viper

Viper Frank4DD, @ Mayo 2000 Viper es un cracker de contraseñas de estilo UNIX por fuerza bruta para contraseñas encriptadas con crypt. Ha sido desarrollado a partir del programa Perl viper 1.4 de Hale. Si bien existen otros programas de crack más potentes, este trata sobre el estudio de la...

CVE-2019-0708-test

CVE-2019-0708-test CVE-2019-0708 C Vulnerability Verification Programming Language: C Programming Software: Visual Studio 2012 Programming Environment: .Net Framework 4.5 A software written in C to verify the CVE-2019-0708 vulnerability Calls 0708detector.exe released by 360's 360Vulcan Team...

hyenae-ng

Hyenae NG Hyenae NG Next Generation es una reescritura de la herramienta original Hyenae que fue publicada originalmente en el año 2010. Además de cambiar de C a C++, utilizando conceptos de diseño modernos, Hyenae NG fue al igual que el Hyenae original escrito pensando en la máxima portabilidad...

CACredDecoder

C-Ark Credential Decoder Exploit tool for CVE-2021-31796 A Tool for decoding C-Ark Credential files By: Aaron Mizrachi - https://twitter.com/unmanarc/ Enrique Vaamonde - https://twitter.com/ejvm First release: 2/Sep/2019 Disclosure: 11/Oct/2021 References...

CVE-2026-108744

pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktopsync.py that passes unquoted .pbip paths to cmd /c start when reopening projects. Attackers can lure victims into opening a Power BI project from a space-free path containing & to run commands with victim...

pip3line

Pip3line Codacy Badge Compilaciones Linux / MacOS Compilaciones Windows Utilidad de manipulación de bytes brutos, capaz de aplicar transformaciones conocidas y menos conocidas, búsqueda binaria rápida, interceptación de proxy de red y más. Instalación en Windows: Descargue el zip de la versión aq...

CVE-2025-4802-Proof-of-Concept

CVE-2025-4802 — Proof of Concept ⚠️ Disclaimer: This repository is for educational and authorized security research purposes only. Do not use this exploit against systems you do not own or have explicit permission to test. Misuse may violate laws and regulations. CVE Summary Field| Details ---|---...

sak1to-shell

sak1to-shell Servidor c2 multi-hilo, multi-sistema/plataforma Linux/Windows y cliente de shell TCP inversa para Windows, ambos escritos en C. Compilando el cliente de shell TCP inversa con i686-w64-mingw32-gcc: i686-w64-mingw32-gcc sakitorevshell.c lib/windows/sakitowincore.c -o sakitorevshell.ex...

CVE-2026-108744 pbi-cli 3.10.1 through 3.12.0 OS Command Injection via Desktop Sync

pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktopsync.py that passes unquoted .pbip paths to cmd /c start when reopening projects. Attackers can lure victims into opening a Power BI project from a space-free path containing & to run commands with victim...

EUVD-2026-96909

pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktopsync.py that passes unquoted .pbip paths to cmd /c start when reopening projects. Attackers can lure victims into opening a Power BI project from a space-free path containing & to run commands with victim...

CVE-2026-108744

The pbi-cli tool, versions 3.10.1 through 3.12.0 , is vulnerable to an OS command injection within the desktop_sync.py component. The root cause is the passing of unquoted .pbip paths to cmd /c start when reopening projects. An attacker can lure a victim into opening a Power BI project from a spa...

CVE-2026-108744 pbi-cli 3.10.1 through 3.12.0 OS Command Injection via Desktop Sync

pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktopsync.py that passes unquoted .pbip paths to cmd /c start when reopening projects. Attackers can lure victims into opening a Power BI project from a space-free path containing & to run commands with victim...

kekeo

kekeo kekeo es un pequeño conjunto de herramientas que he comenzado para manipular Microsoft Kerberos en C y por diversión Biblioteca ASN.1 En kekeo, utilizo una biblioteca comercial externa para manejar las estructuras ASN.1 de Kerberos: OSS ASN.1/C...

sitrep

SitRep Triaje de host extensible y configurable. Propósito SitRep pretende proporcionar una alternativa ligera y extensible para el triaje de hosts. Las comprobaciones se cargan dinámicamente en tiempo de ejecución desde archivos independientes. Esto permite a los operadores modificar rápidamente...

Enigma

Enigma Engine A native C++ reverse-engineering engine inspired by Ghidra's analysis pipeline. Enigma removes the JVM dependency and provides a standalone analysis core that can be embedded, extended, and integrated directly with native tools and AI systems. Current State Enigma is under active...

CVE-2026-16723

CVE-2026-16723 Exploit A standalone C++17 implementation for CVE-2026-16723 , a critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. Requirements Linux or WSL on Windows C++17 compatible compiler GCC 7+ or Clang 5+ CMake 3.10 or newer System packages: libzip-dev zlib1g-dev Debian /...

CVE-2023-4911-Lab

CVE-2023-4911 "Looney Tunables" Analysis Environment Docker-based practice environment for analyzing and developing exploits for the GNU C Library glibc dynamic loader buffer overflow vulnerability Local Privilege Escalation. CVE Information Item| Content ---|--- CVE Number| CVE-2023-4911 Alias|...

avcleaner

avcleaner Ofuscador de código fuente C/C++ para evasión de antivirus Publicaciones del blog La implementación es bastante compleja y este dominio del desarrollo de software rara vez se documenta en términos sencillos. Por eso existen publicaciones en el blog que detallan cada decisión de diseño y...

LeetObfuscator

LeetObfuscator ██╗ ███████╗███████╗████████╗ ██║ ██╔════╝██╔════╝╚══██╔══╝ ██║ █████╗ █████╗ ██║ ██║ ██╔══╝ ██╔══╝ ██║ ███████╗███████╗███████╗ ██║ ╚══════╝╚══════╝╚══════╝ ╚═╝ ██████╗ ██████╗ ███████╗██╗ ██╗███████╗ ██████╗ █████╗ ████████╗ ██████╗ ██████╗ ██╔═══██╗██╔══██╗██╔════╝██║...

nopowershell

NoPowerShell NoPowerShell è uno strumento implementato in C che supporta l'esecuzione di comandi simili a quelli di PowerShell rimanendo invisibile a qualsiasi meccanismo di logging di PowerShell. Questo binario compatibile con .NET Framework 2 può essere caricato in Cobalt Strike per eseguire...