LiveContainer

LiveContainer An app launcher that runs iOS apps without actually installing them! Crowdin Project: | Documentation:liveconainer.github.io LiveContainer LiveContainer is an app launcher not emulator or hypervisor that allows you to run iOS apps inside it. Allows you to install unlimited apps 3...

Shellcode-Encryptor

ShellcodeEncryptor Un simple cifrador/descifrador/ejecutor de shellcode para evadir antivirus. Nota: He rehecho completamente el flujo de trabajo para la evasión, he descubierto que inyectar el binario en memoria usando PowerShell es el método más efectivo. Propósito Generar un binario .Net que...

udp2raw

Udp2raw-tunnel udp2raw tunnel，通过raw socket给UDP包加上TCP或ICMP header，进而绕过UDP屏蔽或QoS，或在UDP不稳定的环境下提升稳定性。可以有效防止在使用kcptun或者finalspeed的情况下udp端口被运营商限速。 支持心跳保活、自动重连，重连后会恢复上次连接，在底层掉线的情况下可以保持上层不掉线。同时有加密、防重放攻击、信道复用的功能。 English udp2raw+kcptun stepbystep教程 udp2raw+finalspeed stepbystep教程 udp2raw wiki 提示：...

EvilnoVNC

EvilnoVNC EvilnoVNC is a Ready to go Phishing Platform. Unlike other phishing techniques, EvilnoVNC allows 2FA bypassing by using a real browser over a noVNC connection. In addition, this tool allows us to see in real time all of the victim's actions, access to their downloaded files and the enti...

EUVD-2026-68814

Smarty: SSRF via redirect bypass of trusteduri using fetch...

cloudbunny

CloudBunny CloudBunny is a tool to capture the origin server that uses a WAF as a proxy or protection. You can read more about the tool here: https://tinyurl.com/y8p48wb3 How works In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye. To use the tools...

RFCrack

/ | | | / | | | | / \ ' - / \ / - | / \ V V / ' / \ || - /||// /| ///|. //, / / |/ | /| | | || | / | | '/ /| / / | || || , | \ root@kitploit: Welcome to RFCrack - A Software Defined Radio Attack Tool Developer: @Ficti0n - http://ConsoleCowboys.com CCLabs: http://cclabs.io Blog:...

CVE-2018-10933

libSSH-Authentication-Bypass Accede a una shell sin credenciales utilizando CVE-2018-10933 Exploit-DB : https://www.exploit-db.com/exploits/45638 Información sobre CVE-2018-10933 por libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Versión de corrección de errores por libSSH...

Python-Rootkit

python-rootkit 这是一个完全无法检测的Python远程访问木马（RAT），能够绕过几乎所有杀毒软件，在任何Windows 机器上打开后门，并与你的监听机器建立反向HTTPS Metasploit连接。 ViRu5生命周期 绕过所有杀毒软件。 将恶意PowerShell脚本注入内存。 与攻击者机器建立反向HTTPS连接。 每10秒检查一次连接是否仍然存在，如果不存在，则重新建立新连接。 添加启动注册表键，以便重启后重新连接到攻击者。 步骤 更新viRu5/source.py中的参数，设置你的lhost和lport...

GTFOBins.github.io

GTFOBins GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems. Find the project at: gtfobins.org...

transfer.sh

安全警告 通过未认证的 X-Forwarded-For 头欺骗绕过 IP 过滤和 HTTP 认证 transfer.sh 从命令行轻松快速地共享文件。该代码包含服务器和创建您自己实例所需的一切。 Transfer.sh 目前支持 s3（Amazon S3）、gdrive（Google Drive）、storj（Storj）提供商以及本地文件系统（local）。 免责声明 @stefanbenten 恰好是这个仓库的维护者，同时也在仓库中托管了一个知名的公共软件安装实例。 这两个角色是无关的，本仓库不是用来处理任何公共安装实例的请求和问题的。...

MHDDoS

MHDDoS - Script de Ataque DDoS con 57 Métodos Lenguaje de Programación - Python 3 Por favor, no ataques sitios web sin el consentimiento del propietario. Características y Métodos 💣 Capa 7 GET | Inundación GET POST | Inundación POST...

CVE-2024-0204

CVE-2024-0204: Fortra GoAnywhere MFT Authentication Bypass Deep-Dive This repository contains a proof-of-concept exploit for the authentication bypass vulnerability CVE-2024-0204 discovered in Fortra's GoAnywhere MFT product. The vulnerability allows an unauthenticated attacker to create an...

CVE-2026-49329

A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage without input validation. A bypass of the CVE-2022-32149 mitigation exists: the upstream guard counts only '-'...

CVE-2018-10933_ssh

CVE-2018-10933 para probar este código: obtén la versión vulnerable de libssh desde la página principal: https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz descomprime y compila, luego ve al directorio example, hay un servidor sshd simple usando libssh llamado: samplesshd-cb ejecuta este simple...

meterpeter

Author: @r00t-3xp10it Version release: v2.10.14 Distros Supported: Windows x86|x64, Linux Inspired in the work of: '@ZHacker13 - ReverseTCPShell' :octocat: Quick Jump List Project Description List Of Available Modules Meterpeter C2 Latest Release How To - Under Linux Distributions How To - Under...

edk2

============== EDK II Project A modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications from www.uefi.org. .. image::...

VcenterKiller

VcenterKiller -1. Note For those setting up a vulnerable environment locally, using vckiller to verify log4j will mostly fail, because under VMware's NAT mode, the outgoing network interface in the verification module will be determined as 127.0.0.1, causing the target's LDAP Server address to...

EDR-Preloader

EDR-Preloader An EDR bypass that prevent EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer For details, see: malwaretech.com/2024/02/bypassing-edrs-with-edr-preload.html...

ItWasAllADream

Todo fue un sueño Un escáner de Python para CVE-2021-34527 también conocido como PrintNightmare. Permite escanear subredes enteras en busca de la RCE de PrintNightmare no la LPE y genera un informe CSV con los resultados. Prueba la explotabilidad a través de MS-PAR y MS-RPRN. Esta herramienta tie...