quick-lookup-ptrun

Plugin de recherche rapide pour PowerToys Run Ce plugin pour PowerToys Run vous permet de rechercher rapidement une adresse IP, un nom de domaine, un hash ou tout autre point de données dans une liste d'outils de cybersécurité. Il est parfait pour les analystes en sécurité, les testeurs...

hashdb-ida

إضافة HashDB لـ IDA Pro إضافة للبحث عن تجزئات السلاسل النصية للبرامج الضارة لـ IDA Pro. تتصل هذه الإضافة بخدمة بحث التجزئات HashDB التابعة لـ OALABS خدمة بحث HashDB. إضافة خوارزميات تجزئة جديدة قاعدة بيانات خوارزميات التجزئة مفتوحة المصدر، ويمكن إضافة خوارزميات جديدة عبر GitHub هنا. طلبات السحب...

Decodify

Decodify Il peut détecter et décoder des chaînes encodées, récursivement. Prenons cette chaîne : s0md3v et encodons-la en Base 64 root@kitploit: czBtZDN2 Maintenant, encodons-la en hexadécimal root@kitploit: 637a42745a444e32 Et maintenant encore en Base 64 root@kitploit: NjM3YTQyNzQ1YTQ0NGUzMg==...

munin

root@kitploit: | | | | | \ | | | | | | \ \ | | | | \ \ /. | | | | | | | | | | | | | | | | | | | | /| || || || ||| || || || || || // / /'" " Vérificateur de hachages en ligne pour Virustotal et autres services Florian Roth Qu'est-ce que Munin ? Munin est un utilitaire de vérification de hachages...

recomposer

Recomposer.py Ever have that not so safe feeling uploading your malware binaries to VirusTotal or other AV sites because you can look up binaries by hashes? Example: https://github.com/mubix/vt-notify Feel somewhat safer with Recomposer! Recomposer will take your binary and randomly do the...

fileintel

fileintel Cet outil permet de collecter diverses sources de renseignements pour un fichier donné. Fileintel est conçu de manière modulaire afin que de nouvelles sources de renseignements puissent être facilement ajoutées. Les fichiers sont identifiés par leur empreinte MD5, SHA1, SHA256. La sorti...

YARAify

YARAify YARAify est un moteur ouvert de scan et de recherche YARA. Ce dépôt fournit quelques scripts d'exemple en python3 pour interagir avec l'API YARAify. Obtenir une Auth-Key Pour interroger l'API YARA, vous devez obtenir une Auth-Key. Si vous n'avez pas encore d'Auth-Key, vous pouvez en obten...

hashdb

HashDB HashDB è una libreria di algoritmi di hashing usati nei malware, alimentata dalla community. Come Usare HashDB HashDB può essere usato come libreria di hashing autonoma, ma alimenta anche il servizio di lookup HashDB gestito da OALabs. Questo servizio consente agli analisti di invertire gl...

ioccheck

ioccheck Ein Werkzeug zur Vereinfachung der Recherche von Datei-Hashes, IP-Adressen und anderen Indikatoren für Kompromittierungen IOCs. Funktionen Hashes über mehrere Threat Intelligence-Dienste hinweg nachschlagen, mit einem einzigen Befehl oder wenigen Zeilen Python. Unterstützt derzeit die...

CVE-2026-11481

CVE-2026-11481 affects yoanbernabeu grepai up to 0.35.0. The vulnerability is in Postgres Embedding Cache: function PostgresStore.LookupByContentHash in file indexer/chunker.go. Manipulating the content_hash argument can lead to the use of a weak hash. Local access is required, with high attack c...

CVE-2026-11481 yoanbernabeu grepai Postgres Embedding Cache chunker.go PostgresStore.LookupByContentHash weak hash

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the component Postgres Embedding Cache. Executing a manipulation of the argument contenthash can lead to use of weak hash. T...

CVE-2026-43986

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose a public /image/ route that resolves attacker-controlled entries from imagehashlookup and replays them through the same server-side image fetch logic used by authenticated image proxying...

CVE-2026-43986 Tautulli vulnerable to unauthenticated SSRF in /image/<hash> via attacker-seeded image hash replay

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose a public /image/ route that resolves attacker-controlled entries from imagehashlookup and replays them through the same server-side image fetch logic used by authenticated image proxying...

CVE-2026-43986 Tautulli vulnerable to unauthenticated SSRF in /image/<hash> via attacker-seeded image hash replay

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose a public /image/ route that resolves attacker-controlled entries from imagehashlookup and replays them through the same server-side image fetch logic used by authenticated image proxying...

EUVD-2026-34286

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose a public /image/ route that resolves attacker-controlled entries from imagehashlookup and replays them through the same server-side image fetch logic used by authenticated image proxying...

CVE-2026-43986 Tautulli vulnerable to unauthenticated SSRF in /image/<hash> via attacker-seeded image hash replay

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose a public /image/ route that resolves attacker-controlled entries from imagehashlookup and replays them through the same server-side image fetch logic used by authenticated image proxying...

CVE-2026-43986

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose a public /image/ route that resolves attacker-controlled entries from imagehashlookup and replays them through the same server-side image fetch logic used by authenticated image proxying...

Astra Linux – Vulnerability in isc-dhcp

In ISC DHCP 4.4.0 - 4.4.3, and ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addOption, it increments the refcount field of the option. However, there is no corresponding call to optiondereference to decrement the refcount field. The function addOptio...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2022-2792)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the libbfd library’s bfd_hash_lookup function in the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the libbfd library’s bfdhashlookup function in the GNU Binutils development environment is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...