hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

CVE-2022-44877

CVE-2022-44877 Resumen Este script de bash se utiliza para probar la vulnerabilidad de los servidores web a CVE-2022-44877. El script realiza una petición curl a una URL objetivo con un payload codificado en base64. Si el objetivo es vulnerable a la vulnerabilidad CVE-2022-44877, el tiempo...

email-header-analyzer

电子邮件头分析器 MHA 什么是电子邮件头分析器 MHA： 电子邮件头分析器是一款基于 Flask 编写的工具，用于解析电子邮件头并将其转换为人类可读的格式，此外它还可以： 识别跳转延迟。 识别电子邮件的来源。 识别跳转所在国家。 MHA 是以下工具的替代方案： 名称| 开发者| 问题 ---|---|--- MessageHeader| Google| 未显示所有跳转。 EmailHeaders| Mxtoolbox| 不准确且速度慢。 Message Header Analyzer| Microsoft| 界面损坏。 安装 安装系统依赖： sudo apt-get update su...

adfsbrute

adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...

CVE-2023-0045

Bypassing Spectre-BTI User Space Mitigations on Linux This is a working document, please send us feedback if you think we got something wrong or if we missed a citation Version 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introduction When testing the success rate of Spectre-BTI attacks, we...

CVE-2026-104422

The block sync download path in Zebra zebrad before 6.3.0 reads a block's height from its unvalidated coinbase scriptSig and drops blocks that appear too far behind the tip before consensus validation, without penalizing the supplying peer. Because V5 transaction IDs exclude the scriptSig, a...

EUVD-2026-91433

The block sync download path in Zebra zebrad before 6.3.0 reads a block's height from its unvalidated coinbase scriptSig and drops blocks that appear too far behind the tip before consensus validation, without penalizing the supplying peer. Because V5 transaction IDs exclude the scriptSig, a...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

CrawlBox

CrawlBox | Easy way to brute-force web directory. Operating Systems Tested MacOSX Kali Linux Ubuntu 16.04 Usage python crawlbox.py -h -v -w WORDLIST url positional arguments: url specific target url, like domain.com optional arguments: -h, --help show this help message and exit -v, --version show...

frevvomapexec

frevvomapexec frevvomapexec 是一个用于验证 Square 9 GlobalForms 6.2 中是否存在盲 SQL 注入漏洞的脚本，通过注入您自定义的延迟秒数来实现。为了确认漏洞的真实性，最终用户需要进行计算（例如：用较大的秒数减去较小的秒数）。如果该计算结果与通过 -s 参数指定的秒数大致相符，那么您就成功验证了一个 SQL 注入漏洞。另外，请使用 SQLmap，它是您的好帮手。同时请注意，这是一个需要身份验证的 SQL 注入！但不要灰心，因为服务器通常仍会启用默认凭据！默认情况下，frevvomapexec 使用默认凭据，所以通常一切顺利！ 使用方法...

CVE-2018-15473

Necesitarás Python 2.7 para usar este exploit. Instala todos los módulos que se indican a continuación en Python 2.7. Como por ejemplo: python2 -m pip install numpy python2 -m pip install paramiko python2 -m pip install property Para probar un solo nombre de usuario usa este comando: python...

openssh security update

An update is available for openssh. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux,...

openssh security update

An update is available for openssh. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...

ivanti-automationmanager-exploit

PoC para CVE-2022-44569 para Ivanti Automation Manager, a Ivanti le tomó más de un año publicar un parche. Ivanti me dijo que está corregido en Ivanti Automation 2023.4... https://github.com/rweijnen/ivanti-automationmanager-exploit/assets/7575747/818f11e1-0e86-4d91-8ce1-8949e45cfd8c...

Rocky Linux 9 [CIQ] Security Update: qt5-qtbase / qt5-qtbase-common / qt5-qtbase-debuginfo / etc (crlsa-2024_4623)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20244623 advisory. qtbase: qtbase: Delay any communication until encrypted can be responded to CVE-2024-39936 Tenable has extracted the preceding description block directly from the C...

AlmaLinux 9.2 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.2:CLSA-2026:1784634529)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784634529 advisory. - sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. CVE-2026-60001 Note that Nessus has not tested for this...

RockyLinux 9 : openssh (RLSA-2026:73955)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:73955 advisory. openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay CVE-2026-60001 Tenable has extracted the preceding description block...

RockyLinux 10 : openssh (RLSA-2026:73954)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:73954 advisory. openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay CVE-2026-60001 Tenable has extracted the preceding description block...

AlmaLinux 10 : openssh (ALSA-2026:73954)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:73954 advisory. openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay CVE-2026-60001 Tenable has extracted the preceding description block...

openssh security update

9.9p1-12.0.1 - Restore pamsshagentrel values that were used for initial release - Fix PerSourcePenalties grace-exceeded using the crash penalty value Orabug: 39825354 - Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el102 ML-KEM/NIST backport Orabug: 39423076 - Upstream...