CustomC2ChannelTemplate

IAT Hooking para canales C2 personalizados Esta es una PoC simple y una plantilla para desarrollar canales C2 personalizados para Cobalt Strike usando hooks de IAT aplicados por un cargador reflectante. Publicación del blog:...

nginx-patch

Imagen base nginx 1.15.x usando debian-base nginx engine x es un servidor HTTP y proxy inverso, un servidor proxy de correo y un servidor proxy TCP genérico. Esta imagen personalizada de nginx contiene: ngxdevelkit set-misc-nginx-module headers-more-nginx-module nginx-http-auth-digest...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

bxss

Bxss - Blind XSS Scanner 🚀 Description Bxss is a high-performance Blind XSS scanner that automates the detection of blind XSS vulnerabilities in web applications. ✨ Features Injects Blind XSS payloads into custom headers & parameters Supports multiple HTTP methods PUT, POST, GET, OPTIONS High-spe...

Bulk_403_Bypass

Bypass Masivo de 403 Este es un script de Bash que realiza un bypass masivo de 403 añadiendo una cabecera personalizada a las peticiones HTTP. Puede ser útil para probar si un sitio web es vulnerable a técnicas de bypass de 403. Uso Para usar el script, pasa una lista de URLs como argumento de...

langflow-CVE-2026-17633-PoC

CVE-2026-17633 & CVE-2026-17632 — IBM Langflow OSS RCE For educational purposes only. Only use against systems you own or have explicit written authorization to test. 1. Introduction What is Langflow Langflow is an open-source low-code platform for building LLM-powered applications and AI agent...

Pentest-Mapper

Pentest Mapper Pentest Mapper es una extensión de Burp Suite que integra el registro de solicitudes de Burp Suite con una lista de verificación personalizada para pruebas de aplicaciones. La extensión proporciona un flujo directo para las pruebas de penetración de aplicaciones. La extensión inclu...

lama

lama Lama, the application that does not mince words. Description Lama is a GNU Linux tool to generate a word list. The goal is to obtain a custom password dictionary to a particular target, whether physical or moral. It is therefore important that words in this list correspond to the target. Kee...

CVE-2026-105863

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that maps a field to a reserved authentication claim name can place unintended values in the authentication token issued at login. This issue is fixed in version...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

BinProxy

Resumen BinProxy es un proxy para conexiones TCP arbitrarias. Puede definir formatos de mensaje personalizados usando la gema BinData. Instalación Requisitos previos Ruby 2.3 o posterior Se necesitan un compilador C, cabeceras de Ruby, etc., para compilar varias dependencias. En Ubuntu, sudo apt...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

AFLplusplus

American Fuzzy Lop plus plus AFL++ Versión de lanzamiento: 5.03c Versión de GitHub: 5.03c Repositorio: https://github.com/AFLplusplus/AFLplusplus AFL++ es mantenido por: Marc "van Hauser" Heuse [email protected] Dominik Maier [email protected] Andrea Fioraldi [email protected] Heik...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

GooFuzz

GooFuzz - El poder de los Google Dorks Créditos Autor: M3n0sD0n4ld Twitter: @DavidUton Descripción: GooFuzz es un script escrito en Bash Scripting que utiliza técnicas avanzadas de búsqueda en Google para obtener información sensible en archivos o directorios sin realizar solicitudes al servidor...

CVE-2026-105863 Payload authentication token field handling issue

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that maps a field to a reserved authentication claim name can place unintended values in the authentication token issued at login. This issue is fixed in version...

CVE-2026-105863

The headless content management system Payload is vulnerable in versions after 3.0.0 and before 3.90.0 . The root cause is a custom field option that allows a field to be mapped to a reserved authentication claim name , which can cause unintended values to be placed in the authentication token is...

Freeko

Cómo instalar: necesario 1. Computadora 2. Tarjeta SD 3. Miko 3 1. Descarga los apks desde aquí 2. Cópialos a la tarjeta SD 3. Enciende el Miko y presiona los tres puntos 4. Ve a Configuración y luego a Política de privacidad 5. Mantén presionado el texto de la política hasta que veas un menú con...

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

masscan

MASSCAN: Mass IP port scanner This is an Internet-scale port scanner. It can scan the entire Internet in under 5 minutes, transmitting 10 million packets per second, from a single machine. Its usage parameters, output is similar to nmap, the most famous port scanner. When in doubt, try one of tho...