pipe-intercept

pipe-intercept Intercettare la comunicazione delle Named Pipe di Windows utilizzando Burp o strumenti proxy HTTP simili Le named pipe sono molto diffuse per la comunicazione tra processi su Windows. Vengono utilizzate in molte applicazioni, inclusa la chiamata di procedura remota RPC di Windows. ...

jebmcp

Un server e plugin MCP rapido e sporco per JEB Pro. Testato su Cline, Cursor e RooCode. Riferimento: https://github.com/mrexodia/ida-pro-mcp Installazione Requisiti root@kitploit: Python = 3.11 uv: https://docs.astral.sh/uv/getting-started/installation/ Utilizzo COPIA il file src/jebmcp/MCP.py in...

gdbfuzz

GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...

recon

Il progetto è stato spostato su monorepo. Vedi https://github.com/pownjs/pown per maggiori informazioni. Recon Recon è un framework di ricognizione di target basato su grafi di conoscenza. Usare grafi di conoscenza invece di rappresentazioni tabellari piatte rende più facile trovare le relazioni...

DiscordRAT

DiscordRAT V2 Discord Remote Administration Tool – vollständig in Python3 geschrieben. Dies ist ein RAT, der über Discord gesteuert wird und über 20 Post-Exploitation-Module verfügt. Haftungsausschluss: Dieses Tool ist nur für Bildungszwecke gedacht. Der Autor übernimmt keine Verantwortung für...

f609-brute

f609-brute f609-brute è un semplice strumento di brute force per i router ZTE F609 di Telkom Indonesia. Poiché Telkom Indonesia implementa TR-069 sui modem ZTE F609, aggiornano regolarmente la password di amministrazione. f609-brute funziona su Python 2.7. Usage usage: python f609.py Example Usag...

octopus

Octopus Un enorme ringraziamento a QuoScient per aver sponsorizzato questo progetto. Octopus è un framework di analisi della sicurezza per moduli WebAssembly e Smart Contract Blockchain. Lo scopo di Octopus è quello di fornire un modo semplice per analizzare moduli WebAssembly chiusi e bytecode d...

synapse

Synapse |support| |development| |documentation| |license| |pypi| |python| Synapse wird jetzt aktiv unterhalten bei element-hq/synapse Synapse ist ein Open-Source-Matrix -Homeserver, der von 2019 bis 2023 als Teil der Matrix.org Foundation entwickelt wurde. Die Matrix.org Foundation kann die Wartu...

bleach

Bleach HINWEIS: 2026-06-05: Bleach wird nicht mehr weiterentwickelt. Es wird keine zukünftigen Versionen geben, auch nicht für Sicherheitsprobleme. Siehe Issue: Bleach ist eine HTML-Bereinigung-Bibliothek auf Basis einer Positivliste, die Markup und Attribute escaped oder entfernt. Bleach kann Te...

CVE-2026-68929

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat iLink share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership check. As a result, an unauthenticated...

CVE-2026-54083

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path traversal vulnerability that lets an attacker create or delete arbitrary files on the filesystem as root. The script...

NtDetours

NTSTATUS NTAPI TrInitPVOID ImageBase = &ImageBase; rendi scrivibile la IAT. vedi simple.cpp TimedSleepEx chiama la vera API SleepEx tramite il puntatore a funzione TrueSleepEx. static DWORD WINAPI TrueSleepExDWORD dwMilliseconds, BOOL bAlertable = SleepEx; DWORD WINAPI TimedSleepExDWORD...

CVE-2021-32537

CVE-2021-32537: Zugriff außerhalb des zulässigen Bereichs in RTKVHD64 führt zu Pool-Korruption. Dies ist ein Fehler, den ich Anfang April 2021 bei Realtek gemeldet habe. Der betroffene Treiber heißt RTKVHD64.sys und scheint auf einer Reihe von Mainstream-Hardware verfügbar zu sein getestet wurden...

Exploit for Code Injection in Langflow

CVE-2025-3248 — Langflow Unauthenticated Remote Code Execution...

Security Bulletin: Security Vulnerability in Apache Zookeeper affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-24281 CVE-2026-24308)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache Zookeeper Vulnerability Details CVEID:CVE-2026-24281 DESCRIPTION: Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails,...

ADC-19781

ADC-19781 Mehrere Prüfungen für CVE-2019-19781 Modulinstallation Laden Sie die zwei Dateien ADC-19781.psd1 & ADC-19781.psm1 herunter und legen Sie sie an einem der folgenden Speicherorte ab: C:\Users%USERNAME%\Documents\WindowsPowerShell\Modules\ADC-19781 C:\Program...

PT-2026-82918

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free amdgpu amdkfd gpuvm free memory of gpu unpinned DOORBELL and MMIO remap BOs which are pinned at allocation time before checking whether the BO is still mapped to the GPU...

PT-2026-83006

In the Linux kernel, the following vulnerability has been resolved: can: softing: fw parse: validate firmware record spans fw parse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...

PT-2026-82944

In the Linux kernel, the following vulnerability has been resolved: ocfs2: don't BUG ON an invalid journal dinode BUG A fuzzed OCFS2 image can corrupt the current slot journal dinode while mount is still in progress. The mount path first reports the invalid journal block and then crashes in...

PT-2026-83361

Name of the Vulnerable Software and Affected Versions mongosqld affected versions not specified Description When configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require one. This allows clients that provide no...