CVE-2025-32462-CVE-2025-32463-PoC-Lab

CVE-2025-32462 & CVE-2025-32463 – Laboratorio Avanzato di PoC Questo repository fornisce un laboratorio basato su container e un PoC dettagliato per due vulnerabilità critiche di sudo: CVE-2025-32462 – bypass della logica di corrispondenza host di sudo -h CVE-2025-32463 – escape della libreria NS...

CVE-2023-41080

vulnérable: http://localhost:8081//secret.html;@example.com Redirection vers un site web arbitraire dans ce cas, https://example.com. corrigé: http://localhost:8082//secret.html;@example.com réf.: https://github.com/advisories/GHSA-q3mw-pvr8-9ggc...

CVE-2025-26056

CVE-2025-26056 Autor: Rohan Deshpande OS-Befehlsinjektion Zusammenfassung Die Befehlsinjektion im Betriebssystem ist eine Sicherheitslücke, die es einem Angreifer ermöglicht, über eine angreifbare Anwendung beliebige Befehle auf einem Host-Betriebssystem auszuführen. Dies kann zu unbefugtem...

CVE-2025-9074

Descrizione Realizzato con vibe coding, un piccolo script di exploit in Bash puro senza dipendenze da strumenti che potrebbero non essere installati. Lo script comunica con l'API Docker interna, crea e avvia un nuovo contenitore, monta l'unità C dell'host ed esegue un comando all'interno. L'outpu...

CVE-2025-9074

CVE-2025-9074 – Fuga Completa do Docker no Windows e macOS Docker Desktop 📌 Descrição O Docker Desktop expõe a API interna do Docker Engine em http://192.168.65.7:2375 para qualquer contêiner em execução — sem autenticação e sem controle de acesso. Como o próprio mecanismo pode montar o sistema d...

CVE-2025-9074-PoC-Bash

CVE-2025-9074-PoC-Bash Das originale PoC ist: https://github.com/j3r1ch0123/CVE-2025-9074. Dies ist ein neues PoC in Bash, da nicht alle Docker-Container Python installiert haben und dieses hauptsächlich von innerhalb eines Containers ausgeführt werden sollte. Schritte Führen Sie von innerhalb de...

AWS-SAM-CLI-Vulnerabilities

Уязвимости AWS SAM CLI CVE-2025-3047 и CVE-2025-3048 В этом README представлен подробный анализ двух уязвимостей безопасности, обнаруженных в AWS Serverless Application Model CLI AWS SAM CLI – CVE-2025-3047 и CVE-2025-3048 – а также проблемы и исправления на уровне кода. Обе уязвимости связаны с...

ScannerCVE-2021-3156

ScannerCVE-2021-3156 Skript zum Scannen einer Hostliste, um festzustellen, ob sie für CVE-2021-3156 anfällig sind. Falls nicht anfällig, lautet die Ausgabe wie folgt: sudoedit: a terminal is required to read the password; either use the -S option to read from standard input or configure an askpas...

sitrep

SitRep Extensible, configurable host triage. Purpose SitRep is intended to provide a lightweight, extensible host triage alternative. Checks are loaded dynamically at runtime from stand-alone files. This allows operators to quickly modify existing checks, or add new checks as required. Checks are...

spyre

Spyre ...a simple, self-contained modular host-based IOC scanner Spyre is a simple host-based IOC scanner built around the YARA pattern matching engine and other scan modules. The main goal of this project is easy operationalization of YARA rules and other indicators of compromise. Users need to...

sitrep

SitRep Erweiterbare, konfigurierbare Host-Triage. Zweck SitRep soll eine leichte, erweiterbare Alternative zur Host-Triage bieten. Prüfungen werden zur Laufzeit dynamisch aus eigenständigen Dateien geladen. Dies ermöglicht es Operatoren, bestehende Prüfungen schnell zu ändern oder bei Bedarf neue...

goscan

GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction and automation over nmap. Although it started as a small side-project I developed in order to learn @golang, GoScan can now be used to perform host discovery, port scanning, and service...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

TPMGenie

TPM Genie TPM Genie è progettato per assistere nella ricerca di vulnerabilità dei Trusted Platform Module. Funzionando come un interposer per bus seriale, TPM Genie è in grado di intercettare e modificare tutto il traffico inviato attraverso il canale I2C tra la macchina host e un chip TPM...

LiveTargetsFinder

LiveTargetsFinder Genera elenchi di host live e URL per il targeting, automatizzando l'uso di Massdns, Masscan e nmap per filtrare host non raggiungibili Dato un file di input con nomi di dominio, questo script automatizza l'uso di MassDNS per filtrare gli host non risolvibili, e poi passa i...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

RWCTF21-VirtualBox-61-escape

RWCTF21-VirtualBox-61-escape 0day VirtualBox 6.1 Escape für die RealWorld CTF 2020/2021 Demo Was? Dies ist unsere Lösung für die „Box Escape“-Challenge der RealWorld CTF aus der Qualifikationsrunde 2020/2021. Derzeit ein 0day, aber wir fügen die CVE-Nummer hinzu, sobald es eine gibt. CVE-2021-211...

cornershot

What is CornerShot In warfare, CornerShot is a weapon that allows a soldier to look past a corner and possibly take a shot, without risking exposure. Similarly, the CornerShot package allows one to look at a remote host’s network access without the need to have any special privileges on that host...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...