CVE-2026-7458

🧨 CVE-2026-7458 – Bypass de OTP no PickPlugins User Verification Bypass de autenticação não autenticado via comparação frouxa na API REST de verificação de OTP PickPlugins User Verification ≤ 2.0.46 📖 Descrição O plugin User Verification da PickPlugins para WordPress versões ≤ 2.0.46 contém uma...

CVE-2026-41473-CyberPanel-AI-Scanner-Unauth

CVE-2026-41473 — Accesso API non autenticato in lettura/scrittura di CyberPanel AI Scanner Template di rilevamento Nuclei per CVE-2026-41473 che interessa le versioni di CyberPanel precedenti alla 2.4.4. Vulnerabilità La funzionalità AI Scanner di CyberPanel espone due endpoint API senza...

CVE-2026-23550

🧨 CVE-2026-23550 – Bypass Admin del Connettore Modulare Accesso amministrativo WordPress non autenticato tramite il parametroorigin=mo Plugin Modular Connector ≤ 2.5.1 📖 Descrizione Il plugin Modular Connector per WordPress versioni ≤ 2.5.1 contiene una vulnerabilità critica di bypass...

API-Wordlist

apiwordlist Una wordlist di nomi di API utilizzata per il fuzzing delle API delle applicazioni web. Contenuti apiseeninwild.txt - Contiene i nomi delle funzioni API che ho visto in natura. actions.txt - Tutti i verbi dei nomi delle funzioni API objects.txt - Tutti i nomi dei nomi delle funzioni A...

GPU_ShellCode

gpu poisoning; nascondere il payload nella memoria della gpu. dopo il mio vecchio repo, in cui usavo la descrizione del thread per nascondere il payload, volevo trovare un nuovo modo, quindi ora sto usando la memoria gpu nividia tramite le api cuda per allocare, scrivere e liberare quando non c'è...

BurpSuiteSharpener

Über dieses Repository & EOL Dieses Repository wird nicht mehr aktualisiert. Bitte verwenden Sie https://github.com/irsdl/BurpSuiteSharpenerEx. Burp Suite Sharpener Diese Erweiterung soll eine Reihe von UI- und Funktionsmerkmalen zu Burp Suite hinzufügen, um die Arbeit damit etwas zu erleichtern...

VehApiResolve

VehApiResolve Ispirato da offuscamento API a 32 bit di Dridex Loader. Come funziona? Configuriamo un gestore di eccezioni. root@kitploit: AddVectoredExceptionHandler CALLFIRST, ApiResolverHandler ; Questo gestore di eccezioni gestirà solo eccezioni generate come EXCEPTIONBREAKPOINT. Quando viene...

TokenMan

Suite per token di accesso e refresh. Token Man è uno strumento per supportare attività di post-exploitation utilizzando token di accesso e/o refresh AAD. Indice Utilizzo Comandi Fetch Search Swap Mappa degli ID client applicazione FOCI AZ OAuth Usage root@kitploit: usage: tokenman.py -h...

CVE-2026-3030-Prototype-Pollution-in-JSON-Merge-Patch

CVE-2026-3030 – JSON मर्ज पैच में प्रोटोटाइप प्रदूषण प्रोग्राम कोड Node.js root@kitploit: // server.js - Vulnerable REST API with deep merge const express = require'express'; const app = express; app.useexpress.json; let config = role: 'user', settings: ; // Insecure deep merge function pollutabl...

EDRs

EDRs Questa repository contiene informazioni sugli EDR che possono essere utili durante un'esercitazione di red team. patchsyscalldynamically64.c Questa proof-of-concept risolve dinamicamente l'ID della syscall senza dover verificare la versione in esecuzione sull'host remoto. Per ottenere le...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

CVE-2025-9074-Poc

Docker API RCE non autenticata CVE-2025-9074 Una vulnerabilità critica CVE-2025-9074 in Docker Desktop consente ai contenitori Linux in esecuzione locale di connettersi all'API Docker Engine tramite la sottorete predefinita 192.168.65.7:2375. Il problema persiste indipendentemente dalle...

columbus-server

Columbus Server Dieses Repository ist veraltet! ‼️ Die Server-Komponente wurde nach https://github.com/elmasy-com/columbus verschoben. Columbus Project ist ein API-first-Subdomain-Entdeckungsdienst, ein blitzschneller Subdomain-Enumeration-Dienst mit erweiterten Funktionen. Columbus gab 638...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Columbus returned 638 subdomains of tesla.co...

safety

!NOTE Come and join us at SafetyCLI. We are hiring for various roles. Table of Contents Table of Contents Introduction Key Features Getting Started GitHub Action Command Line Interface 1. Installation 2. Log In or Register...

trident

trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...

kraker

About Setup Server Setup Agent Setup Build from source Using release Contacts About Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and...

auto_re

AutoRE Features 1. Auto-renaming dummy-named functions, which have one API call or jump to the imported API Before After 2. Assigning TAGS to functions accordingly to called API-indicators inside Sets tags as repeatable function comments and displays TAG tree in the separate view Some screenshots...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

xray

XRay has been reimplemented in Rust and expanded with more features, this repository is LEGACY code. Usehttps://github.com/evilsocket/legba XRAY XRay is a tool for network OSINT gathering, its goal is to make some of the initial tasks of information gathering and network mapping automatic. How Do...