rdesktop

IMPORTANT: rdesktop is no longer maintained Please, beware that this project is no longer maintained and hadn't received a patch in many years. There are reported security vulnerabilities, yet those haven't been reviewed. Use with caution and use it at your own risk. rdesktop - A Remote Desktop...

ChameleonMini

Chameleon-Mini This is the official repository of ChameleonMini, a freely programmable, portable tool for NFC security analysis that can emulate and clone contactless cards, read RFID tags and sniff/log RF data. Thanks to over 1700 backers from our Kickstarter project, the current Revision G has...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

secretive

Secretive Secretive is an app for protecting and managing SSH keys with the Secure Enclave. Why? Safer Storage The most common setup for SSH keys is just keeping them on disk, guarded by proper permissions. This is fine in most cases, but it's not super hard for malicious users or malware to copy...

r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...

Adamantium-Thief

🔓 Adamantium-Thief Get chromium based browsers: passwords, credit cards, history, cookies, bookmarks, autofill. Chrome 80 is supported! Need firefox passwords decryptor? 🌿 Examples: 🔑 Get passwords from browsers: root@kitploit: Stealer.exe PASSWORDS 💳 Get credit cards from browsers: root@kitploit...

CVE-2023-43317

CVE-2023-43317 A normal user can elevate their privileges via the userPermissionsLIst parameter in Session Storage component. to gain unauthorized access to administrative-level resources and features. This could lead to unauthorized data access, data modification, and other actions that are...

virtualbox_e1000_0day

なぜ 私はVirtualBoxが好きですが、0day脆弱性を公開する理由はそれとは関係ありません。その理由は、現在のインフォセック、特にセキュリティリサーチとバグバウンティの状況に対する私の不同意にあります。 1. 脆弱性がパッチされるまで半年待つことが問題ないとされている。 2. バグバウンティの分野では、これらが問題ないとされている： 1. 提出された脆弱性が検証され、購入するかどうかの決定が下されるまで1ヶ月以上待つこと。 2...

dameflare

DameFlare SolarWinds Dameware MRCにおけるスマートカード認証バイパスによる認証不要のRCE CVE-2019-3980 | CVSS 9.8 Critical | TCP/6129 オリジナル研究およびPOC: Tenable, Inc. TRA-2019-43 Python 3ツール: David Boyd @Fir3d0g 仕組み Dameware...

CVE-2022-42094

Backdrop CMS version 1.23.0 Vulnerability Explanation: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Card content. Attack Vectors: The attacker must post something on the "Card content" and insert the XSS payload at the "Body" input,...

ChameleonUltra

ChameleonUltra 授权经销商 法国里昂：Lab401 美国圣安娜：Hackerwarehouse 英国黑斯廷斯：KSEC 加拿大蒙特利尔：TechSecurityTools 中国深圳：Sneaktechnology 中国广东：MTools Tec 新加坡 Lazada One：Aliexpress by RRG 这是什么以及如何使用？ 请阅读可用文档。 兼容的应用程序 ChameleonUltraGUI MTools BLE Mifare Chameleon Tool（仅限 iOS，Beta 版） Chameleon Ultra（仅限 Sailfish OS） 视频...

doppelganger_assistant

Doppelgänger Assistant 一款专业的GUI应用程序，用于计算卡片数据并自动执行Proxmark3针对Doppelgänger Core和Stealth所支持的所有卡片类型的操作。该工具通过提供具有双输出显示、视觉分隔符和一键剪贴板复制的直观界面，简化了物理渗透测试中的卡片写入流程，无需记忆复杂的Proxmark3语法或翻阅笔记。 功能特性 现代化GUI界面 ：直观的双列布局，带有专用状态和命令输出显示 卡片操作 ：自动生成并执行用于写入、验证和模拟卡片的Proxmark3命令 直接执行 ：在GUI中直接对Proxmark3执行写入、验证和模拟操作 跨平台...

cumulus

OWASP Cumulus - 云威胁建模 Cumulus 是将安全引入云端和 devOps 团队的简单途径。 作为纸牌游戏 Elevation of Privilege 的一个变体，它遵循通过游戏化对系统进行威胁建模的理念。这种轻量级、低门槛的方法有助于你发现 devOps 或云项目中的威胁，并培养开发人员面向安全的思维方式。 点击此处查找最新版本。 威胁建模 通过严肃游戏进行威胁建模的想法可以追溯到 Adam Shostack 设计的纸牌游戏 Elevation of...

DarkTortilla-RAT-Telegram-Exfiltration-Payload-Extraction-Analysis

1. 信用卡盗窃 – 卡片数据提取 Process Hacker 内存分析显示，DarkTortilla RAT 以信用卡信息为目标，包括卡号、有效期和卡类型。 观察到的关键字符串： cardnumberencrypted – 加密的卡号。 expirationmonth – 有效期月份。 expirationyear – 有效期年份。 Mastercard – 针对万事达卡。 Visa – 针对维萨卡。 Discover Card – 针对发现卡。 Union Pay Card – 针对银联卡。 American Express – 针对美国运通卡。 为何重要： 金融数据盗窃：...

Specter-FlipperZero

Specter 👻 見えないリーダーを探り当てる。 -26E8CA?style=for-the-badge&labelColor=0a0f16 Specter は、あなたのFlipper Zeroを、アクティブな13.56 MHz NFCリーダー を探すためのポケットサイズの対盗聴バグスイープ に変えます。電源が入ったリーダー...

Astra Linux – Vulnerability in opensc

OpenSC before version 0.20.0 has a double-free issue in coolkeyfreeprivatedata, because the coolkeyaddobject function in libopensc/card-coolkey.c lacks a uniqueness check...

Astra Linux – Vulnerability in opensc

The TCOS smart card software driver in OpenSC before version 0.21.0-rc1 has a stack-based buffer overflow in the tcosdecipher function...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd-mbhc-v2: fixed resource leaks during component removal The MBHC resources must be released in case of component probe failures and removals; therefore, they cannot be tied to the lifetime of the component device...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ASoC: audio-graph-card: fixed the refcount leak of cpuep in graphforeachlink. ofgetnextchild returns a node with its refcount incremented, and decrements the refcount of the previous node. Therefore, in the error-prone part of th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets When the FarSync T-series card is being detached, the fstcardinfo is deallocated in fstremoveone. However, the fsttxtask or fstinttask may still be running ...