libptrace

libptrace libptrace是一个事件驱动的进程/线程调试、追踪和操作框架。它使用C语言编写，并具有Python 2.7和3.7的绑定。 它的设计初衷是作为库使用。API在设计时考虑了跨平台支持。虽然当前版本仅运行在32位和64位（支持wow64）的Windows上，但其设计和抽象使得其他平台甚至远程调试支持可以在同一API下添加。 它是多核/多线程感知的，可以轻松地同时运行多个事件循环。通过增加执行核心数量，可以扩展调试进程组或管道，或追踪大量进程的能力。 前言 我在2006年还在大学时编写了libptrace的初始版本，并于2011年将其重新授权给当时的雇主Immunity...

e013

e013 一个从Windows窃取WiFi密码的小型VBScript脚本 在WifiName.txt文件中，你可以看到每个支持VBscript的Windows计算机上所有已保存WiFi的密码 ⚠️ 不要使用记事本修改脚本，请使用文本编辑器（如GNU Emacs、Vim、Atom、VSCode、Sublime Text等）⚠️...

CVE-2020-27955-LFS

Exploit de ejecución remota de código RCE en Git-lfs CVE-2020-27955 versión .bat / powershell Vulnerables: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken, etc. Descubierto por Dawid Golunski https://legalhackers.com https://exploitbox.io Probado en Windows...

columbo

Columbo Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets. It breaks down data to small sections and uses pattern recognition and machine learning models to identify adversaries behaviour and their possible locations in compromise...

Palsy-Virus

Palsy Virus Virus en Python que paralizará tu PC una vez que se abra ,se oculta a sí mismo y se agrega al inicio del registro ^^ Plataforma : -- Windows solo :P...

CVE-2024-4577

PHP-CGI Windows平台远程代码执行漏洞CVE-2024-4577 简介 PHP是Hypertext Preprocessor超文本预处理器的缩写，现是一种广泛使用的开源的脚本语言，它特别适合Web开发和嵌入HTML中，使用起来很简单。 CGI，英文叫做公共网关接口，就是Apache在遇到PHP脚本时会将PHP程序提交给CGI应用程序php-cgi.exe解释，解释之后的结果返回给Apache，然后再返回给相应的请求用户。 漏洞描述...

cve-2022-32223

CVE-2022-32223 用于生成 CVE-2022-32223 演示利用的源文件： Node.js 在 Windows 平台上的某些情况下容易受到执行流劫持：DLL 劫持的影响。 如果受害者在 Windows 机器上具有以下依赖项，则可以利用此漏洞： OpenSSL 已安装，并且存在 “C:\Program Files\Common Files\SSL\openssl.cnf”。 只要满足上述条件，node.exe 将在当前用户目录中搜索 providers.dll。 之后，node.exe 将按照 Windows 中的 DLL 搜索顺序尝试搜索 providers.dll。...

CVE-2018-1000802-PoC

Python CVE-2018-1000802 Prueba de Concepto Esta es una PoC para la vulnerabilidad en la función makearchive exportada por el módulo integrado shutil. La vulnerabilidad está presente en CPython Python 2.7 anterior al commit add531a1e55b0a739b0f42582f1c9747e5649ace. Para que la vulnerabilidad sea...

CVE-2024-36991-Tool

CVE-2024-36991-Tool This binary POC automates the exploitation of CVE-2024-36991 by sending crafted curl requests to a vulnerable Splunk instance. It retrieves sensitive files and saves them locally for further analysis. The script is modular, allowing users to target specific file categories e.g...

CVE-2020-27955-LFS

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / versione powershell Vulnerabile: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken ecc. Scoperto da Dawid Golunski https://legalhackers.com https://exploitbox.io Testato su Windows su: git, GitHu...

obfus.h

obfus.h obfus.h è una libreria composta solo da macro per l'offuscamento in fase di compilazione di applicazioni C, progettata specificamente per Tiny C tcc puoi scaricarlo qui - Tiny-C-Compiler/releases. È pensata per piattaforme Windows x86 e x64 e supporta quasi tutte le versioni del...

BrainDamage

BrainDamage Ein auf Python basierendes Remote-Administrationstool, das Telegram als C&C-Server verwendet. root@kitploit: /\ /.\ ,.-'/ ",'-., -^ /-^: | \ | \ | | | | | | | | Entwickelt von: Mehul Jain -- Nur für Windows | | | | | | | | | / / | | | | | '/ / | | | | / | | || || | | | /\ \ ||...

CVE-2020-24227

CVE-2020-24227 Playground Sessions - Memorizzazione delle credenziali utente in chiaro Playground Sessions v2.5.582 e versioni precedenti per Windows memorizza le credenziali utente in testo semplice, consentendo a chiunque abbia accesso a C:\Users\AppData\Roaming\Playground\Local...

Linux Distros Unpatched Vulnerability : CVE-2026-79139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to...

OptixGate

Optix Gate è uno strumento multiuso di amministrazione remota sicura per Microsoft Windows. Fornisce accesso remoto a più sessioni Windows e/o macchine contemporaneamente. Storia Optix Gate è stato creato, tra le altre cose, per mantenere e sviluppare ulteriormente le mie capacità di programmazio...

CVE-2024-4577

CVE-2024-4577: Vulnerabilità critica nelle configurazioni CGI di PHP Esiste una grave falla di sicurezza nella modalità CGI di PHP che consente agli aggressori di eseguire comandi arbitrari manipolando i parametri dell'URL. Versioni interessate Versioni di PHP precedenti alla 7.4.29 e alla 8.0.19...

CVE-2026-0293

A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is...

EUVD-2026-57707

A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is...

CVE-2026-22887

The CVE-2026-22887 entry concerns Intel PROSet/Wireless WiFi Software for Windows, where improper buffer restrictions in the Ring 0 kernel may allow a denial of service. An unprivileged, unauthenticated attacker could achieve DoS with a low-complexity, adjacent-access attack and no user interacti...

SUSE CVE-2026-19163

Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...