SharpExchange

SharpExchange 这个命令行 POC 展示了如何使用 C 与 Microsoft Exchange EWS 交互，表明除了 Powershell 之外，还可以用其他工具实现。 是的，这是一个简单的 POC，用来展示如何做到这一点。它并非 100% 完善。如果你想展示你高超的 l33t C 编码或红队技能，欢迎提交 pull request : 本工具仅供教育目的。请勿用于邪恶或非法用途。 MS 文档：...

IntelTXE-PoC

免责声明 所有信息仅供参考学习之用。请自行承担遵循这些说明的风险。作者及其雇主均不对任何个人或组织因根据本页所含信息采取或未采取行动而导致的直接或间接损害或损失负责。 目录 简介 所需软件 生成载荷 生成解锁令牌 准备 SPI Flash 镜像 将文件集成到固件镜像 禁用 OEM 签名 构建固件镜像 启动主 CPU 将镜像写入 SPI Flash 准备 USB 调试线 修补 OpenIPC 配置文件 解密 OpenIPC 配置文件 将 LMT Core 添加到配置 设置 IPCPATH 环境变量 执行 JTAG 可操作性的初始检查 显示 CPU ME 线程 暂停核心 ME 调试：快速入门...

hot-jar-swapping-urlclassloader

URLClassLoader JAR 热替换 以下示例代码展示了热替换已加载 JAR 文件并实现代码执行的能力，其利用的事实是：只要 inode 不变，内部类在被调用时仍会访问该 JAR 文件。 已在 MacOS 上使用 OpenJDK 测试通过（并且还曾通过 Transporter 在 Apple 的 Author publisher 上完成了利用）。 演示来自 Frans Rosén 在 NahamCon 2022 EU 上的演讲《通过热 JAR 替换在 Apple 上实现 RCE 的故事》。 如何运行 build-and-run.sh 运行方式： root@kitploit:...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

priority-intelligence-requirements-dev

Developing Priority Intelligence Requirements @ Red Hat v1.1 In the rapidly evolving landscape of cyber threat intelligence CTI, the formulation of Priority Intelligence Requirements PIRs stands as a crucial component of your CTI program and the planning and direction phase of the intelligence...

Damn_Vulnerable_C_Program

注意：文件名已从imgRead.c更改为dvcp.c，如果你正在观看视频，你会看到imgRead.c，但在GitHub仓库中你会看到dvcp.c，请使用正确的文件名。 Damn Vulnerable C ProgramDVCP 我的YouTube频道： https://www.youtube.com/user/MrHardik05/featured?viewas=subscriber 它是什么？ 这是一个我编写的简单C程序，用于解释常见类型的漏洞，例如： 1. 整数溢出 2. 整数下溢 3. 越界读取 4. 越界写入 5. 双重释放 6. 释放后使用 7. 内存泄漏 8. 栈耗尽 9...

Exploit for Missing Authorization in Postgresql

PostgreSQL CVE-2026-6471: logical decoding dlopen of an arbitr...

CVE-2026-8625 Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.df-element' Element Inner HTML

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postcontent Custom HTML block inner HTML' parameter in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output...

CVE-2026-8625

Dear Flipbook (PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer) for WordPress is vulnerable to Authenticated Stored XSS in all versions up to and including 2.4.30 . An attacker with Contributor-level access can inject a crafted .df-element div with data-df-lightbox='thumb' via a Custom HTML bloc...

EUVD-2026-71841

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postcontent Custom HTML block inner HTML' parameter in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output...

CVE-2026-8625 Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.df-element' Element Inner HTML

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postcontent Custom HTML block inner HTML' parameter in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output...

certificate-ripper

Certificate Ripper 🔐 A CLI tool to extract server certificates Demo Advantages It is fast Easy to use No openssl required Runs on any Operating System Can be used with or without Java, native executables are present in the releases Extracts all the sub-fields of the certificate Certificates can b...

Exploit for CVE-2026-57062

gpgsm CVE-2026-57062: CMS AES-GCM short tag USN-8720-1 GnuP...

CVE-2017-9822

CVE-2017-9822 DotNetNuke often abbreviated as DNN is a CMS Content Management System platform and web application framework based on Microsoft's ASP.NET technology. Key Information Affected Product: DotNetNuke DNN Platform – a popular .NET CMS/portal. Disclosure Date: July 2017. Severity: Critica...

CVE-2026-0897

CVE-2026-0897 — Google Keras：权重加载中的 HDF5 形状炸弹拒绝服务漏洞 -orange?style=for-the-badge -brightgreen?style=for-the-badge 概述 字段| 详情 ---|--- CVE ID| CVE-2026-0897 软件包| keras（Google Keras） 注册源| PyPI 受影响版本| 3.0.0 至 3.13.0（含） 漏洞类型| CWE-770：无限制或无节流的资源分配 CVSS 分数| 7.1 高危（CVSS 4.0，CNA：Google Inc.） CVSS 向量|...

TryHack3M-Bricks-Heist

target:10.201.6.98 enumeration root@kitploit: nmap -A 10.201.6.98 since there is a wordpress with name "brick by brick" and the name of this room is brick it is probably where we can find vulnerability so lets enumerate wordpress root@kitploit: wpscan --url https://bricks.thm --disable-tls-checks...

telerik-scanner-CVE-2019-18935

Telerik CVE-2019-18935 Vulnerability Scanner A Python-based security scanner designed to detect the Telerik UI for ASP.NET AJAX Remote Code Execution vulnerability CVE-2019-18935. 🚨 Vulnerability Details CVE : CVE-2019-18935 Risk Level : HIGH CWE : CWE-913 CVSS : 9.8 Critical Description Telerik ...

emp3r0r v4.15.0

emp3r0r A self-healing, memory-only C2 for Linux and Windows — agents that survive broken links, never touch disk, and script their way through the Win32 API. What is emp3r0r? emp3r0r is a post-exploitation framework and C2 built for Linux and Windows environments where stealth and resilience...

CVE-2026-50369

CVE-2026-50369 reproducer for a TOCTOU race condition in rdpcorets.dll!CRdpPipeGfxPlugin::Enable on Windows Server 2025 RDS Session Hosts. i reported this as a DoS; the code-path seem to somehow also enable EoP. this reproducer is a PoC for the DoS path alone. Bug Enable reads a COM interface...

MGASA-2026-0377 Updated python-linkify-it-py package fixes security vulnerabilities

LinkifyIt.match was quadratic on untrusted input when linkify is enabled GHSA-8m2q-wq3r-6hq8. Fix quadratic complexity in LinkifyIt.match, port of linkify-it 5.0.1 and 5.0.2 upstream CVE-2026-48801, CVE-2026-59887 82 Match validators at a position instead of slicing the tail, needed because Pytho...