CVE-2026-4112

SonicWall SMA 8200v: Escalada de Privilegios mediante Inyección SQL Ciega entre Parámetros Firmware: 12.5.0-02283 Hotfix de Plataforma sobre la Base 12.5.0-02002 Aviso de SonicWall 1. Resumen Una vulnerabilidad de inyección SQL ciega posterior a la autenticación en la consola de gestión de...

CVE-2026-24061-NSE

CVE-2026-24061 — Bypass de autenticación en telnetd de GNU InetUtils Script de detección NSE para Nmap Resumen Este script NSE de Nmap detecta CVE-2026-24061 , una vulnerabilidad de bypass de autenticación en telnetd de GNU InetUtils versiones 1.9.3 hasta 2.7. Al enviar una variable de entorno US...

sops

SOPS: Operaciones de Secretos SOPS es un editor de archivos cifrados que soporta los formatos YAML, JSON, ENV, INI y BINARY, y cifra con AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age y PGP. demostración .. image:: https://i.imgur.com/X0TM5NI.gif .. image::...

Zero-Click-RCE-Incident-Response-CVE-2025-21298

Respuesta a Incidentes: Windows OLE Zero-Click RCE CVE-2025-21298 Visión General del Proyecto Este proyecto documenta la investigación y contención de extremo a extremo de un intento de Ejecución Remota de Código RCE Zero-Click de severidad crítica. Mediante telemetría EDR e inteligencia de...

Binary-Exploitation-and-Kernel-Escalation

Binary-Exploitation-and-Kernel-Escalation Acceso a nivel root asegurado mediante la identificación y explotación de configuraciones incorrectas y software desactualizado. Vulnerabilidad de desbordamiento de búfer en una versión desactualizada de modssl CVE-2002-0082. La escalada de privilegios se...

imago-forensics

imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

pillager

Pillager Pillage filesystems for sensitive information with Go. Table of Contents 1. Summary 2. Installation 3. Usage 4. Exfiltration 5. Documentation Summary Pillager is designed to provide a simple means of leveraging Go's strong concurrency model to recursively search directories for sensitive...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

autotimeliner

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. AutoTimeliner runs multiple Volatility3 plugins against Windows, Linux, and macOS memory images, then merges their output into a single, sorted CSV timeline: Generic Timeline Plugin Plugin| What it captures ---|---...

webscreenshot

webscreenshot Description A simple script to screenshot a list of websites, based on the url-to-image PhantomJS script. Features Integrating url-to-image 'lazy-rendering' for AJAX resources Fully functional on Windows and Linux systems Cookie and custom HTTP header definition support for the...

webscreenshot

webscreenshot Descripción Un script sencillo para capturar pantallas de una lista de sitios web, basado en el script url-to-image de PhantomJS. Características Integración del 'renderizado diferido' de url-to-image para recursos AJAX Funciona completamente en sistemas Windows y Linux Soporte de...

ppfuzz

ppfuzz Prototype Pollution Fuzzer A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀 Installation Binary Source Dependencies Demonstration Usage Basic Options Usage Supporting Materials Contributing Attribution Acknowledments License Installation Binary Simply,...

op4

op4 — Secure Terminal Messenger Op4 is a terminal-based encrypted messaging application written in Rust. It provides end-to-end encrypted private messaging with post-quantum cryptography, routed entirely through the Tor network so that neither the content of your messages nor your IP address is...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits This repository offers a comprehensive collection of exploits and documentation specifically designed for penetration testers and red team professionals. It serves as a valuable resource for those aiming to exploit the Linux Dirty Pipe vulnerability effectively...

PHP_CVE-2012-1823

Vulnerabilidad de ejecución remota de código en PHP-CGI CVE-2012-1823 Principio Artículo de referencia http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ Versiones afectadas php Explicación de la vulnerabilidad PHP SAPI y modos de ejecución Primero, presentemos el modo de ejecución de...

agent

Binary Refinery Skill This repository stores a Claude skill for Binary Refinery. It can augment your malware analysis agent with a number of useful tools for data extraction and transformation. !CAUTION Make sure you are using refinery version 0.10.5 or later. The skill relies on changes to the...

Binvariants

Binvariants: Fuzzing de Binarios Guiado por Invariantes a Nivel de Registro Este repositorio proporciona el código fuente de Binvariants : un prototipo de framework de fuzzing que aprovecha las violaciones de invariantes probables a nivel de registro para el fuzzing de binarios. Este trabajo se...

CVE-2026-0073-PoC-Exploit

CVE-2026-0073 - Android ADB Wireless Debugging Auth Bypass Zero-Click | Remote Shell | Network Scanner | Educational Security Research Tool ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only...