CVE-2026-22226

CVE-2026-22226 Preuve de concept pour CVE-2026-22226 Injection de commandes OS côté LAN authentifié dans le client VPN des routeurs Wi-Fi TP-Link Archer Résumé de la vulnérabilité Le contrôleur du client VPN stocke la description d'entrée contrôlée par l'utilisateur des dans la configuration UCI...

flashlight

Automated Information Gathering Tool for Penetration Testers Videos : https://www.youtube.com/watch?v=EUMKffaAxzs&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=4 https://www.youtube.com/watch?v=qCgW-SfYl1c&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=5...

fscan

Fscan 中文 Comprehensive intranet scanning tool for automated vulnerability assessment. Version : 2.2.0 Features Scanning Host Discovery - ICMP/Ping alive detection, B/C segment statistics for large networks Port Scanning - TCP connect scan, 133 built-in ports, port groups web/db/service/all...

python-hacklib

hacklib مجموعة أدوات لعشاق الاختراق باستخدام بايثون. hacklib هي وحدة بايثون لعشاق الاختراق المهتمين بأمان الشبكات. لم تعد قيد التطوير النشط. التثبيت للحصول على hacklib، قم بتشغيل الأمر التالي في سطر الأوامر: pip install hacklib hacklib يحتوي أيضًا على واجهة مستخدم. لاستخدامها، يمكنك القيام بأحد...

CVE-Wazuh

Wazuh Manager — Injection NDJSON dans inventorysync via DataValue.index contrôlé par l'agent - Brouillon Un agent enrôlé peut introduire clandestinement des opérations bulk OpenSearch arbitraires via DataValue.index. GHSA-ff9g-85jq-r3g3 ⚡ Utilisation simple Utilisez ce projet uniquement dans des...

bypass-url-parser

Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most of the python requests do url/path/parameter encoding/decoding, and I hate this. If I submit raw chars, I want raw chars to be sent...

bypass-url-parser

Bypass Url Parser Инструмент, который тестирует MANY обходов URL для доступа к 40X protected page. Если вам интересно, почему этот код — nothing but a dirty curl wrapper, вот почему: Большинство Python-запросов выполняют кодирование/декодирование URL/путей/параметров, и я это ненавижу. Если я...

talisman

Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation Install onto path recommended approach Installation as a global hook template Configuring a project Using with hook frameworks Pre-commit Husky Directly invoking talisman Upgradi...

ASUS-SmartHome-Exploit

ASUS-SmartHome-Exploit Identifiants CVE CVE-2019-11061 : Contrôle d'accès défaillant dans HG100 Produits concernés : ASUS SmartHome Gateway HG100 version du firmware Produits concernés : application Android ASUS SmartHome version 3.0.45190701 Description Si l'attaquant se trouve sur le même résea...

standalone_tdo

TDO Extracteur Autonome Un outil en ligne de commande puissant et autonome pour extraire du renseignement sur les cybermenaces CTI à partir de documents à l'aide de grands modèles de langage avec des capacités de sortie structurée avancées. 🚀 Fonctionnalités Prise en charge multi-format : fichier...

CVE-2025-53770

Divine Absolute - Outil d'exploitation CVE-2025-53770 Aperçu Divine Absolute est un outil d'exploitation Python sophistiqué et piloté par assistant, ciblant CVE-2025-53770 , une vulnérabilité critique CVSS 9,8 d'exécution de code à distance RCE non authentifiée dans Microsoft SharePoint Server su...

CVE-2026-19571 Race condition in ITE IT8xxx2 SHI host-command backend lets a second SPI request write an unvalidated length into the in-flight request buffer

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/echostcmd/backends/echostcmdbackendshiite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-inmsg and only afterwards checked the protocol version and the derived packet length. Th...

CVE-2026-19571

A race condition exists in the ITE IT8xxx2 SHI host-command backend (specifically in ec_host_cmd_backend_shi_ite.c) within the Zephyr RTOS. The vulnerability occurs because the driver copies the 8-byte host-command request header from the SPI Rx FIFO into the shared receive buffer (data->in_ms...

CVE-2026-19571 Race condition in ITE IT8xxx2 SHI host-command backend lets a second SPI request write an unvalidated length into the in-flight request buffer

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/echostcmd/backends/echostcmdbackendshiite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-inmsg and only afterwards checked the protocol version and the derived packet length. Th...

EUVD-2026-95527

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/echostcmd/backends/echostcmdbackendshiite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-inmsg and only afterwards checked the protocol version and the derived packet length. Th...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. virtualenv -p python3...

cve-2019-2618

cve-2019-2618 Weblogic Upload Vuln требуется имя пользователя и пароль - CVE-2019-2618 Использование python python CVE-2019-2618.py url username password Расшифровка пароля weblogic root@f0cb7e674d7e:/Oracle cat...

StegoForge

🛡️ StegoForge المزيج النهائي بين إخفاء المعلومات والطب الشرعي الرقمي والاتصالات السرية. ⚡ الإطلاق السريع ملفات تنفيذية مستقلة StegoForge هو إطار عمل بايثون معقد، ولكن لا ينبغي عليك التعامل مع بيئات معطلة أثناء أداء الطب الشرعي النشط. لجمنا ملفات تنفيذية أصلية خالية من التبعيات تقوم تلقائيًا بحل...

XSS-Bypass-Filters

XSS-Bypass-Filters Redirection document.location= document'location'= window.location= this"window""location"= document.location.href= location.href= location= window.location.assign window'location''href'= document.location.replace window.open"link", "blank"; Lien //google.com/?=a...