CVE-2021-27850_POC

CVE-2021-27850 Exploit Übersicht CVE-2021-27850 ist eine kritische, nicht authentifizierte Schwachstelle zur Remotecodeausführung, die in allen aktuellen Versionen von Apache Tapestry gefunden wurde. Durch Herunterladen der Datei AppModule.class können wir den HMAC-Geheimschlüssel preisgeben, der...

CVE-2019-12840_POC

CVE-2019-12840POC PoC per l'esecuzione remota di comandi autenticata tramite aggiornamento pacchetti Webmin Un'alternativa al modulo metasploit. Tutto il merito va a Özkan Mustafa Akkuş https://www.pentest.com.tr/exploits/Webmin-1910-Package-Updates-Remote-Command-Execution.html...

ysoserial.net

A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discovered in common .NET libraries that can, under the right conditions, exploit .NET...

coolify-cve-2025-66209-66213

Coolify Security Advisories - CVE-2025-66209 bis CVE-2025-66213 Melder: 0xrakan Hersteller: coollabsio/coolify Betroffene Versionen: v4.0.0-beta.451 Behobene Version: v4.0.0-beta.451 Schweregrad: Kritisch CVSS 9,4 Überblick Fünf kritische, authentifizierte Command-Injection-Schwachstellen wurden ...

Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.55 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 Summary tcconfig is a tc command wrapper. Make it easy to set up traffic control of network bandwidth/latency/packet-loss/packet-corruption/etc. to a network-interface/Docker-containerveth. |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL|...

CVE-2024-40445_CVE-2024-40446

Riferimento Vulnerabilità MimeTeX CVE-2024-40445 e CVE-2024-40446 Questo repository funge da riferimento pubblico per i problemi di sicurezza CVE-2024-40445 e CVE-2024-40446 che riguardano MimeTeX, un renderer LaTeX leggero e open-source scritto in C. ⚠️ MimeTeX sembra non essere più mantenuto...

nullscan

Description A modular framework designed to chain and automate security tests. It parses target definitions from the command line and runs corresponding modules and their nullscan-tools afterwards. It can also take hosts and start nmap first in order to perform a basic portscan and run the module...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

ldsview

ldsview Offline search tool for LDAP directory dumps in LDIF format. Features Fast and memory efficient parsing of LDIF files Build ldapsearch commands to extract an LDIF from a directory Show directory structure UAC and directory time format translation Config Config options can be passed as CLI...

pastego

pastego Scrape/Parse Pastebin using GO and grammar expression PEG. pastego.png Installation $ go get -u github.com/notdodo/pastego Usage Search keywords are case sensitive pastego -s "password,keygen,PASSWORD" You can use boolean operators to reduce false positive pastego -s "quake && earthquake,...

dicerosbicornis

DicerosBicornis Una backdoor Windows furtiva basata su Python che utilizza la posta elettronica come server di comando e controllo. Requisiti Python 2.x Modulo PyCrypto Modulo WMI Modulo Enum34 Modulo Netifaces Modulo pypiwin32 Funzionalità Crittografia dei messaggi di trasporto AES + hashing...

sudo-snooper

sudo-snooper sudo-snooper acts like the original sudo binary to fool users into entering their passwords. It will show a fake prompt just like the original to the user to enter their sudo password. This can be useful in penetration tests or security evaluations for testing user knowledge...

kraken

Warning I have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement the server needs some work too. In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel...

Exploit for CVE-2026-16348

CVE-2026-16348 TP-Link Archer BE800 V1 — Authenticated RCE v...

ezsploit

ezsploit Alt text Linux bash script automation for metasploit Command line script for automating metasploit functions Checks for metasploit service and starts if not present Easily craft meterpreter reversetcp payloads for Windows, Linux, Android and Mac Start multiple meterpreter reversetcp...

CVE-2024-48762

CVE-2024-48762 Beschreibung Command injection vulnerability in /usr/www/application/models/settingscamera.php in FLIR AX8 bis 1.46.16 ermöglicht es Angreifern, beliebige Befehle über den Wertparameter auszuführen. POC root@kitploit: GET /settings/applyfirmware/;idtest123.txt;/false HTTP/1.1 Host:...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...