nxboot

nxboot CLI tool for Nintendo Switch RCM payload launching Fusée Gelée. Uses Zig and libusb. Requirements Zig 0.15.2 Usage 1. Put the console in RCM and connect it to your machine via USB. 2. Run: zig build -Doptimize=ReleaseSafe run -- /path/to/payload.bin Note: with a Debug build -Doptimize=Debu...

ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in github.com/docker/cli - Patched by Root

Root has patched CVE-2025-15558 in the github.com/docker/cli package for Root:Go. Multiple fixed versions available...

PacketPirate

PacketPirate Un proxy MITM sin interfaz gráfica, programable y basado en la línea de comandos, diseñado para la interceptación, análisis y modificación de tráfico de red en sistemas Windows. Funciona de manera similar a los proxies GUI estándar de la industria, pero está optimizado para entornos ...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

jdvrif

jdvrif jdvrif JPG Data Vehicle , v9.0 is a fast, easy-to-use steganography command-line tool for concealing and extracting any file type via a JPG image. Linux only. Your data file is compressed with libdeflate/zlib , then encrypted with XChaCha20-Poly1305 libsodium secretstream under a key deriv...

redteam-ai-benchmark

Red Team AI Benchmark Russian version: README.ru.md Red Team AI Benchmark is a CLI model-evaluation benchmark. It measures how LLMs understand and respond to red-team questions and security scenarios; it is not a tool for carrying out those activities. Version 2 uses a rubric-based dataset instea...

MAL-2026-17630 Malicious code in virgil-cli (npm)

In local mode virgil-cli prints that it runs on the user's machine and is free and private. After each turn, reportLearning in dist/api.js posts the whole conversation history, including shell and file tool output, to https://api.nm-streetwear.space/vx/learn with a hardcoded token and a device id...

Malicious code in virgil-cli (npm)

In local mode virgil-cli prints that it runs on the user's machine and is free and private. After each turn, reportLearning in dist/api.js posts the whole conversation history, including shell and file tool output, to https://api.nm-streetwear.space/vx/learn with a hardcoded token and a device id...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: akhq, strimzi-kafka-operator, cass-config-builder, infinispan, flyway, tez, apache-tika, druid, opensearch, trino, keycloak, dependency-track, wildfly, apache-nifi, spdx-tools-java, apache-nifi-registry, keycloak-config-cli, apicurio-registry, gradle, sonarqube,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: akhq, strimzi-kafka-operator, cass-config-builder, infinispan, flyway, tez, apache-tika, druid, opensearch, trino, keycloak, dependency-track, wildfly, apache-nifi, spdx-tools-java, apache-nifi-registry, keycloak-config-cli, apicurio-registry, gradle, sonarqube,...

cve-2025-55182

CVE-2025-55182 - Exploit de RCE en React Server Components Exploit CLI en Python para CVE-2025-55182, una vulnerabilidad crítica de RCE en React Server Components a través de react-server-dom-webpack. Basado en: ejpir/CVE-2025-55182-poc Construir y ejecutar el contenedor vulnerable docker build -...

CVE-2020-27955-LFS-main

Exploit de ejecución remota de código RCE en Git-lfs CVE-2020-27955 versión .bat / powershell Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken, etc. Descubierto por Dawid Golunski https://legalhackers.com https://exploitbox.io Probado en Windows...

AWS-SAM-CLI-Vulnerabilities

Vulnerabilidades de AWS SAM CLI CVE-2025-3047 y CVE-2025-3048 Este README proporciona un análisis detallado de dos vulnerabilidades de seguridad encontradas en la Interfaz de Línea de Comandos del Modelo de Aplicaciones Serverless de AWS AWS SAM CLI – CVE-2025-3047 y CVE-2025-3048 – junto con los...

FuegoTest

FuegoTest FuegoTest es una herramienta de interfaz de línea de comandos CLI diseñada para detectar dispositivos potencialmente vulnerables a CVE-2023-20048 en Cisco Firepower Management Center FMC. Utilizando la librería Rich, FuegoTest ofrece una experiencia de usuario mejorada con barras de...

CVE-2020-27955

Exploit de Ejecución Remota de Código RCE en Git-lfs CVE-2020-27955 versión .bat / powershell Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken, etc. Descubierto por Dawid Golunski https://legalhackers.com https://exploitbox.io Probado en Windows...

magento2-encryption-key-manager-cli

CLI de Administrador de Claves de Cifrado de Magento 2 Una utilidad para la rotación y gestión de claves de cifrado de Magento 2. Las víctimas de CVE-2024-34102 también conocido como Cosmic Sting pueden utilizarla como medida de seguimiento posterior. Diseñado para Uso en desarrollo Automatizació...

Pentesting

⚡ Pentesting Toolkit v3.0 — AMAN EDITION Pentesting Toolkit e...

Malicious code in @angularr/cli (npm)

@angularr/[email protected] impersonates @angular/cli it copies the code and metadata of @angular/cli, including the ng binary and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...

MAL-2026-17492 Malicious code in @angularr/cli (npm)

@angularr/[email protected] impersonates @angular/cli it copies the code and metadata of @angular/cli, including the ng binary and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...

TokenMan

Access and Refresh Token Suite. Token Man is a tool for supporting post-exploitation activities using AAD access and/or refresh tokens. Table of Contents Usage Commands Fetch Search Swap FOCI Application Client ID Map AZ OAuth Usage usage: tokenman.py -h fetch,search,swap,az,oauth ... Token Man -...