ida-cli

ida-cli ida-cli 是一个面向 macOS / Linux 的无界面 IDA CLI 与 skill-first 工具集。它会在运行时自动选择后端，在需要时自动拉起本地服务，并同时以 flat CLI、stdio MCP、Streamable HTTP MCP 三种方式暴露相同的能力。 English README 两个用户入口 本地 ida-cli 二进制（一个可执行文件同时承担客户端和服务端角色） 给 agent 环境安装的 ida-cli skill（skill/SKILL.md） 底层的 worker / router 服务层由 CLI...

apex v2.4.0-canary.d5c18874

Pensar Apex AI-powered penetration testing using autonomous agents — directly in your terminal. Run blackbox and whitebox pentests that explore, reason, and surface real vulnerabilities. Want to run from the cloud or integrate it with your CI/CD? See Pensar Console. Use Cases Developers Run...

PATCH-CVE-2026-31431-Ubuntu_Debian

🛡️ CVE-2026-31431 Copy Fail – Schadensbegrenzung – Linux-Kernel Dieses Repository enthält Skripte, die dazu dienen, die kritische Schwachstelle CVE-2026-31431 , auch bekannt als „Copy Fail“ , auf Ubuntu-Systemen zu neutralisieren. !IMPORTANT Kompatibilität: Diese Skripte sind auf Ubuntu Server...

HTB-Mailing-A-Complete-Walkthrough

HTB: Mailing — एक संपूर्ण वॉकथ्रू द्वारा: मुर्सलिन यदि आप HackTheBox मशीनों पर काम कर रहे हैं, तो Mailing उन बक्सों में से एक है जो वास्तव में आपको कुछ सिखाता है। इसे Easy रेटेड किया गया है, यह Windows पर चलता है, और कुछ वास्तविक दुनिया की कमजोरियों को एक साथ जोड़ता है — एक डायरेक्टरी ट्रैवर्सल, ...

copyfail

Copy Fail – CVE-2026-31431 PoC in C Lokaler Privilege-Escalation-Exploit für CVE-2026-31431 Copy Fail, geschrieben in C. Funktionsweise 1. ELF-Parsing : Ermittelt die virtuelle Adresse des Einstiegspunkts von /usr/bin/su und übersetzt sie über PTLOAD-Programmheader in einen Datei-Offset 2...

cve-2026-31431

CVE-2026-31431 "Copy Fail" - Vulnerabilità di Corruzione della Page Cache Corruzione della page cache del kernel Linux tramite manipolazione AEAD authencesn. ⚠️ IMPORTANTE: Aggiornamento sullo Stato dello Sfruttamento 1 maggio 2026 Dopo test approfonditi su più cluster OpenShift 4.20.16 con kernel...

C2-detection-manjusaka

"Manjusaka" C2 फ्रेमवर्क का पता लगाना C2 फ्रेमवर्क Manjusaka का पता लगाना: "Sliver और Cobalt Strike का एक चीनी समकक्ष" संदर्भ: डिटेक्शन लॉजिक का विवरण: https://corelight.com/blog/detecting-manjusaka-c2-framework Talos द्वारा लेख:...

external_tcpdump_CVE-2018-14469

tcpdump 如需报告安全问题，请发送电子邮件至 [email protected]。 如需报告错误和其他问题、贡献补丁、提出功能请求、提供一般性反馈等，请参阅 tcpdump 源码树根目录下的 CONTRIBUTING 文件。 TCPDUMP 4.x.y 现由 "The Tcpdump Group" 维护 参见 www.tcpdump.org 可通过匿名 Git 获取： root@kitploit: git clone git://bpf.tcpdump.org/tcpdump 原来自 Lawrence Berkeley National Laboratory Networ...

boundary

Boundary Cos'è Boundary: https://developer.hashicorp.com/boundary/docs/what-is-boundary Sito web: https://www.developer.hashicorp.com/boundary/ Forum: HashiCorp Discuss Documentazione: https://developer.hashicorp.com/boundary/docs Tutorial: Piattaforma Learn di HashiCorp Boundary è un proxy...

CVE-2025-1094-Lab-Setup

🛠️ CVE-2025-1094 Laborumgebung ⚠️ Haftungsausschluss Dieses Labor dient ausschließlich Bildungs- und Forschungszwecken. Verwenden Sie NICHT Informationen oder Techniken aus dieser Anleitung auf Systemen, die Ihnen nicht gehören oder für die Sie keine ausdrückliche Genehmigung zum Testen haben. Die...

Copy-Fail

CVE-2026-31431 – "कॉपी फेल" रीचेबिलिटी चेकर एक सरल, सुरक्षित Python स्क्रिप्ट जो यह निर्धारित करती है कि कोई Linux सिस्टम CVE-2026-31431 "कॉपी फेल" के प्रति संवेदनशील है या नहीं, जो कर्नेल 4.14 के बाद से सभी प्रमुख डिस्ट्रीब्यूशन को प्रभावित करने वाला एक स्थानीय विशेषाधिकार वृद्धि local privilege...

Copy-Fail-CVE-2026-31431-Statically-PoC

PoC statico in Go per Copy-Fail CVE-2026-31431 Questo repository contiene una portabilità in Go del proof of concept pubblico in Python di theori-io/copy-fail-CVE-2026-31431. Il programma è solo per Linux. Utilizza l'interfaccia Linux AFALG, i messaggi di controllo AEAD e splice2 per preservare i...

Dirty-Frag-Kubernetes-PoC

Dirty Frag CVE-2026-43284 — PoC di Container Escape Kubernetes Una proof-of-concept che dimostra come un Pod Kubernetes predefinito e non privilegiato possa ottenere esecuzione di codice a livello di nodo su Amazon EKS sfruttando la vulnerabilità di corruzione della page cache del kernel Linux...

CVE-2026-21636

CVE-2026-21636 - Bypass del modello di permessi UDS/Rete di Node.js Riepilogo della vulnerabilità Il modello di permessi di Node.js --permission è progettato per isolare un processo limitando l'accesso al filesystem, ai processi figli, ai worker e alla rete. CVE-2026-21636 rivela che le connessio...

APKLab

APKLab L'esperienza definitiva di reverse engineering Android direttamente nel tuo VS Code. APKLab integra perfettamente i migliori strumenti open-source: Apktool, smali-lsp, Jadx, uber-apk-signer, apk-mitm e altri direttamente in VS Code, così puoi concentrarti sull'analisi delle app e portarla ...

Cacti cmd_realtime.php - Command Injection

Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x DEV branch allows any unauthenticated user to execute arbitrary command on the server when registerargcargv option of PHP is On. In cmdrealtime.php line 119, the $pollerid used ...

Hitachi Pentaho Business Analytics Server - Remote Code Execution

Hitachi Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x, is susceptible to remote code execution via server-side template injection. Certain web services can set property values which contain Spring templates that are interpreted downstream, thereby...

NUUO NVRmini - Remote Command Execution

NUUO NVRmini is vulnerable to unauthenticated remote command execution through the upgradehandle.php file. The vulnerability allows an attacker to execute arbitrary commands by manipulating the uploaddir parameter. id: CVE-2018-14933 info: name: NUUO NVRmini - Remote Command Execution author:...

D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure

D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices are vulnerable to password disclosures vulnerabilities because the /config/getuser endpoint allows for remote administrator password disclosure. id: CVE-2020-25078 info: name: D-Link DCS-2530L/DCS-2670L - Administrator...

PhpMyAdmin <4.8.2 - Local File Inclusion

PhpMyAdmin before version 4.8.2 is susceptible to local file inclusion that allows an attacker to include view and potentially execute files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted...