crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

git-scanner

Git Scanner Framework This tool can scan websites with open .git repositories for Bug Hunting/ Pentesting Purposes and can dump the content of the .git repositories from webservers that found from the scanning method. This tool works with the provided Single target or Mass Target from a file list...

code-wsl-rce

Proof of Concept for VS Code Remote WSL Remote Code Execution - CVE-2021-43907 See the blog at https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit. Also https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43907. Building 1. npm install...

scarce-apache2

ScaRCE Framework - CVE-2021-41773 Hunter This tool can scan websites with CVE-2021-41773 Vulnerability that are affecting Apache2 Webserver, ScaRCE can run too for executing Remote Command Injections at the webservers that found from the scanning method Only if the MODCGI is Enabled at the target...

Pentest-Windows

Pentest-Windows11 v3.2 The First Windows Penetration Testing Environment on Mac M Chips 中文文档 | English README 📖 Project Overview 📝 System Introduction This environment aims to provide a ready-to-use Windows penetration testing environment. Reposting is welcome. Please indicate the original author...

cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

WSL_Payload_Builder

WSL Payload Builder Disclaimer This tool is intended for legitimate security research and penetration testing. Users are responsible for ensuring they have proper authorization before testing systems they do not own or have explicit permission to test. Overview A shell script for creating minimal...

Arbitrary Argument Injection

Overview launch-editor is a launch editor from node.js Affected versions of this package are vulnerable to Arbitrary Argument Injection via the getArgumentsForFile function in packages/launch-editor/get-args.js, where a filename is passed directly to an editor process without being resolved to an...

Arbitrary Argument Injection

Overview vite-plus is a The Unified Toolchain for the Web Affected versions of this package are vulnerable to Arbitrary Argument Injection via the getArgumentsForFile function in packages/launch-editor/get-args.js, where a filename is passed directly to an editor process without being resolved to...

Arbitrary Argument Injection

Overview vite is a Native-ESM powered web dev build tool Affected versions of this package are vulnerable to Arbitrary Argument Injection via the getArgumentsForFile function in packages/launch-editor/get-args.js, where a filename is passed directly to an editor process without being resolved to ...

CVE-2026-112944

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...

CVE-2026-112944 launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...

CVE-2026-112944

The launch-editor Node.js package is vulnerable to argument injection prior to version 2.14.2 . When an attacker can create a filesystem entry starting with a plus (+) or minus (-) in the working directory, launchEditor may forward this path without forcing it to be interpreted as a positional fi...

CVE-2026-112944 launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...

EUVD-2026-105045

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...

CVE-2026-112944 launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Ubuntu Pro for WSL vulnerability (USN-8892-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8892-1 advisory. Darshan U discovered that Ubuntu Pro for WSL exposed the attach token in command-line arguments when enabling a subscription o...

USN-8892-1: Ubuntu Pro for WSL vulnerability

Darshan U discovered that Ubuntu Pro for WSL exposed the attach token in command-line arguments when enabling a subscription on a WSL instance. An attacker could possibly use this issue to obtain sensitive information and gain unauthorized access to Ubuntu Pro repositories...

USN-8892-1 wsl-pro-service vulnerability

Darshan U discovered that Ubuntu Pro for WSL exposed the attach token in command-line arguments when enabling a subscription on a WSL instance. An attacker could possibly use this issue to obtain sensitive information and gain unauthorized access to Ubuntu Pro repositories...

Linux Distros Unpatched Vulnerability : CVE-2026-102371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the...