rbuster

Rbuster yet another dirbuster Common Command line options -a - specify a user agent string to send in the request -c - use this to specify any cookies that you might need simulating auth. header. -f - force processing of a domain with wildcard results. -l - show the length of the response. -r...

fluffi

FLUFFI FLUFFI - A distributed evolutionary binary fuzzer for pentesters. About the project High level overview Beginner Tutorial Getting started Usage HOWTOs Technical Details Contributing to FLUFFI LICENSE Bugs found So far, FLUFFI was almost exclusively used on SIEMENS products and solutions...

boringssl

BoringSSL BoringSSL is a fork of OpenSSL that is designed to meet Google's needs. Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no...

java-stager

java-stager A PoC Java Stager which can download, compile, and execute a Java file in memory. This is for research purposes only, do not use this where you are unauthorised to do so. What is this? This is based on the work of James Williams from his talk "Next Gen AV vs My Shitty Code" available...

java-stager

java-stager Un PoC Java Stager qui peut télécharger, compiler et exécuter un fichier Java en mémoire. Ceci est uniquement à des fins de recherche, ne l'utilisez pas là où vous n'êtes pas autorisé à le faire. Qu'est-ce que c'est ? Ceci est basé sur le travail de James Williams dans sa présentation...

AOSP-DownloadProviderDbDumperSQLiWhere

AOSP-DownloadProviderDbDumperSQLiWhere PoC, использующий SQL-инъекцию в провайдере загрузок Android в параметре selection CVE-2019-2198 Бюллетень безопасности SQL-инъекция в провайдере загрузок Android AOSP в параметре выбора запроса CVE-2019-2198 Демо...

sak1to-shell

sak1to-shell Multi-threaded, multi-os/platform Linux/Windows c2 server and Windows reverse TCP shell client both written in C. Compiling reverse TCP shell client with i686-w64-mingw32-gcc: i686-w64-mingw32-gcc sakitorevshell.c lib/windows/sakitowincore.c -o sakitorevshell.exe -s -ffunction-sectio...

CVE-2026-92533

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

pybeacon

PyBeacon PyBeacon is a collection of scripts for dealing with Cobalt Strike's encrypted traffic. It can encrypt/decrypt beacon metadata, as well as parse symmetric encrypted taskings Scripts included There is a small library which includes encryption/decoding methods, however some example scripts...

vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

apkSneeze

apkSneeze v2.0.0 A tool that automates the mundane tasks of pentesting Android apps. The tool currently provides the following features: 1. Decompiles the provided apk file. 2. Converts the provided apk file to a Jar file. 3. Searches the decompiled files for interesting strings. 4. Sets up ADB...

pysqli

PySQLi - Python SQL injection framework 1. Overview PySQLi is a python framework designed to exploit complex SQL injection vulnerabilities. It provides dedicated bricks that can be used to build advanced exploits or easily extended/improved to fit the case. 2. Why another SQLi framework ? Simple...

CVE-2026-92533

A path traversal vulnerability exists in the BugTracker.NET file download component. The flaw stems from improper validation of user-supplied paths in the parameter used to specify file names. An authenticated remote attacker could provide a manipulated path to access files outside the intended d...

CVE-2026-92533 Path Traversal in BugTracker.NET

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

EUVD-2026-94285

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

CVE-2026-92533 Path Traversal in BugTracker.NET

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Raw bytes manipulation utility, able to apply well known and less well known transformations, quick binary search, network proxy interception and more. Install on Windows: Download the release zip here Remember to install/repair the VS...

ASSAMEE

ASSAMEE ASSAMEE is a free advanced encryption tool that can be used to encrypt files and directories and store them on Anonfiles.com. It uses AES-256 encryption, which is a strong and secure encryption method. To access the encrypted files, a download ID is required to decrypt and download the da...

snare

SNARE Super Next generation Advanced Reactive honEypot About SNARE is a web application honeypot sensor attracting all sort of maliciousness from the Internet. Documentation The documentation can be found here. Basic Concepts Surface first. Focus on the attack surface generation. Sensors and...

CVE-2021-42292

CVE-2021-42292 이 패키지는 CVE-2021-42292의 익스플로잇을 탐지합니다. 이 취약점은 Microsoft Excel의 로컬 권한 상승 취약점이며, notice.log에 알림을 생성합니다. https://corelight.com/blog/detecting-cve-2021-42292 탐지 방법: 이 패키지는 트리거 역할을 하는 Excel 스프레드시트가 두 번째 스프레드시트를 다운로드할 때 취약점을 탐지합니다. 두 번째 스프레드시트는 상승된 권한으로 실행됩니다. 이 스크립트를 사용하여 Microsoft Excel이...