CVE-2025-32023

CVE-2025-32023 PoC y Exploit para CVE-2025-32023 GHSA-rp2m-q4j6-gr43 / PlaidCTF 2025 "Zerodeo" Reproducción / Parche Probado contra redis:7.4.2-alpine3.21@sha256:02419de7eddf55aa5bcf49efb74e88fa8d931b4d77c07eff8a6b2144472b6952 Afecta a las versiones de Redis = 2.8. Parcheado en 8.0.3, 7.4.5,...

rdpy

RDPY 在 twisted python 中的远程桌面协议。 RDPY 是一个纯 Python 实现的微软 RDP（远程桌面协议）协议（客户端和服务端）。RDPY 构建于基于事件驱动的网络引擎 Twisted 之上。RDPY 支持标准的 RDP 安全层、基于 SSL 的 RDP 以及 NLA 认证（通过 ntlmv2 认证协议）。 RDPY 提供了以下 RDP 和 VNC 二进制工具： RDP 中间人代理，可记录会话 RDP 蜜罐 RDP 截图工具 RDP 客户端 VNC 客户端 VNC 截图工具 RSS 播放器 构建 RDPY 完全用 Python 实现，但位图解压缩算法出于性能考虑...

bitcrook

Bitcrook Centralize and expedite OSINT investigations View the roadmap Table of Contents Information About Disclaimer Changelog Preview Attributions Usage Installation CLI GUI Docker Authentication Information About Bitcrook is an open-source intelligence apparatus that aims to centralize all of...

revsh

revsh revsh is a tool for establishing reverse shells with terminal support, reverse VPNs for advanced pivoting, as well as arbitrary data tunneling. News 2018-08-09 : New release. Mosly bug / stability fixes and better documentation on the build process with OpenSSL 1.1.0. See the Installation...

mwebfp

LNHG - 大规模网络指纹识别器 mwebfp 引言 "LowNoiseHG LNHG 大规模网络指纹识别器 "（以下简称"mwebfp "）于2013年7月构思，源于在一次涉及大型外部或内部IP地址范围的渗透测试任务中，认识到Web服务器截图对渗透测试人员的实用性——它可作为快速识别关键资产、易利用服务、被遗忘/过时服务器以及目标基本网络架构知识的手段。 描述 mwebfp...

cve-2025-29927-poc

CVE-2025-29927-POC Introduction This repository contains a Proof of Concept PoC for CVE-2025-29927, a hypothetical vulnerability demonstrating a flaw in middleware handling within a web application. The PoC illustrates how a specially crafted HTTP request can bypass redirection logic to access...

CLPSTNet

CLPSTNet: A Progressive Multi-Scale Convolutional Steganography Model Integrating Curriculum Learning Fengchun Liu; Tong Zhang; Chunying Zhang This repository contains the official implementation of the paper "CLPSTNet: A Progressive Multi-Scale Convolutional Steganography Model Integrating...

shellme

shellme Because sometimes you just need shellcode and opcodes quickly. This essentially just wraps some nasm/objdump calls into a neat script. root@kitploit: bryan@devbox:/shellme$ python shellme.py usage: shellme.py -h -n FILE -o OUTPUT -i INSTRUCTION -a ARCH optional arguments: -h, --help show...

loboguara

Lobo Guará - Plataforma de Inteligencia de Amenazas Cibernéticas Lobo Guará es una plataforma dirigida a profesionales de la ciberseguridad, con diversas funciones centradas en la Inteligencia de Amenazas Cibernéticas CTI. Ofrece herramientas que facilitan la identificación de amenazas, la...

loboguara

Lobo Guará - Cyber Threat Intelligence Platform Lobo Guará is a platform aimed at cybersecurity professionals, with various features focused on Cyber Threat Intelligence CTI. It offers tools that make it easier to identify threats, monitor data leaks, analyze suspicious domains and URLs, and much...

Manati

ManaTI 项目 用于威胁直觉分析的机器学习 ManaTI 项目的目标是开发机器学习技术，以帮助直觉型威胁分析师加快发现新的安全问题。机器学习将通过寻找新的关系和推理来辅助分析。该项目将包括开发一个 Web 界面，供分析师与数据以及机器学习输出进行交互。 本项目部分由 Cisco Systems 支持。 有关该项目的更多信息，请访问 Stratosphere Lab 页面。 稳定版本 Mon Sep 3 12:24:26 CEST 2018: Version 0.12.0a Sun Aug 12 16:21:19 CEST 2018: Version 0.11.0a Mon Jan 2...

ReconAIzer

ReconAIzer ReconAIzer is a powerful Jython extension for Burp Suite that leverages OpenAI to help bug bounty hunters optimize their recon process. This extension automates various tasks, making it easier and faster for security researchers to identify and exploit vulnerabilities. Once installed,...

puncia v0.36

PantheraP.uncia Official CLI utility for Subdomain Center & Exploit Observer Puncia is the official command-line client for two A.R.P. Syndicate intelligence APIs — point it at a domain, a brand, or a vulnerability ID and get structured JSON back in seconds, no browser required: 🕸️ Subdomain Cente...

frida-snippets

& also output examples Table of Contents Native Load C/C++ module One time watchpoint Socket activity Intercept open Execute shell command List modules Log SQLite query Log method arguments Intercept entire module Dump memory segments Memory scan Stalker Cpp Demangler Early hook Android Binder...

wave-share

wave-share A proof-of-concept for WebRTC signaling using sound. Works with all devices that have microphone + speakers. Runs in the browser. Nearby devices negotiate the WebRTC connection by exchanging the necessary Session Description Protocol SDP data via a sequence of audio tones. Upon...

PT-2026-84384

Improper Handling of Highly Compressed Data CWE-409 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user holding Streams management privileges could supply specially crafted content that expands to a far larger volume of data during processing,...

PT-2026-84292

A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/connections of the component JWT Refresh Token Handler. Performing a manipulation of the argument Bearer results in improper privilege management. The attack is possible to be...

PT-2026-84392

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in Kibana can lead to the unauthorized deletion of privileged resources via Path Traversal CAPEC-126. A low-privileged user holding tag creation privileges could cause a subsequent administrative action in the tag...

openSUSE 16 Security Update : go1.25-openssl (openSUSE-SU-2026:21696-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21696-1 advisory. Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: -...

Alibaba Cloud Linux 3 : 0263: python-idna (ALINUX3-SA-2026:0263)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0263 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-45409: Internationalized Domain Names in...