ThunderDNS

ThunderDNS 이 도구는 TCP 트래픽을 DNS 프로토콜을 통해 전달할 수 있습니다. 컴파일 필요 없는 클라이언트 + socks5 지원. 실행 우리 도메인에 NS 레코드 설정하기: DNS 캐시가 지워질 때까지 기다리십시오. 간단한 서버 실행: python3 ./server.py --domain oversec.ru 간단한 서버 실행 Dockerfile: docker run -e DOMAIN='' 간단한 클라이언트 실행 Bash: bash ./bashclient.sh -d oversec.ru -n 간단한 클라이언트 실행...

CVE-2023-36874

CVE-2023-36874 仅供演示目的。该漏洞利用程序可在易受攻击的Windows客户端/服务器上运行。 编译代码并创建 c:\test\system32 目录。将你的 wermgr.exe 放置在该目录中，然后运行编译好的PoC。 https://github.com/Wh04m1001/CVE-2023-36874/assets/44291883/417d1384-4f3f-42c0-9e07-80d4347ed9c7 在 Windows 10 19045.2006 上测试...

NachoVPN

NachoVPN 🌮🔒 NachoVPN è una Proof of Concept che dimostra lo sfruttamento dei client SSL-VPN, utilizzando un server VPN rogue. Utilizza un'architettura basata su plugin, così che il supporto per prodotti SSL-VPN aggiuntivi possa essere contribuito dalla community. Attualmente supporta vari popolar...

aura-botnet

Aura Botnet C2 Server The botnet's C2 server utilizes the Django framework as the backend. It is far from the most efficient web server, but this is offset by the following: Django is extremely portable and therefore good for testing/educational purposes. The server and database are contained...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

CVE-2020-27955-LFS

Git-lfs Remote Code Execution RCE Exploit CVE-2020-27955 .bat / PowerShell-Version Angreifbar: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken usw. Entdeckt von Dawid Golunski https://legalhackers.com https://exploitbox.io Getestet auf Windows auf: git,...

git-lfs-RCE-exploit-CVE-2020-27955

Exploit di Remote Code Execution RCE su Git-lfs CVE-2020-27955 versione .bat / powershell Vulnerabile: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken ecc. Scoperto da Dawid Golunski https://legalhackers.com https://exploitbox.io Testato su Windows su: git,...

CVE-2021-40303

CVE-2021-40303 perfex crm 1.10 è vulnerabile a Cross Site Scripting XSS memorizzato tramite /clients/profile. poc: root@kitploit: POST /clients/profile HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux x8664; rv:78.0 Gecko/20100101 Firefox/78.0 Accept:...

heimdall_webserver

ATTENTION, this project is on a beta version, there's a lot of bugs and problem, if you want to help the project use this on a lab not in yout real environment. NO, there's not https implemented yet, it will come on the next upgrade Heimdall It's a tool to manage vulnerables packages in your nix...

Johnny-You-Are-Fired

Johnny-You-Are-Fired Artefatti per la pubblicazione USENIX | Articolo completo qui Sommario OpenPGP e S/MIME sono i due standard principali per cifrare e firmare digitalmente le email. Le firme digitali dovrebbero garantire autenticità e integrità dei messaggi. In questo lavoro mostriamo attacchi...

CVE-2021-20323

CVE-2021-20323 Descrizione Keycloak prima della versione 18.0.0 e dopo la 10.0.0 contiene una XSS riflessa sull'endpoint clients-registrations. Il bug viene attivato fornendo, tramite POST, una struttura JSON con una chiave come nome del parametro che non è supportata dall'endpoint. La risposta...

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

Anvil

Avaliação de escalada de privilégios e superfície de ataque baseada em tempo de execução para thick clients Windows. Anvil é uma ferramenta de avaliação de escalada de privilégios e superfície de ataque baseada em tempo de execução para aplicações thick client Windows. Em vez de escanear o sistem...

CVE-2025-67263

CVE-2025-67263 - Cross-site scripting XSS memorizzato in Abacre Retail Point of Sale 14.0.0.396 Abacre Retail Point of Sale 14.0.0.396 è affetto da una vulnerabilità di cross-site scripting XSS memorizzato nel modulo Clienti. L'applicazione non sanifica correttamente l'input fornito dall'utente...

CVE-2025-55580

CVE-2025-55580 - SolidInvoice Stored Cross-Site Scripting XSS in Clients Zusammenfassung SolidInvoice ist anfällig für ein Stored Cross-Site Scripting XSS-Problem im Client-Modul. Ein authentifizierter Angreifer kann beliebiges JavaScript in die Anwendung einschleusen, das dann in den Browsern de...

CVE-2026-16444

TeamViewer Desktop Clients prior to version 15.81.5 are affected by improper neutralization of path traversal sequences, allowing an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An ...

msmap

MSMAP Msmap is a Memory WebShell Generator. Compatible with various Containers, Components, Encoder, WebShell / Proxy / Killer and Management Clients. 简体中文 The idea behind I, The idea behind II, The idea behind III Feature WIP Function Dynamic Menu Automatic Compilation Generate Script...

byob

Questions? Check out the docs or join our Discord support server Disclaimer : This project should be used for authorized testing or educational purposes only. BYOB is an open-source post-exploitation framework for students, researchers and developers. It includes features such as: Command & contr...

CVE-2026-76842 Mercado Pago Node.js SDK through 3.4.0 Path Injection via Unencoded Identifiers in Payment Clients

The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL survive into the outgoing request. The payment get, capture, cancel, paymentRefund create, total, list, get, advancedPayment get,...

CVE-2026-76842 Mercado Pago Node.js SDK through 3.4.0 Path Injection via Unencoded Identifiers in Payment Clients

The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL survive into the outgoing request. The payment get, capture, cancel, paymentRefund create, total, list, get, advancedPayment get,...