vallumd

vallumd This program allows you to centralize and distribute IP blacklists. If you maintain a server on the Internet, it's very likely you encountered one or more brute force attacks. Not a problem, just install fail2ban. Done. But if you're running multiple servers, each of them running their...

CVE-2019-5513-scanner

VMware Horizon /broker/xml Vulnerability Scanner A high-performance multi-threaded scanner to detect unauthenticated information disclosure vulnerabilities in VMware Horizon Connection Server's /broker/xml endpoint. 📋 Overview VMware Horizon Connection Server exposes an XML API endpoint /broker/x...

cve-2017-5638

CVE-2017-5638 Demo app of, yes, that data broker's security breach. Includes exploit code. Basic usage launch mvn jetty:run Then go to http://localhost:8080/basic-struts/index.action. You should see the Welcome to Struts 2! message. Vulnerability scan mvn site Acknowledgements Exploit code adapte...

apache__activemq_CVE-2019-0222_5-15-8

Welcome to Apache ActiveMQ Apache ActiveMQ is a high performance Apache 2.0 licensed Message Broker and JMS 1.1 implementation. Getting Started To help you get started, try the following links: Getting Started http://activemq.apache.org/version-5-getting-started.html Building...

apache__activemq_CVE-2014-3576_5-10-1

Welcome to Apache ActiveMQ Apache ActiveMQ is a high performance Apache 2.0 licensed Message Broker and JMS 1.1 implementation. Getting Started To help you get started, try the following links: Getting Started http://activemq.apache.org/version-5-getting-started.html Building...

go-exploit

go-exploit: Go Exploit Framework go-exploit is an exploit development framework for Go. The framework helps exploit developers create small, self-contained, portable, and consistent exploits. The framework was developed to simplify large scale scanning, exploitation, and integration with other...

azbelt

azbelt Standalone DLL and sliver extension for enumerating Azure related credentials, primarily on AAD joined machines Modules aadjoin - Gets info about machine AAD status via NetGetAadJoinInformation credman - Gets credentials from Credential Manager env - Looks for Azure/AAD specific...

OpenWire-CVE-2023-46604-Investigation

OpenWire-CVE-2023-46604-Investigation OpenWire Lab During my shift as a Tier 2 Security Operations Center SOC Analyst, I received an escalation from a Tier 1 analyst regarding a publicly accessible server that had been observed communicating with multiple suspicious external IP addresses. In...

go-zeek-broker-ws

Zeek Broker websocket interface library for Golang This library implements the Zeek Broker websocket interface. Helper functions are provided with reasonable mappings between Zeek and Go types. Usage The library contains two packages: encoding encoding models the recursive JSON-based data structu...

CVE-2023-33246_RocketMQ_RCE_EXPLOIT

CVE-2023-33246 RocketMQ Remote Code Execution Exploit CVE-2023-33246 RocketMQ Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is leaked on...

RemoteAssistance-Cpp

RemoteAssistance-Cpp RemoteAssistance like TeamViewer C++ version https://dydtjr1128.github.io/RemoteAssistance-Cpp/ It also made java swing version = Link This version is only implemented up to local mirroring, which has not yet used network. ToDo - x Screen capture - x Double buffering - Add...

LazyMesh

LazyMesh Mesh routing system that supports using an OpenDHT proxy as the backend, so that nodes can communicate directly via the internet. Very early pre alpha, proof of concept, might not actually work, etc. This is meant for both hobby/HAM use cases, and more typical consumer/commercial IoT wor...

the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt

CVE-2026-71960 — Hard-coded JWT Secret in Cudy WR3000 2.0 Mesh MQTT Broker PoC tooling for the Hunt-Benito article "The Same Key Opens Every Box: CVE-2026-71960 — Hard-coded JWT Secret in Cudy's WR3000 Mesh MQTT Broker"...

CVE-2023-33246-Copy

1. Reference Learning CVE-2023-33246 https://github.com/I5N0rth/CVE-2023-33246 2. Local Environment Setup 2.1 Download Image docker pull apache/rocketmq:4.9.1 docker pull apacherocketmq/rocketmq-console:2.0.0 2.2 Start broker, namesrv, console Start namesrv docker run -dit -p 9876:9876 -p...

CVE-2023-33246

CVE-2023-33246 - RocketMQ Remote Code Execution CVE-2023-33246 - Apache RocketMQ config Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is...

CVE-2026-92376

TeamViewer Remote Management Monitoring for Windows versions prior to 26.10.1 are vulnerable to a local privilege escalation flaw due to improper authentication in the inter-process communication (IPC) mechanism. A local authenticated attacker with low privileges can impersonate the IPC broker , ...

CVE-2026-92376 Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows

Improper authentication in the inter-process communication IPC mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary co...

Leostream Connection Broker — Authenticated SQL Injection → lo_export Webshell → — Detect

Fingerprint / reachability check for Leostream Connection Broker — Authenticated SQL Injection → loexport Webshell → sudo Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Leostream Connection Broker — Authenticated SQL Injection → loexport Webshell → sudo Root RCE""" from...

Leostream Connection Broker — Unauthenticated Server.Register Rogue-Agent Regist — Detect

Fingerprint / reachability check for Leostream Connection Broker — Unauthenticated Server.Register Rogue-Agent Registration + SSRF !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Leostream Connection Broker — Unauthenticated Server.Register Rogue-Agent Registration + SSRF""" from...

Leostream post-auth SQLi lo_export webshell sudo root RCE

Login → callback.pl SQLi forged r digest writes welcome.pl via loexport; trigger with ?c= optional sudo. """Leostream Connection Broker SQLi loexport Perl webshell RCE.""" from future import annotations import base64 import hashlib import re from urllib.parse import quote, urlencode from...