p0wnedShell

p0wnedShell PowerShell Runspace Post Exploitation Toolkit Author: Cn33liz and Skons Version: 2.6 License: BSD 3-Clause What is it: p0wnedShell is an offensive PowerShell host application written in C that does not rely on powershell.exe but runs powershell commands and functions within a powershe...

CVE-2023-23752

CVE-2023-23752 Código de exploração de divulgação de informações do Joomla escrito em C++...

cve-2017-16995.c

Dieses Repository hat keine README-Datei...

XeytanWxCpp-RAT

AVVERTENZA QUESTO PROGETTO È ANCORA NELLE PRIME FASI DI SVILUPPO. IN QUESTO MOMENTO, L'APPLICAZIONE HA UN ASPETTO ORRIBILE, C'È UN BUG STRANO PRIMO PUNTO TODO, VEDI SOTTO CHE DEVE ESSERE CORRETTO AL PIÙ PRESTO. Introduzione Applicazione RAT scritta in C++ utilizzando il framework wxWidgets...

autoharness

AutoHarness Erstellt von Akshat Parikh Was ist dieses Tool? AutoHarness ist ein Tool, das automatisch Fuzzing-Harnesses für Sie generiert. Diese Idee entstammt einem aktuellen Problem beim Fuzzing von Codebasen: Große Codebasen haben Tausende von Funktionen und Codeabschnitte, die recht tief in d...

CVE-2026-45018 Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution

Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the POST /mcp endpoint without requiring authentication. For stdio transport, the...

CVE-2026-45018

Chainlit (Python framework for conversational AI applications) is vulnerable to command injection via its MCP stdio transport in versions 2.4.0rc0 through 2.12.0 . When features.mcp.enabled is set to true, the POST /mcp endpoint is exposed without authentication . The validate_mcp_command() funct...

chlonium

Chlonium Chlonium is an application designed for cloning Chromium Cookies. From Chromium 80 and upwards, cookies are encrypted using AES-256 GCM, with a state key which is stored in the Local State file. This state key is encrypted using DPAPI. This is a change from older versions, which used DPA...

SILVERPICK

SILVERPICK VERSIONE v1.1 PANORAMICA Il progetto SILVERPICK è un Windows User-Mode Shellcode Development Framework WUMSDF il cui unico scopo è consentire agli sviluppatori di capability di creare blob di Position Independent Code PIC per Windows x64 usando C/C++ in modo semplice, così da ridurre i...

avcleaner

avcleaner C/C++ source obfuscator for antivirus bypass Blog posts The implementation is rather complex and this domain in software development is rarely documented in layman's terms. This is why there are blog posts which detail every design choice and go over the quirks of working with the LLVM...

wanderer

Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...

nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

CVE-2026-79780

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host...

Commander

Commander Commander é um framework de comando e controle C2 escrito em Python, Flask e SQLite. Ele vem com dois agentes escritos em Python e C. Em Desenvolvimento Contínuo Não é amigável para script-kiddie Funcionalidades Comunicação totalmente criptografada TLS Múltiplos Agentes Ofuscação Sessõe...

CVE-2026-55581 mcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executable

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default Docker security.yaml includes /bin/bash in allowedexecutables, while security.go validates only the first token and checkBlockedPatternsAndCommands does not reject the shell...

CVE-2026-79780

rclone before v1.75.0 contains a credential exposure vulnerability in its S3 redirect callback handling. The tool fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys when following redirects, allowing credentials to persist across scheme or host changes . An attacker positioned to o...

CVE-2026-79780 rclone before v1.75.0 Credential Exposure via S3 Redirect

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host...

EUVD-2026-65538

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host...

CVE-2019-18935-memShell

CVE-2019-18935-memShell fonte CVE-2019-18935-Memshell Compilazione root@kitploit: 1.Build https://github.com/A-D-Team/SharpMemshell/blob/main/VirtualPath/memshell.cs 2.Convert dll to byte array 3.Replace rawData in memShell.cpp 4.csc /target:module empty.cs 5.cl /c memShell.cpp 6.link /DLL /LTCG...

CVE-2023-23397-PoC

CVE-2023-23397-PoC C का केवल-भेजने वाला संस्करण CVE-2023-23397-POC-Powershell द्वारा Oddvar Moe @oddvarmoe Outlook खाते से जुड़े पते से ईमेल भेजता है। root@kitploit: .\CVE202323397.exe --help CVE202323397 1.0.0.0 Copyright c 2023 -t, --to Required. Recipient email address -p, --path Required. UNC...