CVE-2024-34222

Human Resource Management System 1.0 Отправитель: Kha Do Уязвимость SQL-инъекция Описание Уязвимость SQL-инъекции в /hrm/country.php в SourceCodester Human Resource Management System 1.0 позволяет злоумышленникам выполнять произвольные SQL-команды через параметр searccountry. Затронутый компонент...

CVE-2024-24576-PoC-BatBadBut

CVE-2024-24576-PoC-BatBadBut PoC pour la vulnérabilité CVE-2024-24576 « BatBadBut » Informations Après l'exécution, le script vous demandera un argument, qui sera passé au fichier bat. Si vous fermez l'argument avec " et après cela &, vous pouvez exécuter n'importe quelle commande Windows. Par...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

EUVD-2026-71976

Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task creation, allowing subusers with only schedule.update permission to execute arbitrary console commands. Attackers can create and immediately trigger scheduled tasks that run game-server console command...

xc

XC Netcat like reverse shell for Linux & Windows. Features Windows root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active...

Windows-Privilege-Escalation-Notes

Windows 권한 상승 선호하는 룸은 https://tryhackme.com/room/windows10privesc 이지만, 원하는 것을 사용해도 됩니다. 몇 가지 리소스, https://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/ https://sushant747.gitbooks.io/total-oscp-guide/content/privilegeescalationwindows.html...

SharpGmailC2

SharpGmailC2 Notre Gmail convivial agira comme serveur et l'implant exfiltrera des données via SMTP et lira les commandes du C2 Gmail via le protocole IMAP. AVERTISSEMENT : Ce projet ne fonctionne pas contre Windows Defender après le 29 novembre 2022. Cet outil est désormais signé par MS Windows...

hershell

Hershell Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

ssct

ShadowSocks ConnecTion A wrapper tool for shadowsocks to consistently bypass firewalls. Quick start Automatically connect The easiest way to run this tool is just type ssct in terminal, and ssct will acquire available shadowsocks servers from ishadowsocks and connect to it automatically. Connect ...

CVE-2025-5548

⚡ CVE-2025-5548: Исследование уязвимостей и эксплуатация Этот репозиторий содержит технический анализ и пошаговое руководство по доказательству концепции Proof-of-Concept для CVE-2025-5548. Это исследование охватывает полный жизненный цикл уязвимости: от первоначального анализа бинарного файла до...

CVE-2007-1567

🐞 CVE-2007-1567 : War FTP Daemon 1.65 - Débordement de tampon basé sur la pile Débordement de tampon classique basé sur la pile dans War FTP Daemon 1.65 démontrant l'exécution de code à distance à l'ancienne via des commandes FTP malformées. 📑 Table des matières Pourquoi ce dépôt existe Pourquoi...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

CVE-2026-80759

CVE-2026-80759 affects the Linux kernel's Bluetooth HCI AML driver . The function aml_download_firmware() reads two lengths from the firmware header and uses them to build pointers before verifying that the header and segment data are actually present. A truncated or inconsistent firmware image c...

Pentest-Command

Предыстория проекта В процессе пентестинга мы используем различные фреймворки, например: MSF, CS, Empire, Impacket и т.д. Основная цель этого проекта — собрать команды, часто используемые на этапе пост-эксплуатации. Базовые знания Обзор каталогов Windows a、Каталог автозагрузки программc...

gladius

Gladius Easy mode from Responder to Credentials Author: Cory Duplantis @ctfhacker / blog Blog post on Gladius asciicast Gladius provides an automated method for cracking credentials from various sources during an engagement. We currently crack hashes from Responder, secretsdump.py, and...

viper

This repository is archived and development of Viper 1.x is discontinued. A full refactor of the project started withViper 2. Viper is a binary analysis and management framework. Its fundamental objective is to provide a solution to easily organize your collection of malware and exploit samples a...

novahot

novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...