ICMPExfil

ICMP Exfil ICMP Exfil allows you to transmit data via valid ICMP packets. You use the client script to pass in data you wish to exfiltrate, then on the device you're transmitting to you run the server. Anyone watching-- human or security system-- will just see valid ICMP packets, there's nothing...

pe_to_shellcode

petoshellcode Converts PE so that it can be then injected just like a normal shellcode. At the same time, the output file remains to be a valid PE. Supports both 32 and 64 bit PEs Authors:@hasherezade & @hh86 Objective The goal of this project is to provide a possibility to generate PE files that...

CVE-2026-5718-Lab

CVE-2026-5718 Laboratório Docker Local Laboratório Docker local apenas local que compara a versão vulnerável e a corrigida para CVE-2026-5718 , que afeta o plugin WordPress Drag and Drop Multiple File Upload for Contact Form 7. Este laboratório demonstra a diferença entre a versão vulnerável...

homoglyphs

IL PROGETTO È ARCHIVIATO Fork: https://github.com/orsinium/forks Homoglyphs Homoglyphs -- libreria Python per ottenere omoglifi e convertirli in ASCII. Caratteristiche È una versione più intelligente di confusablehomoglyphs: Rilevamento automatico o scelta manuale della categoria alias da ISO...

memgrep

Memory grep Una utility di ricerca nella memoria attraverso più processi Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/memgrep Rilasciato sotto AGPL, vedere LICENSE per...

Ascii-And-Sub-Encoder

ASCII And/Sub Encoder Dieses Tool wurde erstellt, während ich mich auf den Offensive-Security-CTP-Kurs vorbereitet habe, der zur Legacy-OSCE-Zertifizierung führt. Das Tool erzeugt nasm-freundliche Assembler-Anweisungen eines angepassten Ascii-Subtraction-Encoders. Die Entwicklung dieses Tools...

S.P.A.R.K--Standard-Python-ASCII-RPG-Kit-

S.P.A.R.K Version 1.0 Übersicht S.P.A.R.K ist eine leichte 2D-Retro-ASCII-RPG-Spiel-Engine. Sie basiert auf der Standardbibliothek, daher ist keine PIP-Installation erforderlich. Der Zweck der Engine ist lehrreich. Ich betrachte sie als Erweiterung meiner 15 Mini-Python-Spiele-Tutorial-Reihe; sie...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104774 advisory. Buffer over-read in PostgreSQL ascii SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is t...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: kunit/overflow: Fixed the UB in overflowallocationtest. The 'devicename' array does not exist outside the 'overflowallocationtest' function scope. However, it is being used as a driver name when calling 'kunitdrivercreate' from...

duplicut

Duplicut :scissors: Quickly dedupe massive wordlists, without changing the order...

bissap

bissap root@kitploit: %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%. % % % .: % .===% . :: % :%%=====%%%%%%: % %%%= =====%============%%%-% = % = =====-================ % BBBBBBBBBBBBBBBBB IIIIIIIIII SSSSSSSSSSSSSSS SSSSSSSSSSSSSSS AAA PPPPPPPPPPPPPPPPP = : =====================% + B::::::::::::::::B I::::::::I...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

The vulnerability of the ascii() function in the PostgreSQL database management system allows attackers to disclose sensitive information.

The vulnerability of the ascii function in the PostgreSQL database management system is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

BIT-POSTGRESQL-2026-18024 PostgreSQL ascii() function reads past end of buffer

Buffer over-read in PostgreSQL ascii SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.5, 17.11, 16.1...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

SUSE CVE-2026-18024

Buffer over-read in PostgreSQL ascii SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.5, 17.11, 16.1...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

CVE-2026-18024

Buffer over-read in PostgreSQL ascii SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.6, 17.11, 16.1...

ALPINE-CVE-2026-18024

Buffer over-read in PostgreSQL ascii SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.6, 17.11, 16.1...