heimdall_webserver

ATTENTION, this project is on a beta version, there's a lot of bugs and problem, if you want to help the project use this on a lab not in yout real environment. NO, there's not https implemented yet, it will come on the next upgrade Heimdall It's a tool to manage vulnerables packages in your nix...

boringssl

BoringSSL BoringSSL is a fork of OpenSSL that is designed to meet Google's needs. Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no...

Anvil

Повышение привилегий и оценка поверхности атак для толстых клиентов Windows, основанные на анализе выполнения. Anvil — это инструмент для повышения привилегий и оценки поверхности атак для толстых клиентов Windows, основанный на анализе выполнения. Вместо слепого сканирования файловой системы он...

clients

Клиентские приложения Bitwarden В этом репозитории размещены все клиентские приложения Bitwarden, кроме мобильных приложений iOS | Android. Пожалуйста, обратитесь к разделу Клиенты из Документации для контрибьюторов за инструкциями по сборке, рекомендуемыми инструментами, советами по стилю кода и...

msmap

MSMAP Msmap is a Memory WebShell Generator. Compatible with various Containers, Components, Encoder, WebShell / Proxy / Killer and Management Clients. 简体中文 The idea behind I, The idea behind II, The idea behind III Feature WIP Function Dynamic Menu Automatic Compilation Generate Script Lite Mode...

ThunderDNS

ThunderDNS Cet outil peut transférer le trafic TCP via le protocole DNS. Clients sans compilation + support socks5. Exécution Configuration des enregistrements NS sur notre domaine : Veuillez attendre que le cache DNS soit vidé. Exécution simple du serveur : python3 ./server.py --domain oversec.r...

aura-botnet

Aura Botnet C2 Server The botnet's C2 server utilizes the Django framework as the backend. It is far from the most efficient web server, but this is offset by the following: Django is extremely portable and therefore good for testing/educational purposes. The server and database are contained...

CVE-2025-55580

CVE-2025-55580 - Межсайтовый скриптинг XSS с сохранением в SolidInvoice в модуле Клиентов Сводка SolidInvoice уязвим к проблеме межсайтового скриптинга XSS с сохранением в модуле Клиентов. Аутентифицированный злоумышленник может внедрить произвольный JavaScript в приложение, который затем...

byob

Questions? Check out the docs or join our Discord support server Disclaimer : This project should be used for authorized testing or educational purposes only. BYOB is an open-source post-exploitation framework for students, researchers and developers. It includes features such as: Command & contr...

CVE-2023-36874

CVE-2023-36874 À des fins de démonstration uniquement. L'exploitation fonctionne sur les clients/serveurs Windows vulnérables. Compilez le code et créez les répertoires c:\test\system32. Placez votre wermgr.exe dans ce répertoire et exécutez le PoC compilé...

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

Johnny-You-Are-Fired

Johnny-You-Are-Fired USENIX 논문의 아티팩트 | 전체 논문 여기 초록 OpenPGP와 S/MIME는 이메일을 암호화하고 디지털 서명하기 위한 두 가지 주요 표준이다. 디지털 서명은 메시지의 진위성과 무결성을 보장하기 위한 것이다. 이 연구에서 우리는 OpenPGP 및 S/MIME 이메일 서명 검증의 다양한 구현에 대한 실질적인 위조 공격을 다섯 가지 공격 클래스로 보여준다: 1 우리는 S/MIME 컨테이너 형식의 엣지 케이스를 분석한다. 2 우리는 가장 널리 사용되는 OpenPGP 구현인 GnuPG API...

gcat

Gcat A stealthy Python based backdoor that uses Gmail as a command and control server This project was inspired by the original PoC code from Benjamin Donnelly This is PoC code... ... that was released for orginazations to test their defenses against these type of attacks. In order to detect them...

git-lfs-RCE-exploit-CVE-2020-27955

Git-lfs - Exploit d'exécution de code à distance RCE CVE-2020-27955 version .bat / powershell Vulnérable : git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Découvert par Dawid Golunski https://legalhackers.com https://exploitbox.io Testé sur Windows sur...

CVE-2021-40303

CVE-2021-40303 perfex crm 1.10 уязвим для хранимого межсайтового скриптинга XSS через /clients/profile. poc: POST /clients/profile HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux x8664; rv:78.0 Gecko/20100101 Firefox/78.0 Accept:...

CVE-2025-67263

CVE-2025-67263 - Хранимый межсайтовый скриптинг XSS в Abacre Retail Point of Sale 14.0.0.396 Abacre Retail Point of Sale 14.0.0.396 подвержен хранимой уязвимости межсайтового скриптинга XSS в модуле Clients. Приложение не выполняет надлежащую очистку пользовательских данных, сохраняемых в полях...

CVE-2026-103540

A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the function Clients::updateClientSettingsTab of the file global/code/Clients.class.php of the component Client Settings. The manipulation of the argument pagetitles leads to improper...

EUVD-2026-90497

A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the function Clients::updateClientSettingsTab of the file global/code/Clients.class.php of the component Client Settings. The manipulation of the argument pagetitles leads to improper...

AlmaLinux 9.2 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.2:CLSA-2024:1708638566)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1708638566 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...