CVE-2026-78501

Improper neutralization of special elements used in a command 'command injection' in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network...

CVE-2026-55946

Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

CVE-2022-26134

CVE-2022-26134 -u URL, --url URL 目标url -c COMMAND, --command COMMAND 命令 -i LHOST, --lhost LHOST 反弹主机地址 -p LPORT, --lport LPORT 反弹主机端口 -f FILE, --file FILE 批量扫描...

gpg_reaper

GPG Reaper TL;DR: Obtain/Steal/Restore GPG Private Keys from gpg-agent cache/memory This POC demonstrates method for obtaining GPG private keys from gpg-agent memory under Windows. Normally this should be possible only within 10 minutes time frame --default-cache-ttl value. Unfortunately...

gpg_reaper

GPG Reaper TL;DR: 从 gpg-agent 缓存/内存中获取/窃取/恢复 GPG 私钥 该 POC 演示了在 Windows 下从 gpg-agent 内存中获取 GPG 私钥的方法。 通常情况下，这只能在 10 分钟 时间窗口内完成（即 --default-cache-ttl 的值）。 不幸的是，housekeeping 函数（负责缓存清理）仅在您使用 GPG 时执行（没有定时器）。 这意味着在正常的 GPG 使用场景下（例如：您签署某个文件，然后关闭图形界面去处理其他任务），您的密码仍然会保留在 gpg-agent 内存中（即使 TTL 已过期）。...

netstat2neo4j

Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...

webpwn3r

webpwn3r This project is not maintained for years, and was written when I started learning Python, but still people likes it :D. it only supports python2.7 WebPwn3r - Web Applications Security Scanner. By Ebrahim Hegazy - @Zigoo0 Thanks: @lnxg33k, @dia2diab @Aelhemily, @okamalo Please send all yo...

vPrioritizer

概述 | 工作原理 | 快速开始 | 路线图 | 联系我 概述 根据 vulndb 和 cve 等来源的数据，每天大约有 50 个新漏洞被业界知晓，并且可以预见这个数字还将进一步增长。这是一个庞大的漏洞数量，需要有效且快速地评估和修复。因此，如今的组织正致力于（或应该致力于）降低风险而非消除风险，漏洞管理几乎等同于风险优先级划分，而风险是一个由多重因素决定的动态变化概念。 理论上，考虑诸如基础 CVSS、资产可访问性、关键性、漏洞利用可用性、业务敏感性等因素的方法似乎很合适，但每个组织手动对每个漏洞针对每个资产进行此类操作并不现实。 目标与理念 为克服上述挑战，vPrioritizer...

bpflock

bpflock - Lock Linux machines bpflock - eBPF driven security for locking and auditing Linux machines. Note: bpflock is currently in experimental stage , it may break, options and security semantics may change, some BPF programs will be updated to use Cilium ebpf library. Sections 1. Introduction...

Corelight-Ansible-Roles

Corelight-Ansible-Roles Caution: Before you run this version, if you are upgrading, some variable names and locations have changed To get started, simply run this command: source curl https://raw.githubusercontent.com/corelight/Corelight-Ansible-Roles/main/download-run-me-first.sh This product...

pwdgenerator

pwdgenerator 定制化密码字典生成器 根据bit4woo表哥的passmaker项目写的～ 🙏 使用方法,下载release 命令行下: ./pwdgenerator -h 简单使用 ./pwdgenerator -d baidu.com -min 6 -max 10 Customized password dictionary generator How to use download release command line: ./pwdgenerator -h simple usage ./pwdgenerator -d baidu.com -min 6 -max 10...

Android-PIN-Bruteforce

🔓📱 Android-PIN-Bruteforce 通过暴力破解锁屏PIN来解锁安卓手机（或设备）。 将您的Kali NetHunter手机变成安卓设备的PIN暴力破解工具！ 📱 工作原理 它使用USB OTG线将锁定的手机连接到NetHunter设备。该设备模拟键盘，自动尝试PIN码，并在多次错误尝试后等待。 NetHunter手机 USB线 USB OTG适配器 锁定的安卓手机 USB HID Gadget驱动提供USB人机交互设备（HID）的模拟功能。这使得安卓NetHunter设备能够模拟键盘输入到锁定的手机上，就像直接把键盘插到锁定手机上并按键一样。 ⏱...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

CVE-2023-1389

Description CVE-2023–1389 is an Unauthenticated Command Injection vulnerability in the TP-Link Archer AX21 WiFi router. A calllback in the country parameter uses the popen function, which is run as root, allowing the attacker to inject arbitrary values through GET or POST requests to the admin...

MAL-2026-16275 Malicious code in requests-triwes (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa01be0759de95b7a1628930718f7b3bf372eff0c777aace419196e327e77078 During installation, package starts a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in requests-triwes (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa01be0759de95b7a1628930718f7b3bf372eff0c777aace419196e327e77078 During installation, package starts a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

inject-assembly

inject-assembly - Execute .NET in an Existing Process This tool is an alternative to traditional fork and run execution for Cobalt Strike. The loader can be injected into any process, including the current Beacon. Long-running assemblies will continue to run and send output back to the Beacon,...

cve-2022-30525

CVE-2022-30525 por 1vere$k Rapid7 descubrió y reportó una vulnerabilidad que afecta a los firewalls de Zyxel compatibles con Zero Touch Provisioning ZTP, incluidas las series ATP, VPN y USG FLEX incluidos USG20-VPN y USG20W-VPN. La vulnerabilidad, identificada como CVE-2022-30525, permite a un...

CVE-2020-8515

CVE-2020-8515 Draytek CVE-2020-8515 PoC 我早就写好的。 有趣的是，注入的命令会被执行两次，看这里： root@kitploit: $ ./draytek.py draytek.local executing command: cat /etc/passwd + vulnerable! executing command: uname -a Linux Vigor3900 2.6.33.5 1 Wed Mar 28 00:49:28 CST 2018 armv6l unknown Linux Vigor3900 2.6.33.5 1 Wed Mar ...