CopyFail-for-dummies

Copy Fail / CVE-2026-31431 — Research Notes Overview This repository contains a cleaned-up technical diagram and supporting notes for the Linux kernel vulnerability commonly referred to as Copy Fail and tracked as CVE-2026-31431. The purpose of this material is: to explain the bug mechanism at a...

CVE-2026-44590

CVE-2026-44590 - sherlock-project/sherlock CI - RCE via pullrequesttarget Injection → Supply Chain Compromise Discovered & reported by: Astaruf Full writeup: https://nstsec.com/en/posts/sherlock-rce-pull-request-target-cve-2026-44590/ Upstream advisory: sherlock-project/sherlock GHSA advisory NVD...

portscan-CVE-2026-41940

portscan-CVE-2026-41940 IP CIDRs presumably as input, maybe command line or file and checks ports 2083 and 2087 for openness portscan-CVE-2026-41940 IP CIDRs presumably as input, maybe command line or file and checks ports 2083 and 2087 for openness CIDR Port Scanner 2083 & 2087 A lightweight,...

catphish

CATPHISH Genera dominios de aspecto similar para ataques de phishing. Verifica dominios expirados y su estado de categorización para evadir la categorización de proxies. Los dominios en lista blanca son perfectos para tus servidores C2. Ideal para compromisos de Red Team. Instalación bundle insta...

SharpWMI

SharpWMI SharpWMI es una implementación en C de varias funcionalidades de WMI. Esto incluye consultas WMI locales/remotas, creación remota de procesos a través de win32process y ejecución remota de VBS arbitrario mediante suscripciones a eventos WMI. También se admiten credenciales alternativas...

CVE-2026-56705

CVE-2026-56705: Adminer dsn"sqlsrv:Server=$host" . $port ? ",$port" : "", $username, $password; Semicolons in server are treated as ODBC connection-attribute delimiters, so an unauthenticated attacker can append arbitrary attributes to the DSN — including TraceFile and TraceOn. The unixODBC trace...

copy-fail-go

copy-fail-go Go port of grenkoca's Python PoC for CVE-2026-31431 copy-fail. This version compiles to a fully static binary with zero runtime dependencies - no Python, no pip, no libc version constraints. Drop it on any Linux target and run it. It also automatically enumerates all SUID...

CVE-2026-31431

CVE-2026-31431 CVE-2026-31431 detection and testing 0x01 Quick Start Some target environments do not have Python installed, so this privilege escalation logic was rewritten in C. 1. Compile Run the following command on your Linux machine or WSL using -static is recommended to avoid GLIBC version...

Sentora

Sentora Community Edition Self-hosted security stack for small/mid teams that don't have a dedicated SOC. Drop an agent on each endpoint, point them at the server, and you get SIEM logs, file integrity, package vulnerabilities, an OpenSearch-powered log explorer, autonomous AI triage and a SOAR...

CVE-2021-41773

CVE-2021-41773 Docker $ sudo docker build -t . $ sudo docker run -d -t -p 80:80 --name /bin/bash $ sudo docker exec -it ./bin/apachectl -k restart To access docker container for custom config file $ docker exec -it /bin/bash file config in /usr/local/apache2/conf/httpd.conf after config run comma...

hayduk

Hayduk: Open-source Metasploit GUI and Armitage alternative Hayduk is a free, open-source Metasploit GUI for authorized penetration testing. It brings the Armitage workflow to your browser: map hosts, browse modules, manage Meterpreter and shell sessions, and export campaign reports. Download one...

CVE-2021-35042

CVE-2021-35042: Django SQL injection vulnerability I. Overview Django is an open-source Web Application Framework written in Python, built on the MVC Model - View - Controller model. It was originally built to manage news content websites owned by the Lawrence publishing corporation, as a CMS...

domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

log4jtest

Introduction This repository is setup to quickly test the log4j vulnerability using Docker and Hashicorp Terraform. All of the components of this test will run in Docker containers on the Docker network, accessible via 'host.docker.internal'. Credits / Disclaimer This test environment is derived...

domato

Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...

cve-2026-23398-poc

Lab: CVE-2026-23398 ICMP / ipnopmtudisc=3 Reproducible lab for the Linux kernel bug in icmptagvalidation NULL dereference when net.ipv4.ipnopmtudisc = 3 and a Fragmentation Needed ICMP arrives whose quoted inner IPv4 header uses a protocol number with no handler in inetprotos. Authorized use only...

npm-cve-2026-26830-26833

npm CVE index, March 2026 This repository is only a directory page for four public advisory repositories covering command injection vulnerabilities in npm packages assigned CVE IDs by MITRE on 2026-02-25. As of 2026-03-24, the latest npm release for each package is still affected: CVE| Package|...

EQGRP

Browsable content of eqgrp-auction-file.tar.xz Original file: https://mega.nz/!zEAU1AQL!oWJ63n-D6lCuCQ4AY0Cv405hX8kn7MEsa1iLH5UjKU Passphrase: CrDj";Va.NdlnzB9M?@K2deB7mN as disclosed by the ShadowBrokers, source This summary is provided by the community: complaints/credits to jvoisin @ dustri.or...

CVE-2021-4034

CVE-2021-4034 polkit pkexec Local Privilege Vulnerability to Add custom commands change to https://github.com/signfind/CVE-2021-4034 Cancel the /bin/sh interactive shell Suitable for one-line command execution in special cases Build gcc cve-2021-4034.c -o cve RCE...

HTB-Pterodactyl-Writeup

Penetration Test Report — HackTheBox: Pterodactyl Date: April 8, 2026 Target: Pterodactyl HackTheBox Difficulty: Medium OS: Linux openSUSE Leap 15.6 Tester: V0idW1re Executive Summary The Pterodactyl machine on HackTheBox presented a realistic attack scenario involving a misconfigured web...