CVE-2025-40634

CVE-2025-40634 The TP-Link Archer AX50 router is vulnerable to a stack-based buffer overflow on its firmware version 1.0.14 Build 20240108 rel.426554555, leading to Remote Code Execution both in the LAN and in the WAN side. This vulnerability has the same root cause as CVE-2020-10881, found by th...

CVE-2026-87796

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-87796 CVE-2026-87796 Multi Uploader for Gravity Forms 1.1.9 - sh1zen I am @abraxasnull. Loopback lab. The client is CVE-2026-87796-Abraxas-Labs.py. The advisory named a method. movefile is a private PHP...

jvmxray

JVMXRay: Java Application Security Monitoring Duke history Documentation | Changes from Upstream | Project Blog JVMXRay monitors Java applications in real-time via bytecode injection, detecting vulnerabilities and suspicious activity without code changes. 19 modular sensors track file access,...

xssless

xssless An automated XSS payload generator written in python. Usage 1. Record requests with Burp proxy 2. Select requests you want to generate, then right click and select "Save items" 3. Use xssless to generate your payload: ./xssless.py burpexportfile 4. Pwn! A more detailed tutorial can be fou...

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version v12.1.1.3 Vulnerability Details CVEID:CVE-2026-59270 DESCRIPTION: Spring Security's embedded UnboundID LDAP server UnboundIdContainer unconditionally registers an administrative credential and binds its listener to all...

psobf

Ofuscador de PowerShell Su objetivo es transformar el código para dificultar el análisis y las firmas estáticas, útil en laboratorios y compromisos autorizados de Red Team/Pentesting. Soporta 6 niveles de ofuscación más una arquitectura de transformaciones/pipeline que permite apilar técnicas com...

rsdl

rsdl Subdomain Scanner v.2 Subdomain Scan With Ping Method & Check HTTP/S Statuses. Flags| Value| Description ---|---|--- --hostname| example.com| Domain for scan. --output| | Records the output with the domain name. --list| /tmp/lists/example.txt| Lister for subdomains. New Features Checking...

waf-checker

WAF Checker Este proyecto te ayuda a comprobar qué tan bien protege tu Web Application Firewall WAF tu producto contra ataques web comunes. Se puede ejecutar como un Cloudflare Worker con una interfaz web interactiva incorporada o como una herramienta CLI independiente de Node.js. Características...

crackle

crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

web-brutator

Web Brutator Bruteforce rápido y modular de interfaces web 📥 Instalación python3 -m pip install -r requirements.txt ⏩ Uso $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /\ / \ / | / || |/ || /| /|| /...

web-brutator

Web Brutator Fast Modular Web Interfaces Bruteforcer 📥 Install python3 -m pip install -r requirements.txt ⏩ Usage $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /\ / \ / | / || |/ || /| /|| / / / /...

Venom

Venom - A Multi-hop Proxy for Penetration Testers 简体中文 ｜ English Venom is a multi-hop proxy tool developed for penetration testers using Go. You can use venom to easily proxy network traffic to a multi-layer intranet, and easily manage intranet nodes. This tool is limited to security research and...

cve-2023-34035-mitigations

Este repositorio es un conjunto de ejemplos para demostrar las configuraciones en las que las aplicaciones pueden ser vulnerables a https://spring.io/security/cve-2023-34035CVE-2023-34035. Una aplicación es vulnerable cuando se cumplen todas las siguientes condiciones: Spring MVC está en el...

CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated

CVE-2022-40347: Intern Record System - Inyección SQL sin autenticación en 'phone', 'email', 'deptType' y 'name' Título del exploit: Intern Record System - Inyección SQL sin autenticación en 'phone', 'email', 'deptType' y 'name' Fecha: 2022-06-09 Autor del exploit: Hamdi Sevben Página del proveedo...

AtlasC2

AtlasC2 C C2 Framework centered around Stage 1 operations Atlas is based around gaining a foothold within an environment and further utilizing it to smuggle in C currently strictly C weaponry utilizing an HTTP based implant. Isn't exactly very OPSEC safe in it's current state...at all. Currently...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

fernflower

Fernflower Fernflower es el primer descompilador analítico que realmente funciona para Java y probablemente para un lenguaje de programación de alto nivel en general. Las versiones se publican en el repositorio de IntelliJ Community. Envía tus informes de errores y solicitudes de funciones al iss...

uac-a-mola

uac-a-mola Instalación Para instalar uac-a-mola debes realizar las siguientes acciones: 1. Descargar e instalar Python 2.7.x para Windows teniendo en cuenta tu infraestructura particular, puedes encontrar los binarios aquí: https://www.python.org/downloads/ 2. Añadir la ruta de Python a la variab...

waf-bypass

WAF Bypass Tool WAF Bypass Tool es una herramienta de código abierto para analizar la seguridad de cualquier WAF en busca de Falsos Positivos y Falsos Negativos utilizando payloads predefinidos y personalizables. Revisa tu WAF antes de que lo haga un atacante. WAF Bypass Tool está desarrollado po...