVE-2026-91149 Cockpit: cockpit: denial of service via unbounded connection thread spawning

A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. This forces the service to create an unbounded number of detached threads, consuming system resources such as...

CVE-2026-91149

A flaw in Cockpit allows an unauthenticated remote attacker to trigger a denial of service by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. The service creates an unbounded number of detached threads , exhausting system resources such as memory and file d...

CVE_2026_40369

CVE202640369 Exploit poc y exp para CVE202640369, relacionados con mi análisis, usa cmake. Código de depuración, archivos poc y exp para la reproducción de CVE202640369, escritos con cmake. Como siempre, basta con usar los comandos habituales de cmake para completar la compilación. Sobre el...