omnibus

OSINT Omnibus Entwickelt und gepflegt von InQuest Inhaltsverzeichnis OSINT Omnibus Omnibus Dokumentation Vokabular Omnibus ausführen API-Schlüssel Interaktive Konsole Artefakte Übersicht Artefakte erstellen & verwalten Sessions Module Maschinen Berichterstellung Module überwachen OSINT Omnibus...

Malware

Malware Raccolta di malware macOS ⚠️ Questa pagina contiene collegamenti a malware attivo! Scaricando malware da questo sito, rinunci a tutti i diritti di richiedere danni derivanti da un uso improprio o da un'auto-infezione. 📡 L'esecuzione dei campioni può comportare connessioni a infrastrutture...

EUVD-2026-66666

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-68861

Dell PowerProtect One , versions 20.1.0.0 and below , are affected by an OS Command Injection vulnerability (Improper Neutralization of Special Elements used in an OS Command). A low-privileged attacker with remote access could exploit this to achieve remote code execution , resulting in high imp...

polymorph

Polymorph Polymorph is a tool that facilitates the modification of network traffic on the fly by allowing the execution of Python code on network packets that are intercepted in real time. This framework can be used to modify in real time network packets that implement any publicly specified...

nemesis

N E M E S I S - Erstellung & Injektion Das Nemesis-Projekt ist als ein kommandozeilenbasiertes, portables menschliches IP-Stack für UNIX-ähnliche und Windows-Systeme konzipiert. Die Suite ist nach Protokollen unterteilt und soll nützliches Scripting injizierter Pakete aus einfachen Shell-Skripten...

metabigor

Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

SharpSphere

SharpSphere - Angriff auf vSphere-Infrastruktur Credit @jkcoote & @grzryc Eine vollständige Schritt-für-Schritt-Anleitung und Beispiele gibt es hier. Versionsverlauf 1.0 - Erste Veröffentlichung 2.0 - Unterstützung für Pass-Through-Authentifizierung mittels SSPI hinzugefügt. 2.1 - Unterstützung f...

HBSQLI

HBSQLI: Tester Automatico per SQL Injection Cieca Basata su Header HBSQLI è uno strumento automatico da riga di comando per eseguire attacchi di SQL Injection Cieca basata su Header su applicazioni web. Automatizza il processo di rilevamento delle vulnerabilità di SQL Injection Cieca basata su...

CVE-2026-71171

Dell Cloud Disaster Recovery versions 20.2 and prior contain an OS Command Injection vulnerability in its REST API . A high-privileged attacker with remote access could exploit it to achieve remote code execution , with full impact on confidentiality, integrity, and availability. The CVSS 3.1 sco...

EUVD-2026-66658

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote...

CVE-2026-71171

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote...

sunlogin_rce

Prefazione Non c'è molto da dire, metto direttamente lo strumento e le versioni vulnerabili. È ottimo per giocare in locale, ma non usatelo per test illegali. Versione vulnerabile del client Sunflower testata: 11.0.0.33162 Il client vulnerabile è fornito nel codice sorgente. Per la scansione dell...

CVE-2026-70419

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2026-70419

Dell Cloud Disaster Recovery versions 20.2 and prior contain an OS Command Injection vulnerability. A high-privileged attacker with remote access can exploit it to achieve arbitrary command execution , with a CVSS 3.1 score of 9.1 (Critical) and a Changed Scope . CISA's SSVC assessment rates expl...

EUVD-2026-66656

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

ssh-auditor

SSH Auditor Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known host whose ssh version or key fingerprint changes...

ssh-auditor

SSH Auditor Funktionen ssh-auditor automatisiert Folgendes: Überprüft alle bekannten Hosts erneut, sobald neue Anmeldedaten hinzugefügt werden. Dabei werden nur die neuen Anmeldedaten geprüft. Stellt eine vollständige Überprüfung der Anmeldedaten für jeden neu entdeckten Host in die Warteschlange...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...