malwarescanner

MalwareScanner Very basic malware Scanner by hash comparison Sometimes this can be needed when an incident response. If you found new or suspicious files when you do response, you want to check out where these files exist in systems. so then you may need like this tool. this is a demo version. no...

slipstream

NAT Slipstreaming NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to any system behind a victim's NAT, bypassing the victim's NAT/firewall remote arbitrary firewall pinhole control, just by the victim visiting a website. v1 developed by : @SamyKamkar //...

CVE-2025-54123

CVE-2025-54123 概述 HoverFly 中间件 API 端点中存在已认证的远程代码执行漏洞，原因是输入验证不足和存在不安全的命令执行。 攻击流程 1. 认证 攻击者使用有效凭据或会话令牌认证到 HoverFly 通过 /api/token-auth 端点获取 Bearer 令牌 2. 恶意载荷构造 攻击者构造 JSON 载荷，包含： binary：/bin/bash（用户可控） script：任意 Shell 命令（例如 whoami、反向 shell） 3. 漏洞利用投递 向 /api/v2/hoverfly/middleware 发送 PUT 请求，携带恶意载荷 在...

manuka

Manuka Description Manuka is an Open-source intelligence OSINT honeypot that monitors reconnaissance attempts by threat actors and generates actionable intelligence for Blue Teamers. It creates a simulated environment consisting of staged OSINT sources, such as social media profiles and leaked...

CVE-2019-9673

CVE-2019-9673: Freenet content filter vulnerability NOTE: I have fully disclosed this bug to the Freenet team and worked with them to verify their patch. The patch is now deployed in the latest version of Freenet. I've recently found a security vulnerability in Freenet that may allow an attacker ...

spacesiren

SpaceSiren SpaceSiren is a honey token manager and alert system for AWS. With this fully serverless application, you can create and manage honey tokens at scale -- up to 10,000 per SpaceSiren instance -- at close to no cost.1 How It Works SpaceSiren provides an API to create no-permission AWS IAM...

CVE-2025-1739

CVE-2025-1738 与 CVE-2025-1739 — Trivision 摄像头 NC227WF PoC 📋 概述 CVE| CVSS v3.1| 评分| CWE| 类型 ---|---|---|---|--- CVE-2025-1739| AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N| 7.1| CWE-288| 通过 Basic Auth 泄露绕过身份验证 🔓 CVE-2025-1739 — Basic Auth 代码暴露 / 身份验证绕过 CWE-288 描述 摄像头通过 mblogin.asp 端点泄露了一个有效的 Base64 编码 Basi...

fapro

FaPro Free,Cross-platform,Single-file mass network protocol server simulator 中文Readme Description FaPro is a Fake Protocol Server tool, Can easily start or stop multiple network services. The goal is to support as many protocols as possible, and support as many deep interactions as possible for...

Devnull

DevNull DevNull is a Python CLI that automates the early, rep...

CVE-2025-32434-exploit

概要 このエクスプロイトは、PyTorchバージョン2.6.0未満における重大なリモートコード実行の脆弱性（CVE-2025-32434）を示しています。この欠陥は、モデルのデシリアライズ中に任意のコード実行を防ぐはずのweightsonly=Trueを使用している場合でも、torch.load関数に存在します。 この脆弱性は、weightsonlyunpicklerの実装がデシリアライズを適切に制限できないために発生し、攻撃者が悪意のある.ptモデルファイルを作成し、脆弱なPyTorchインストールで読み込まれると任意のシステムコマンドを実行できるようになります。 影響を受けるバージョ...

XeytanWin32-RAT

WARNING This is a buggy RAT, not completed, not stable. It still a "work in progress" application. Introduction Project created to kill some of my free time, It is not actively maintained. There are a lot of things to improve/fix, and it will take time to reach a stability on this project. Featur...

MACHINE-BASIC-PENTESTING-1

Penetration Testing Assessment Report: Basic Pentesting 1 !R...

tenet

Tenet - A Trace Explorer for Reverse Engineers Overview Tenet is an IDA Pro plugin for exploring execution traces. The goal of this plugin is to provide more natural, human controls for navigating execution traces against a given binary. The basis of this work stems from the desire to research ne...

AZL-99783 CVE-2026-82209 affecting package cmake 3.30.3-15

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...

AZL-99767 CVE-2026-82209 affecting package curl 8.11.1-11

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...

AZL-99825 CVE-2026-82209 affecting package rust 1.75.0-30

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...

AZL-99804 CVE-2026-82209 affecting package mysql 8.0.46-1

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...

CVE-2026-82209

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...

CVE-2026-80255

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

DEBIAN-CVE-2026-82209

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...