avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

xxexploiter

XXExploiter 它生成XML载荷，并自动启动一个服务器来提供所需的DTD或进行数据外泄。 安装 install node and npm if you don't have it yet npm install -g xxexploiter 从源码构建和运行 这是一个用TypeScript编写的简单Node应用。因此你可以像构建其他应用一样构建它： （如果没有安装node和npm，请先安装它们） npm install npm run build you may need to npm install typescript -g in order for 'npm build' ...

Am-I-affected-by-Meltdown

¿Estoy afectado por Meltdown?! Comprobador de Meltdown CVE-2017-5754 ¿Qué soy? Prueba de concepto / Exploit / Comprueba si el sistema está afectado por la Variante 3: rogue data cache load CVE-2017-5754, también conocido como MELTDOWN. La idea básica es que el usuario sabrá si el sistema en...

CVE-2022-26134

CVE-2022-26134 PoC !WARNING AVISO LEGAL: ¡Esta herramienta es SOLO para FINES EDUCATIVOS! El uso de esta herramienta para atacar objetivos sin consentimiento mutuo previo es ILEGAL. Es responsabilidad del usuario cumplir todas las leyes aplicables mientras se utiliza esta herramienta. El...

mariadb-13-rce-lab

Laboratorio de RCE MariaDB 13.0.1-rc Ejecución remota de código en la imagen Docker estándar sin modificar de MariaDB 13.0.1-rc como uid 999 mysql. Dos variantes de exploit: Variante| Archivo| Requisitos| Notas ---|---|---|--- SQL puro recomendado| exploitpuresql.py| una cuenta MariaDB de bajos...

grr

GRR Rapid Response is an incident response framework focused on remote live forensics. GRR is a python client agent that is installed on target systems, and python server infrastructure that can manage and talk to clients. Documentation Please visit our documentation website if you want to know...

CVE-2026-105244

Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record instead of being escaped, so non-ASCII text and control characters such as tabs disappeared without notice. A party whos...

CVE-2026-105240

Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net. A NUL character in logged content ended the debug output record at that point, so everything the layout rendered after it, including exception text and trailing fields, was...

CVE-2026-105239

Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL character in logged content ended the Windows Event Log record at that point, so everything the layout rendered after it, including exception text and trailing fields, was silently...

CVE-2026-102406

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to a user or team sharing the same Kibana deployment, not a separate Elastic Cloud organization or customer. Kibana's Fleet package installation proces...

CVE-2026-102407

Incorrect Authorization CWE-863 in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with sufficient privileges over a single resource could use the Modify Data Streams API to modify a data...

CVE-2026-102157

An insecure direct object reference IDOR vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under specific attack conditions, to access another user's transient data...

CVE-2026-101153

On affected versions of CloudVision Portal on-premises or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor...

CVE-2026-101156

A stored cross-site scripting XSS vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful...

iGPU-Leak

CVE-2019-14615: La Vulnerabilidad iGPU-Leak Wenjian He, Wei Zhang, Sharad Sinha y Sanjeev Das. iGPU Leak: Una Vulnerabilidad de Fuga de Información en GPU Integrada de Intel. En las Actas de la 25.ª Conferencia de Automatización de Diseño de Asia y el Pacífico Sur ASP-DAC'20. Ver PDF Ver...

Neton

Neton - 沙箱信息收集工具 Neton 是一个从互联网连接的沙箱中获取信息 的工具。它由一个代理和一个用于展示收集信息的Web界面组成。 Neton代理从其运行的系统中获取信息，并通过HTTPS将其外泄到Web服务器。 它收集的部分信息包括： 操作系统与硬件信息 查找挂载驱动器上的文件 列出未签名的微软驱动程序 运行SharpEDRChecker 运行Pafish 运行Al-Khaser 检测钩子 截取桌面截图 所有这些信息可用于改进红队工具，或了解沙箱的工作原理并加以改进。 Images 部署 NetonWeb 1. 安装（使用virtualenv）： python3 -m ve...

mapsdumper

▒█▀▄▀█ ░█▀▀█ ▒█▀▀█ ▒█▀▀▀█ ▒█▀▀▄ ▒█░▒█ ▒█▀▄▀█ ▒█▀▀█ ▒█▀▀▀ ▒█▀▀█ ▒█▒█▒█ ▒█▄▄█ ▒█▄▄█ ░▀▀▀▄▄ ▒█░▒█ ▒█░▒█ ▒█▒█▒█ ▒█▄▄█ ▒█▀▀▀ ▒█▄▄▀ ▒█░░▒█ ▒█░▒█ ▒█░░░ ▒█▄▄▄█ ▒█▄▄▀ ░▀▄▄▀ ▒█░░▒█ ▒█░░░ ▒█▄▄▄ ▒█░▒█ by: @Tegal1337 MAPSDUMPER 演示 • 安装 • 功能 • 致谢 一个用于从 Google 地图中导出地点详细信息（如电话号码、电子邮件、网站和评论）的工具 演示 $ 在此观看演示视频...

CyberChef

CyberChef 网络瑞士军刀 CyberChef 是一款简单直观的 Web 应用，用于在浏览器中执行各种“网络（cyber）”操作。这些操作包括 XOR 和 Base64 等简单编码，AES、DES 和 Blowfish 等更复杂的加密，生成二进制和十六进制转储，数据压缩与解压缩，计算哈希和校验和，解析 IPv6 和 X.509，更改字符编码，以及更多功能。 该工具旨在让技术型和非技术型分析人员都能以复杂的方式处理数据，而无需应付复杂的工具或算法。它由一位分析人员利用其 10% 的创新时间，历经数年构思、设计、构建并逐步改进而成。 目录 官方网站 本地运行 使用 Docker 从源码...

ScratchABit

ScratchABit ScratchABit 是一个交互式增量反汇编器，具备数据流/控制流分析功能。ScratchABit 致力于支持开源逆向工程社区的努力（即通过逆向工程为未得到厂商适当支持的硬件生成开源驱动/固件，以实现硬件与软件的互操作性，并用于安全研究）。 ScratchABit 支持社区中广为人知的 IDAPython API，用于编写反汇编/扩展模块。 ScratchABit 仍在开发中，功能按需添加，欢迎贡献。 ScratchABit 根据 GNU 通用公共许可证 v3 GPLv3 的条款发布。 需求/宣言 1...

CVE-2026-106455

The @backstage/plugin-techdocs-node package in Backstage (versions 0.11.12 through 1.14.7 and 1.15.5) is vulnerable to CWE-918 (Server-Side Request Forgery) due to improper validation of MkDocs plugin configurations. An authenticated attacker with control over a TechDocs source repository can tri...