CVE-2020-1472

Après reproduction, il y a un petit bug : au redémarrage, l'écran de connexion reste long. Je ne sais pas si cela m'arrive uniquement à moi. À utiliser avec prudence dans un environnement réel. En pratique, vous pouvez utiliser -use-vss et -history de secretsdump.py pour récupérer les hashs...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

xepor

Xepor Xepor prononcé /ˈzɛfə/ , zephyr est un framework de routage web pour les ingénieurs en rétro-ingénierie et les chercheurs en sécurité. Il fournit une API de type Flask permettant aux hackeurs d'intercepter et de modifier les requêtes HTTP et/ou les réponses HTTP dans un style de codage...

copyfail-deconstructed

copyfail-deconstructed Version facile à comprendre de CVE-2026-31431, une technique d'escalade de privilèges qui permet à n'importe qui de devenir root. La preuve de concept originale se trouve ici : https://github.com/theori-io/copy-fail-CVE-2026-31431, mais elle est fortement compressée et...

CVE-2024-36991

CVE-2024-36991 - Traversée de chemin Splunk Preuve de concept pour CVE-2024-36991 qui permet à un attaquant de lire des fichiers arbitraires dans Splunk pour les versions inférieures à 9.2.2, 9.1.5 et 9.0.10 pour Windows. Utilisation Lire les fichiers de configuration Splunk Pour lire les fichier...

ghidra-mtk-loader

Загрузчик MediaTek md1img для Ghidra Загрузчик Ghidra для формата образа прошивки модема MediaTek md1img. В настоящее время поддерживается только прошивка на базе nanoMIPS, но базовые функции могут работать, если при загрузке образа вручную выбрать другую архитектуру например, MIPS. Установка Для...

CVE-2026-42897

CVE-2026-42897 – Angle mort de la règle de réécriture sortante dans Exchange Health Checker Sévérité : Moyenne CVSS 5.3 Composant : Microsoft CSS-Exchange – outil de diagnostic HealthChecker Fichiers concernés : Diagnostics/HealthChecker/Analyzer/Get-URLRewriteRule.ps1 L49, L72, L97...

Egress-Assess

Egress-Assess Egress-Assess is a tool used to test egress data detection capabilities. Setup To set up, run the included setup script, or perform the following: 1. Install pyftpdlib 2. Generate a server certificate and store it as "server.pem" on the same level as Egress-Assess. This can be done...

PMAT-labs

PMAT-labs 🔬 Welcome to the labs for Practical Malware Analysis & Triage. 🔴 WARNING 🔴 Read this carefully before proceeding. This repository contains live malware samples for use in the Practical Malware Analysis & Triage course PMAT. These samples are either written to emulate common malware...

MCP-Inspector-CVE-2025-49596

MCP Inspector Vérificateur de vulnérabilité CVE-2025-49596 Ce script vérifie si un serveur MCP Inspector est vulnérable à CVE-2025-49596, un problème de sécurité où le point de terminaison /sse répond aux requêtes non authentifiées jeton d'authentification manquant. Fonctionnement Le script envoi...

CVE-2026-23111-nftables-lab

CVE-2026-23111 nftables LPE : vérification d'exposition et laboratoire sécurisé Outils défensifs et un laboratoire reproductible de machine virtuelle pour CVE-2026-23111, l'escalade de privilèges locale use-after-free de nftables dans le noyau Linux une vérification inversée d'activité d'élément...

frida-wshook

frida-wshook frida-wshook is an analysis and instrumentation tool which uses frida.re to hook common functions often used by malicious script files which are run using WScript/CScript. The tool intercepts Windows API functions and doesn't implement function stubs or proxies within the targeted...

Internet-Scanner

Local Network Scanner A Tkinter GUI that scans a local IPv4 network ARP + nmap probing, shows devices, lets you run full port scans, and export results. Quick overview ARP scan to discover devices on the LAN. Improved nmap probes for hostname, vendor, open ports, OS guess, and latency. Full-port...

frida-android-libbinder

frida-android-libbinder PoC Frida script to view Android libbinder traffic. The following links were a great source of inspiration and knowledge: https://www.blackhat.com/docs/eu-14/materials/eu-14-Artenstein-Man-In-The-Binder-He-Who-Controls-IPC-Controls-The-Droid.pdf...

clone-cert

clone-cert.sh This is a simple shell script that retrieves the X.509 certificate associated with a TLS wrapped TCP port and uses openssl to create a similar certificate by replacing the public key and fixing the signature. This is particularly useful if you want to demonstrate why self-signed...

opencode

The open source AI coding agent. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt Installation root@kitploit: YOLO curl -fsSL...

CVE-2026-77124 Nexus Repository 3 - Script Execution Disable Setting Not Enforced

In affected versions of Nexus Repository 3, the script execution endpoint POST /service/rest/v1/script/name/run did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an...

CVE-2026-77124 Nexus Repository 3 - Script Execution Disable Setting Not Enforced

In affected versions of Nexus Repository 3, the script execution endpoint POST /service/rest/v1/script/name/run did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an...

EUVD-2026-70229

In affected versions of Nexus Repository 3, the script execution endpoint POST /service/rest/v1/script/name/run did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an...

CVE-2026-77124

In Nexus Repository 3 , the script execution endpoint (POST /service/rest/v1/script/{name}/run) failed to check whether script execution had been administratively disabled via nexus.scripts.allowCreation=false. As a result, an account holding script-execution permission could still execute previo...