GitDorker

GitDorker GitDorker est un outil qui utilise l'API de recherche GitHub et une liste exhaustive de dorks GitHub que j'ai compilée à partir de diverses sources afin de fournir un aperçu des informations sensibles stockées sur GitHub pour une requête de recherche donnée. L'objectif principal de...

revsh

revsh revsh est un outil permettant d'établir des reverse shells avec support terminal, des VPNs inversés pour pivotement avancé, ainsi que du tunneling de données arbitraires. Actualités 2018-08-09 : Nouvelle version. Principalement des corrections de bugs / stabilité et une meilleure...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 153.2: fixed: Deleting an Exchange account retained the outgoing server settings fixed: Thunderbird upgrade disabled Settings menu for versions before macOS 13 fixed: Windows jump list menu no longer functioned...

SUSE-SU-2026:4268-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 153.2: fixed: Deleting an Exchange account retained the outgoing server settings fixed: Thunderbird upgrade disabled Settings menu for versions before macOS 13 fixed: Windows jump list menu no longer functioned...

CVE-2018-20250

exploit pour Extraire l'exécution de code de Winrar poc par Ridter Comment utiliser ? Vous devez simplement installer Python 3.7, préparer un fichier malveillant que vous souhaitez exécuter, définir les valeurs souhaitées, ce script d'exploit générera automatiquement le fichier d'archive...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

msprobe

msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...

msprobe

msprobe À propos Installation Utilisation Exemples À venir Remerciements À propos Trouver toutes les instances Microsoft sur site pour le password spraying et l'énumération. L'outil utilisera une liste de sous-domaines courants associés à votre domaine apex cible pour tenter de découvrir des...

EUVD-2026-82981

A flaw was found in the multicluster-observability-addon. A remote attacker can access a debug endpoint without authentication, due to a misconfiguration in the underlying addon-framework library. This allows for the disclosure of sensitive operational information, such as goroutine, heap, and...

CVE-2026-93685

A misconfiguration in the addon-framework library's cmdfactory.newcontrollercommandconfig exposes an unauthenticated debug endpoint on the multicluster-observability-addon component. After completing a basic encrypted connection, a remote attacker on an adjacent network can retrieve sensitive ope...

CVE-2026-93685 Multicluster-observability-addon: multicluster-observability-addon: possible unauthenticated debug/metrics endpoint via cmdfactory.newcontrollercommandconfig (confirmed exposed by engineering)

A flaw was found in the multicluster-observability-addon. A remote attacker can access a debug endpoint without authentication, due to a misconfiguration in the underlying addon-framework library. This allows for the disclosure of sensitive operational information, such as goroutine, heap, and...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

CVE-2025-5961

CVE-2025-5961 Migration, Sauvegarde, Mise en scène – WPvivid Backup & Migration 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host...

CVE-2026-93685

A flaw was found in the multicluster-observability-addon. A remote attacker can access a debug endpoint without authentication, due to a misconfiguration in the underlying addon-framework library. This allows for the disclosure of sensitive operational information, such as goroutine, heap, and...

covert-control

covert-control Contrôlez des systèmes à distance en téléchargeant des fichiers vers Google Drive, OneDrive, YouTube ou Telegram en utilisant Python pour créer les fichiers et les écouteurs. Il permet de créer des fichiers texte, des images, de l'audio ou des vidéos, avec les commandes en clair ou...

covert-control

covert-control Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram using Python to create the files and the listeners. It allows to create text files, images, audio or videos, with the commands in cleartext or encrypted using AES. covert-googledrive.py -...

CVE-2023-4220-RCE

CVE-2023-4220-RCE Résumé Avis de Starlabs Produit affecté : Chamilo , -p --port REMOTE PORT -c --comand Options pour le shell inverse -lh/--localhost : IP de l'attaquant -lp/--localtcat port de l'écouteur...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

CVE-2023-49367

CVE-2023-49367 - Exposition de données Sensetive Exposition de données Sensetive dans le panneau Web de l'imprimante Kyocera Fournisseur : Kyocera Corporation Versions concernées : Command Center RX - EXOSYS M5521cdn Description Après connexion au carnet d'adresses de l'interface Kyocera, des...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...