sentinel-mcp

SentinelMCP — AI-संचालित साइबर रक्षा प्रणाली Google Cloud Hackathon प्रस्तुति — Google Cloud Agent Builder Vertex AI Agent द्वारा संचालित स्वायत्त खतरे का पता लगाना और उपचार, जो Gemini 2.0 Flash, Model Context Protocol MCP और Dynatrace observability द्वारा संचालित है। समस्या सुरक्षा टीमों को...

sunsetscan

SunsetScan Audit de sécurité réseau pour les humains — propulsé par nmap, conçu pour tout le monde. Site web : sunsetscan.com SunsetScan est un outil d'audit de sécurité réseau local pour les propriétaires de réseaux domestiques et le personnel informatique qui veulent la profondeur de nmap sans...

hate_crack v2.36.1

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

cve-2023-51385

Vérification de CVE-2023-51385 Tout d'abord, vous devez ajouter le contenu suivant à /.ssh/config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p L'instruction du fichier .gitmodules contient une injection de commande root@kitploit: url = ssh://echo...

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report يحتوي هذا المستودع على تقرير صيد ثغرات احترافي يوضح الاستغلال الناجح لثغرة SSRF أعمى وصلت إلى نقطة نهاية CGI داخلية معرضة لثغرة Shellshock CVE-2014-6271. تم تأكيد تنفيذ الأوامر عن بعد باستخدام استدعاء DNS خارج النطاق...

instarecon

InstaRecon Automated basic digital reconnaissance. Great for getting an initial footprint of your targets and discovering additional subdomains. InstaRecon will do: DNS lookups A, PTR, MX, NS DNS lookups recursively on all hosts discovered Whois on domain and IP lookups Google dorks looking for...

WordPress LearnDash LMS plugin <= 5.1.5 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Nguyen Ngoc Duc duc193 in WordPress Plugin LearnDash LMS versions = 5.1.5...

deep-pwning

Deep-pwning is a lightweight framework for experimenting with machine learning models with the goal of evaluating their robustness against a motivated adversary. Note that deep-pwning in its current state is no where close to maturity or completion. It is meant to be experimented with, expanded...

CVE-2026-85197 Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload

A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle MITM attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client implementation. This occurs when a GNOME application uploads a file using HTTP/2, and the server sends a GOAWAY frame while the file bod...

CVE-2026-85197 Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload

A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle MITM attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client implementation. This occurs when a GNOME application uploads a file using HTTP/2, and the server sends a GOAWAY frame while the file bod...

CVE-2026-85197

A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle MITM attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client implementation. This occurs when a GNOME application uploads a file using HTTP/2, and the server sends a GOAWAY frame while the file bod...

EUVD-2026-70953

A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle MITM attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client implementation. This occurs when a GNOME application uploads a file using HTTP/2, and the server sends a GOAWAY frame while the file bod...

CVE-2026-85197

libsoup contains a heap use-after-free in its HTTP/2 client implementation, specifically in the on_data_read() function. The vulnerability is triggered when a GNOME application uploads a file over HTTP/2 and a malicious server or MITM attacker sends a GOAWAY frame while the file body is still bei...

CVE-2026-85197

A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle MITM attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client implementation. This occurs when a GNOME application uploads a file using HTTP/2, and the server sends a GOAWAY frame while the file bod...

DCOMUploadExec

رفع وتنفيذ DCOM POC لتحرك جانبي عبر DCOM يستغل واجهة IMsiServer https://www.deepinstinct.com/blog/forget-psexec-dcom-upload-execute-backdoor يحتوي الحل على مشروعين DCOMUploadExec - مشروع C++ يستضيف كود هجوم التحرك الجانبي AssemblyPayload - مكتبة DLL خاصة بـ .NET تعرض MessageBox. وهي الحمولة...

tamago v1.27.1

TamaGo - bare metal Go tamago | https://github.com/usbarmory/tamago Copyright c The TamaGo Authors. All Rights Reserved. Introduction TamaGo is a framework that enables compilation and execution of unencumbered Go applications on bare metal processors AMD64, ARM, ARM64, RISCV64. The projects spaw...

resym

القطعة الأثرية ReSym يوفر هذا المستودع القطع الأثرية للورقة البحثية "ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries" CCS 2024. 🏆 الحائز على جائزة ACM SIGSAC للورقة البحثية المتميزة ملاحظة : نحن نقوم بنشاط بصيانة/تحديث القطع الأثرية الخاصة بنا. يرجى...

LsassReflectDumping

LsassReflectDumping تستخدم هذه الأداة تقنية Process Forking عبر واجهة RtlCreateProcessReflection API لاستنساخ عملية lsass.exe. وبمجرد إنشاء النسخة المستنسخة، تعتمد على استدعاءات MINIDUMPCALLBACKINFORMATION لإنشاء تفريغ ذاكرة للعملية المستنسخة. Steps الحصول على مقبض عملية Lsass.exe استنساخ عملية...

avpass

AVPASS AVPASS is a tool for leaking the detection model of Android malware detection systems i.e., antivirus software, and bypassing their detection logics by using the leaked information coupled with APK obfuscation techniques. AVPASS is not limited to detection features used by detection system...

smbtakeover

smbtakeover Une technique pour dissocier et réassocier le port 445/tcp sur Windows sans charger de pilote, charger un module dans LSASS, ni redémarrer la machine cible. Implémentée pour alléger la charge des relais NTLM basés sur SMB lors d'opérations via un C2. L'analyse technique de la techniqu...