CVE-2026-67279

RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated...

misp-dashboard

misp-dashboard Un tableau de bord affichant des données en direct et des statistiques issues des flux ZMQ d'une ou plusieurs instances MISP. Le tableau de bord peut être utilisé comme un outil de connaissance de la situation en temps réel pour recueillir des informations sur les menaces. Le...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

shocker

Shocker Un outil pour trouver et exploiter des serveurs vulnérables à Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Publié en open source par NCC Group Plc - https://www.nccgroup.trust/ Développé par : Tom Watson, tom dot watson at nccgroup dot trust...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

LTESniffer

LTESniffer - 오픈소스 LTE 하향링크/상향링크 도청기 LTESniffer 는 오픈소스 LTE 하향링크/상향링크 도청기입니다. 먼저 물리 하향링크 제어 채널PDCCH을 디코딩하여 모든 활성 사용자의 하향링크 제어 정보DCI와 무선 네트워크 임시 식별자RNTI를 획득합니다. 디코딩된 DCI와 RNTI를 사용하여 LTESniffer는 물리 하향링크 공유 채널PDSCH과 물리 상향링크 공유 채널PUSCH을 추가로 디코딩하여 상향링크 및 하향링크 데이터 트래픽을 검색합니다. LTESniffer는 보안 애플리케이션과 연구를 위...

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5. Sansec, which discovered the fl...

SharpDPAPI

SharpDPAPI SharpDPAPI est un portage en C de certaines fonctionnalités DPAPI du projet Mimikatz de @gentilkiwi. Je n'ai pas inventé cette logique, il s'agit simplement d'un portage de Mimikatz afin de mieux comprendre le processus et de l'opérationnaliser pour l'adapter à notre flux de travail. L...

geacon

Geacon Using Go to implement CobaltStrike's Beacon This project is for learning protocol analysis and reverse engineering only, if someone's rights have been violated, please contact me to remove the project, and the last DO NOT USE IT ILLEGALLY How to play 1. Setup the teamserver and start a htt...

fuzzdb

FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses...

CVE-2019-6447-Android-Vulnerability-in-ES-File-Explorer

CVE-2019-6447-Android-Vulnerability-in-ES-File-Explorer Этот репозиторий создан для изучения CVE-2019-6447...

assless-chaps

assless-chaps Crack MSCHAPv2/NTLMv1 challenge/responses quickly using a database of NT hashes Introduction Assless CHAPs is an efficient way to recover the NT hash used in a MSCHAPv2/NTLMv1 exchange if you have the challenge and response e.g. from a WiFi EAP WPE attack. It requires a database of ...

CVE-2019-6447

️⃣ CVE-2019-6447 🖥️ -h3x0v3rl0rd- ES File Explorer 4.1.9.7.4 - Lecture de fichier arbitraire...

ligolo-ng

Ligolo-ng : Tunneling like a VPN An advanced, yet simple, tunneling tool that uses TUN interfaces. 📑 Ligolo-ng Documentation Setup/Quickstart !TIP Ligolo-ng 0.8 added a lot of new features, including: 🌐 API and a beautiful Web Interface thanks to L'ami du Raisin, allowing multiplayer! ⚙️ Simple...

xurlfind3r

xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...

SniffAir

SniffAir SniffAir est un framework open-source de sécurité sans fil qui offre la possibilité d'analyser facilement les données sans fil collectées passivement ainsi que de lancer des attaques sans fil sophistiquées. SniffAir gère la complexité liée à la gestion de fichiers pcap volumineux ou...

CVE-2025-49113

Python-скрипт для CVE-2025-49113 Usage: python exploit.py https://ubuntu.com/security/CVE-2025-49113 Описание: Roundcube Webmail до версий 1.5.10 и 1.6.x до 1.6.11 позволяет аутентифицированным пользователям выполнять удаленный код, поскольку параметр from в URL не проверяется в...

CVE-2025-63296

CVE-2025-63296 Résumé KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contient une vulnérabilité d'exécution de code dans sa logique de démarrage/mise à jour : lors du démarrage, /usr/sbin/anykaservice.sh analyse les cartes TF/SD montées et, si /mnt/update.nor.sh est présent,...

pdfjs-vuln-demo

PDF.js 脆弱性デモプロジェクト このプロジェクトは、CVE-2024-4367 で報告された PDF.js pdfjs-dist ライブラリの脆弱性を悪用する概念実証 PoC として提供されています。 実行方法 このリポジトリをフォークしてクローン npm install npm run dev テスト手順 まず http://localhost:4321/ にアクセス テストしたいフロントエンドフレームワークのコンポーネント react、vue、svelte を、対応するカードをクリックして選択 サンプル PDF 脆弱性を悪用していないもの が読み込まれることを確認 すべてのサン...

linux-smart-enumeration

First, a couple of useful oneliners ; root@kitploit: wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh root@kitploit: curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo...