zabbix-threat-control

Zabbix Threat Control ztc Turn the Zabbix you already run into a vulnerability-management console. ztc reads each host's software inventory through the stock zabbix-agent2 no extra agent to deploy, audits it against Vulners, and pushes scored, per-host findings — problems, dashboards and CVSS...

kiterunner

Kiterunner Introducción Durante mucho tiempo, el descubrimiento de contenido se ha centrado en encontrar archivos y carpetas. Si bien este enfoque es efectivo para servidores web heredados que alojan archivos estáticos o responden con 3xx ante una ruta parcial, ya no es efectivo para aplicaciones...

CVE-2024-4577

CVE-2024-4577 PoC Exploit Description This repository contains a proof-of-concept PoC exploit for CVE-2024-4577, a critical vulnerability affecting all versions of PHP running on Windows. The vulnerability allows attackers to execute arbitrary code remotely. The flaw also impacts the XAMPP...

CVE-2018-5353

CVE-2018-5353 Zoho ManageEngine ADSelfServicePlus Client Privilege Escalation/RCE Information Vendor: Zohocorp Product: ManageEngine ADSelfServicePlus Versions Affected: Before 5.5 build 5517 Researcher: Jason Juntunen aka @missing0x00 https://github.com/missing0x00 CVSS: 8.8 Description The cust...

veneficus-implant-public

Veneficus Mini - Full kill-chain malware 0day: Exploit, LPE, Pivot, C2, Persistence Full kill-chain malware 0day: Exploit, LPE, Pivot, C2, Persistence Public technical outline · pseudo-code only · not executable abraxaslabs.tech · @abraxasnull Veneficus Mini is Full kill-chain malware 0day:...

veneficus

@abraxasnull · [email protected] · abraxaslabs.tech · github.com/abraxas/veneficus Credit: @YoSoth0 Veneficus Mini v3.0 Windows 10/11 x64 implant kit: a PowerShell stager , a Rust PE , and a Cloudflare Worker that pages the operator on Telegram. The stager resources/loader.ps1 is meant to...

kl-security-key

KL Security Key Experimental open-source RP2040 FIDO2/WebAuthn authenticator engineering and interoperability project by Karaaslan Labs. Status: engineering/research project. Not FIDO Alliance certified. Not a commercial high-assurance security token. Evidence boundary: the real-device observatio...

CVE-2024-4577-checker

CVE-2024-4577 Vulnerability Checker The CVE-2024-4577 Vulnerability Checker is a Bash script designed to scan multiple domains for the CVE-2024-4577 vulnerability in PHP-CGI. This tool allows security researchers and system administrators to quickly assess whether their systems or a list of domai...

Rootsmart-v2.0

Rootsmart 2.0 w/ cve-2019-2215 + Ransomware Disclaimer This project is solely for educational purposes. This project utilise code from rkshrksh/2048-Game and kangtastic/cve-2019-2215. Project Description This project is part of Singapore Institute of Technology Mobile Security module. The project...

CVE-2019-16941

CVE-2019-16941 Proof-of-Concept: The vulnerability requires multiple and relatively improbable conditions in order to get triggered, fact that limits its exploitability. However, it takes little effort and understanding to prepare a payload given the fact that it can result into an arbitrary code...

BobTheSmuggler

BobTheSmuggler Quick Update Jan 15th, 2024 -Support for multi-file compression has been added. If you have multiple files generated for your final payload e.g., DLL-Sideloading files or multi-stage delivery files, you can now use the '-i' option to specify the directory path. If a directory path ...

apache__nifi_CVE-2022-33140_1-16-22

Apache NiFi Status Resources Contacts !Track Issueshttps://img...

NtWarden

NtWARden Windows Analysis and Research Toolkit Windows system inspection tool built on ImGui + DirectX 11. Covers processes, services, network, kernel internals, and more - locally or over the network via WinSysServer. ⚠️ Parts of this project were vibe coded with AI assistance so it might have...

CVE-2022-0486

Fidelis Network and Deception - CVE-2022-0486 - Insecure File Permissions Privilege Escalation - Multiple Releasability and Acknowledgements All exploits were approved for public release by the United States Government. Special thanks to the servicemen and government liaisons tasked with approvin...

oxide_hive

Oxide Hive An exploit for the HiveNightmare/SeriousSAM vulnerability that allows you to read registry hives containing sensitive data without admin privileges. If that doesn't sound like privilege escalation I don't know what does. Usage After building the exploit with cargo build and retrieving...

emp3r0r

emp3r0r A self-healing, memory-only C2 for Linux and Windows — agents that survive broken links, never touch disk, and script their way through the Win32 API. What is emp3r0r? emp3r0r is a post-exploitation framework and C2 built for Linux and Windows environments where stealth and resilience...

windiff

WinDiff Acerca de WinDiff es una herramienta web de código abierto que permite navegar y comparar información de símbolos, tipos y llamadas al sistema de archivos binarios de Microsoft Windows en diferentes versiones del sistema operativo. La base de datos de archivos binarios se actualiza...

SCShell

SCShell SCShell is a fileless lateral movement tool that relies on ChangeServiceConfigA to run commands. The beauty of this tool is that it does not perform authentication against SMB. Everything is performed over DCERPC. The utility can be used remotely WITHOUT registering a service or creating ...

grandstream-cve-2026-2329-analysis

Patch and Variant Analysis of CVE-2026-2329 in Grandstream GXP1600 Firmware Defensive static-analysis project comparing Grandstream GXP1600 firmware 1.0.7.79 vulnerable and 1.0.7.81 patched to understand how the vendor remediated the request-parsing flaw associated with CVE-2026-2329. Why this...

Webmin_Exploit_reverse_shell

ntroduction: The Webmin Exploit is a targeted exploit for the Webmin service, which can be exploited on older versions of Webmin. This exploit uses various techniques to execute malicious code and gain unauthorized access to the target system. It involves: Using both C and Assembly code to execut...