591682 matches found
CVE-2021-41773-PoC
CVE-2021-41773 Proof of Concept Quick and dirty proof of concept for checking if hosts vulnerable to CVE-2021-41773 root@kitploit: python3 full.py hosts.txt Where hosts.txt contains your targets: root@kitploit: domain.com blah.com 192.168.1.1 It'll print out if the host is vulnerable or not...
apache-cve-2021-42013-rce
apache-cve-2021-42013-rce Docker-based penetration testing lab simulating CVE-2021-42013 vulnerability Path Traversal & RCE on Apache HTTP Server 2.4.49. This project is prepared to simulate and exploit the CVE-2021-42013 vulnerability found in Apache HTTP Server 2.4.49 in an isolated environment...
UnRaid <=6.80 - Remote Code Execution
UnRaid =6.80 allows remote unauthenticated attackers to execute arbitrary code. id: CVE-2020-5847 info: name: UnRaid =6.80 - Remote Code Execution author: madrobot severity: critical description: UnRaid =6.80 allows remote unauthenticated attackers to execute arbitrary code. impact: |...
ForgeRock OpenAM <7.0 - Remote Code Execution
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/ request to the server. The vulnerabilit...
Nagios XI 5.7.5 - Cross-Site Scripting
Nagios XI 5.7.5 contains a cross-site scripting vulnerability in the file /usr/local/nagiosxi/html/admin/sshterm.php, due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal session cookies, or it can be chained with th...
D-Link NAS - Command Injection via Name Parameter
A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument name leads to os command...
yolo-cage
yolo-cage: autonomous coding agents that do no harm You're a responsible engineer. You'd never just let an AI run roughshod through your most sensitive systems and codebases. That's why you'd never just shut off the safeguards for a tool like Claude Code. It asks permission for every dangerous...
unleashed-firmware
Flipper Zero Unleashed Firmware This firmware is a fork of the original OFW version of flipperdevices/flipperzero-firmware and represents the most stable custom build, incorporating new features and improvements to the original components while remaining fully compatible with the API and...
wireguard-tools
wireguard-tools — tools for configuring WireGuard This supplies the main userspace tooling for using and configuring WireGuard tunnels, including the wg8 and wg-quick8 utilities. This project supports Linux, OpenBSD, FreeBSD, macOS, Windows, and Android. More information may be found...
fragattacks
FragAttacks: 断片化および集約攻撃 1. はじめに このリポジトリには FragAttacks ツールが含まれています。これは、Wi-Fi クライアントとアクセスポイントを、fr agmentation（断片化）および ag gregation（集約）attacks（攻撃）に対してテストできます。これらの脆弱性は、 すべての 保護された Wi-Fi ネットワークに影響します。これらの脆弱性の詳細については、fragattacks.com を参照してください。 以下の追加リソースが利用可能です： USENIX Security のプレゼンテーション...
krackattacks-scripts
이 프로젝트에는 WPA2에 대한 KRACK 공격의 영향을 받는 클라이언트 또는 액세스 포인트AP를 테스트하는 스크립트가 포함되어 있습니다. 이 공격에 대한 자세한 내용은 저희 웹사이트와 연구 논문을 참조하세요. 이 스크립트는 공격 스크립트가 아니라는 점을 기억하세요! 액세스 포인트나 클라이언트가 KRACK 공격의 영향을 받는지 테스트하려면 적절한 네트워크 자격 증명이 필요합니다. 2024년 12월 : 7번째 테스트 ./krack-test-client.py --gtkinit의 버그가 수정되었습니다. 이 버그 수정 이전에는 이...
krackattacks-scripts
This project contains scripts to test if clients or access points APs are affected by the KRACK attack against WPA2. For details behind this attack see our website and the research paper. Remember that our scripts are not attack scripts! You will need the appropriate network credentials in order ...
chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts Chainsaw provides a powerful ‘first-response’ capability to quickly identify threats within Windows forensic artefacts such as Event Logs and the MFT file. Chainsaw offers a generic and fast method of searching through event logs for...
nmap
nmap This library aims at providing idiomatic nmap bindings for go developers, in order to make it easier to write security audit tools using golang. What is nmap Nmap Network Mapper is a free and open-source network scanner created by Gordon Lyon. Nmap is used to discover hosts and services on a...
OESA-2026-3532 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: uaccess: fix integer overflow on accessok Three architectures check the end of a user access against the address limit without taking a possible overflow into...
CVE-2026-64638
CVE-2026-64638 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...
snort3
Snort++ Snort 3 ist die nächste Generation des Snort-IPS Intrusion Prevention System. Diese Datei zeigt Ihnen, was Snort++ zu bieten hat, und führt Sie durch die Schritte vom Download bis zur Demo. Wenn Sie mit Snort nicht vertraut sind, sollten Sie sich zunächst die Snort-Dokumentation ansehen...
liboqs
liboqs liboqs é uma biblioteca C de código aberto para algoritmos criptográficos resistentes a computação quântica. liboqs Visão geral Status Algoritmos suportados Mecanismos de encapsulamento de chave Esquemas de assinatura Esquemas de assinatura com estado Limitações e segurança Limitações de...
