CVE-2018-10732

CVE-2018-10732 Publicación de Exploit-DB: ¡Sin divulgación! Parche y créditos del proveedor Dataiku: https://doc.dataiku.com/dss/latest/releasenotes/4.2.htmlsecurity Autor Alex Hernandez alias @alt3kx...

CVE-2020-15778-SCP-Command-Injection-Check

CVE-2020-15778 – OpenSSH SCP Command Injection Vulnerability Detection Script About CVE-2020-15778 is a command injection vulnerability discovered in the scp utility provided by OpenSSH versions ≤ 8.3p1. The issue allows an attacker to execute arbitrary commands on the client system if a crafted...

Reel

Reel Phishing simulation and security awareness framework with configurable workflows, campaign management, and optional credential proxy. Quickstart OPS USE 1. Clone the repository and cd into it. 2. run ./deploy.sh - this will configure the pre-preqs for you, assuming you are on ubuntu. 3. Run...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

cve-search

cve-search cve-search es una herramienta para importar CVE Common Vulnerabilities and Exposures y CPE Common Platform Enumeration en una MongoDB para facilitar la búsqueda y el procesamiento de CVEs. El objetivo principal del software es evitar realizar búsquedas directas y públicas en las bases ...

sift-kg

sift-kg Convierte cualquier colección de documentos en un grafo de conocimiento. Sin código, sin base de datos, sin infraestructura — solo una CLI y tus documentos. Ingresa PDFs, artículos, papers o registros — obtén un grafo de conocimiento navegable que muestra cómo todo se conecta, en cuestión...

research-labs

Researcher's labs This repository contains a number of intentionally vulnerable applications that you can use to explore vulnerabilities found by PortSwigger Research. Note that you can find many free online labs designed by PortSwigger Research in the Web Security Academy. Table of contents...

p3-loader

P³-Shellcode Loader - Process Parameter Poisoning Authors: Max Hirschberger & Ogulcan Ugur Contents 1. Introduction 2. Typical Process Injection and Involved System APIs 3. Technical Foundation of Required Windows Internals 3.1 Process Creation API and Startup Parameters 3.2 The Process Environme...

flawfinder

Acerca de Esto es "flawfinder" por David A. Wheeler. Flawfinder es un programa simple que escanea código fuente en C/C++ e informa sobre posibles fallos de seguridad. Puede ser una herramienta útil para examinar software en busca de vulnerabilidades, y también puede servir como una introducción...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

EntraFalcon

EntraFalcon EntraFalcon es una herramienta de evaluación basada en PowerShell para pentesters, analistas de seguridad y administradores de sistemas, diseñada para evaluar la postura de seguridad de un entorno de Microsoft Entra ID. Pensada para ser fácil de usar, EntraFalcon funciona con PowerShe...

hackrf

HackRF This repository contains hardware designs and software for HackRF, a low cost, open source Software Defined Radio platform. photo by fd0 from https://github.com/fd0/hackrf-one-pictures principal author: Michael Ossmann [email protected] Information on HackRF and purchasing HackRF:...

Afuzz

Afuzz - Una herramienta automatizada de fuzzing de rutas web Afuzz es una herramienta automatizada de fuzzing de rutas web para proyectos de Bug Bounty. Afuzz está siendo desarrollado activamente por @rapiddns Características Afuzz detecta automáticamente el lenguaje de desarrollo utilizado por e...

brash

Brash Chromium Browser DoS Attack via document.title Exploitation Brash is a critical vulnerability in Blink , the rendering engine that powers Google's Chromium-based browsers. It allows any Chromium browser to collapse in 15-60 seconds by exploiting an architectural flaw in how certain DOM...

CVE-2026-11115-Database-Connection-String-Injection-via-Env-Variable

CVE-2026-11115 – Database Connection String Injection via Env Variable Program Code Python root@kitploit: dbconnector.py - Constructs DB connection string from environment import os, psycopg2 def connect: Reads DBURL; attacker can override via environment injection if they control an env var dbur...

Vulnerable-Web-Application

Vulnerable Web Application What is Vulnerable-Web-Application Vulnerable-Web-Application is a website that is prepared for people who are interested in web penetration and who want to have information about this subject or to be working. In fact, the website is quite simple to install and use...

octoscan

:octocat: octoscan Octoscan is a static vulnerability scanner for GitHub action workflows. Table of Contents Table of Contents Installation Usage download remote workflows analyze GitHub action Rules dangerous-checkout dangerous-action dangerous-write expression-injection runner-label repo-jackin...

Shellcode-Injection-Techniques

Shellcode Injection Techniques A collection of C shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this project up as I learn, discover or develop more techniques. Note: The project is not intended to be used as-is. If you are going to use...

jok3r

.. raw:: html .. image:: ./pictures/logo.png .. raw:: html .. image:: https://img.shields.io/badge/python-3.6-blue.svg :target: https://www.python.org/downloads/release/python-366/ :alt: Python 3.6 .. image:: https://readthedocs.org/projects/jok3r/badge/?version=latest :target:...

webpwn3r

webpwn3r This project is not maintained for years, and was written when I started learning Python, but still people likes it :D. it only supports python2.7 WebPwn3r - Web Applications Security Scanner. By Ebrahim Hegazy - @Zigoo0 Thanks: @lnxg33k, @dia2diab @Aelhemily, @okamalo Please send all yo...