PwnLnX - An Advanced Multi-Threaded, Multi-Client Python Reverse Shell For Hacking Linux Systems

An advanced multi-threaded , multi-client python reverse shell for hacking linux systems. There's still more work to do so feel free to help out with the development. Disclaimer : This reverse shell should only be used in the lawful, remote administration of authorized systems. Accessing a comput...

Invoke-Stealth - Simple And Powerful PowerShell Script Obfuscator

Invoke-Stealth is a Simple & Powerful PowerShell Script Obfuscator. This tool helps you to automate the obfuscation process of any script written in PowerShell with different techniques. You can use any of them separately, together or all of them sequentially with ease, from Windows or Linux...

vulhub

This repository is an open-source collection of pre-built vulnerable docker environments, referred to as 'Vulhub'. It is an offensive tool for testing and demonstrating vulnerabilities in various software and systems. The primary purpose of Vulhub is to provide a simple and easy-to-use platform f...

Conti ransomware gang demanded $40m from US school district

By Habiba Rashid Broward County Schools district in Fort Lauderdale, FL was attacked by the infamous Conti ransomware group last month. In a series of ransomware attacks on educational institutions that have been going on for the past few weeks, this time around, Broward County Public Schools in...

Lazy-RDP - Script For AutomRDPatic Scanning And Brute-Force

Script For AutomRDPatic Scanning And Brute-Force. Demo Video: Lazy-RDP over SSH: Script for automatic scanning of the address list for the presence of open 3389 ports, and then selecting the method and starting busting pair login / password. The script is tuned for Kali linux 2.0, Kali linux 2016...

Logic Flaw Vulnerability in Large Practice Series Instructional Management System (CNVD-2021-21598)

Kok Jin Information Technology Co., Ltd. is a domestic educational software and informationization service provider. A logic flaw vulnerability exists in the Great Practice Series Teaching Management System, which can be exploited by attackers to obtain sensitive information...

Exploit for OS Command Injection in Systeminformation

CVE-2021-21315-systeminformation This is Proof of Concept for...

File Upload Vulnerability in the Cloud Platform of Teaching Video Application of Guangzhou Aoweiya Electronic Technology Co.

Teaching video application cloud platform is based on the background of the current educational video resources construction and user demand research, developed to adapt to the development of the times and meet the needs of the school, with the effectiveness, multi-functional, distinctive feature...

Logic flaw vulnerability in Kok Jin Practice Series teaching management system

Kok Jin Information Technology Limited is an educational software and information technology service provider. A logic flaw vulnerability exists in the Kok Jin Practice Series Teaching Management System, which can be exploited by attackers to obtain sensitive information...

DDoS attacks in Q4 2020

News overview Cybercriminals are constantly on the lookout for means and methods to make attacks more destructive. In Q4 2020, Citrix ADC application delivery controller devices became one such tool, when perpetrators abused their DTLS interface. The DTLS Datagram Transport Layer Security protoco...

ShellShockHunter - It's A Simple Tool For Test Vulnerability Shellshock

It's a simple tool for test vulnerability shellshock Autor: MrCl0wn Blog: http://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter: https://twitter.com/MrCl0wnLab Email: mrcl0wnlab@\gmail.com Shellshock software bug Shellshock, also known as Bashdoor, is a family of security bugs in...

GitLab: Change project visibility to a restricted option

Summary When a GitLab administrator on gitlab.com or a private instance has restricted a project visibility option, the project visibility can still be changed to that option. This can be done using the API route. The same applies to groups. They can also be set to for example internal on the...

Exploit for CVE-2020-14644

It is an offensive tool for WebLogic. The repository contains a basic proof-of-concept PoC and exploit script for WebLogic, with the goal of creating a unified detection and exploitation tool. The script, named weblogicpoc.py, uses the T3 protocol to connect to a WebLogic server and exploit...

Exploit for Improperly Implemented Security Check for Standard in Thekelleys Dnsmasq

dnspooq DNSpooq PoC - dnsmasq cache poisoning CVE-2020-25686,...

New Educational Video Series for CISOs with Small Security Teams

Cybersecurity is hard. For a CISO that faces the cyber threat landscape with a small security team, the challenge is compounded. Compared to CISOs at large enterprises, CISOs small to medium-sized enterprises SMEs have smaller teams with less expertise, smaller budgets for technology and outside...

Tencent Penguin Tutoring PC version suffers from DLL hijacking vulnerability

Tencent Penguin Tutoring for PC is an educational software, is a tutoring application launched by Tencent for primary and secondary school students to learn. Tencent Penguin Tutoring PC version of the existence of DLL hijacking vulnerability, attackers can use this vulnerability to obtain control...

Tencent Penguin Tutoring PC version suffers from DLL hijacking vulnerability (CNVD-2021-05483)

Tencent Penguin Tutoring for PC is an educational software, is a tutoring application launched by Tencent for primary and secondary school students to learn. Tencent Penguin Tutoring PC version of the existence of DLL hijacking vulnerability, attackers can use this vulnerability to obtain control...

Tencent Penguin Tutoring PC version suffers from DLL hijacking vulnerability (CNVD-2021-05482)

Tencent Penguin Tutoring for PC is an educational software, is a tutoring application launched by Tencent for primary and secondary school students to learn. Tencent Penguin Tutoring PC version of the existence of DLL hijacking vulnerability, attackers can use this vulnerability to obtain control...

Tencent Penguin Tutoring PC version suffers from DLL hijacking vulnerability (CNVD-2021-05485)

Tencent Penguin Tutoring for PC is an educational software, is a tutoring application launched by Tencent for primary and secondary school students to learn. Tencent Penguin Tutoring PC version of the existence of DLL hijacking vulnerability, attackers can use this vulnerability to obtain control...

vulhub_v2

It is an offensive tool for web application security training. The repository contains a collection of vulnerable Docker environments for web application security training. The tool is designed to be easy to use, requiring only two simple commands to set up a vulnerable environment. The tool is n...