toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

stegowiper

stegoWiper: A powerful and flexible active attack for disrupting stegomalware Over the last 10 years, many threat groups have employed stegomalware or other steganography-based techniques to attack organizations from all sectors and in all regions of the world. Some examples are: APT15/Vixen Pand...

stegowiper

stegoWiper: 強力で柔軟なアクティブ攻撃によるステゴマルウェアの破壊 過去10年にわたり、多くの脅威グループがステゴマルウェアやその他のステガノグラフィ技術を利用して、世界中のあらゆるセクターの組織を攻撃してきました。例として、APT15/Vixen Panda、APT23/Tropic Trooper、APT29/Cozy Bear、APT32/OceanLotus、APT34/OilRig、APT37/ScarCruft、APT38/Lazarus Group、Duqu...

EDR-Redir

EDR-Redir EDR-Redir 使用 绑定过滤器（迷你过滤器 bindflt.sys） 将端点检测与响应（EDR）的工作文件夹重定向到攻击者选择的文件夹。 此外，它还可以让该文件夹显示为已损坏，从而阻止 EDR 的进程服务正常运行。 命令行语法 EDR-Redir.exe bind 创建从 VirtualPath 到 BackingPath 的绑定链接 EDR-Redir.exe bind 强大模式：创建从 VirtualPath 到 BackingPath 的绑定链接，并排除 ExceptionPath ExceptionPath 通常为杀毒软件/EDR...

Hipcam-RTSP-Format-Validation-Vulnerability

Hipcam RealServer/V1.0 RTSP 形式検証の脆弱性の概念実証 | CVE-2023-50685 Hipcam RealServer/V1.0 の RTSP サービスにおける形式検証の脆弱性の概念実証（PoC）。 説明 この PoC は、Hipcam RealServer/V1.0 の RTSP（Real Time Streaming Protocol）サービスにおける形式検証の脆弱性を悪用するものです。この脆弱性は、RTSP SETUP リクエスト内の 'clientport' パラメータに対する不十分な入力検証と処理に起因します。 脆弱性の詳細 RTSP SETU...

RogueSliver

RogueSliver Sliver C2フレームワークを使用したキャンペーンを妨害するツール群です。 このツール、その使用方法、作成方法については、ACEResponder.comで詳しく説明されています。 このツールは教育目的のみで使用してください。 | ---|--- ExtractCerts.py| 感染プロセスのミニダンプからmtls証明書と秘密鍵を抽出します。また、インプラントIDとmtlsエンドポイントも抽出します。 CrashSliverServer.py| Sliver...

CVE-2026-73764

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...

CVE-2026-73754

Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system...

CVE-2026-73779 Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

CVE-2026-73779

CVE-2026-73779 affects the AOS-CX switch operating system (HPE), where a set of vulnerabilities allows an unauthenticated remote actor on an adjacent network to circumvent existing authentication controls . Successful exploitation can lead to information disclosure , unauthorized modification , a...

EUVD-2026-69637

A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the affected system. Successful exploitation of this vulnerability could result in limited disclosure ...

CVE-2026-73764 Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...

CVE-2026-73764

CVE-2026-73764 affects the operating system of HPE AOS-CX switches , where an unauthenticated actor from an adjacent network can bypass authentication controls, enabling unauthorized modification of resources and limited service disruption . The CVSS 3.1 score is 7.1 (HIGH) with an attack vector ...

EUVD-2026-69623

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets. Successful exploitation of these vulnerabilities results in disruption of normal operation on affected devices...

EUVD-2026-69618

Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system...

CVE-2026-73754

CVE-2026-73754 affects the command line interface of HPE AOS-CX (ArubaOS CX). The vulnerability allows an authenticated user with low privileges to trigger a denial-of-service , disrupting normal system operation. The CVSS 3.1 score is 5.3 (Medium) , reflecting a network attack vector with high c...

CVE-2026-73715

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface...

CVE-2026-73706

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change the state of certain settings of a vulnerable system. Successful exploitation could allow an attacker to gain insight into internal servic...

CVE-2026-73715 Unauthenticated Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface...

CVE-2026-73710

CVE-2026-73710 affects an API endpoint in HPE Networking Fabric Composer . An unauthenticated remote attacker can trigger a denial of service , with successful exploitation also enabling limited unauthorized modifications to the underlying operating system and disrupting system availability until...