CVE-2026-80223 Cross-tenant subscription disclosure in AshGraphql authorizes notifications in memory without a tenant-scoped read

Incorrect Authorization vulnerability in ash-project ashgraphql allows an authenticated subscriber in one tenant to receive another tenant's records over GraphQL subscriptions. The subscription resolver in AshGraphql.Graphql.Resolver authorizes each notification payload in memory: its fast path...

wslink-vm-analyzer

WslinkVMAnalyzer WslinkVMAnalyzer es una herramienta desarrollada principalmente para facilitar el análisis de Wslink, que es un cargador único que actúa como servidor y ejecuta en memoria los módulos recibidos. Esta herramienta utiliza Miasm, un framework de código abierto que nos proporciona un...

cs-token-vault

Token Vault BOF for Cobalt Strike This Beacon Object File BOF creates in-memory storage for stolen/duplicated Windows access tokens allow you to: Hot swap/re-use already stolen tokens without re-duplicating. Store tokens for later use in case of a person log out. Installation 1. Download the late...

CVE-2026-80227 SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql

Incorrect Comparison vulnerability in ash-project ashsql allows a user to pad a string field with tab, newline, carriage-return, or form-feed characters and pass a trimmed uniqueness or equality check in the database that the same expression would fail in memory or the reverse. stringtrim/1...

ShellcodeFluctuation

Shellcode Fluctuation PoC Una implementación de prueba de concepto para otra técnica de evasión en memoria que cifra y descifra cíclicamente el contenido del shellcode para luego hacerlo fluctuar entre la protección de memoria RW o NoAccess y RX. Cuando nuestro shellcode reside en páginas de...

MouseServer-1.7.8.5-RCE

WiFi Mouse Server 1.7.8.5 - RCE Un exploit Proof-of-Concept PoC ottimizzato in Python 3 per WiFi Mouse Server v1.7.8.5. Questo script sfrutta una vulnerabilità intrinseca del protocollo per ottenere l'esecuzione remota di codice RCE tramite iniezione automatizzata di tasti. Questa versione è stat...

CVE-2024-23692

CVE-2024-23692 - Rejetto HFS Remote Code Execution RCE A tactical documentation and exploit guide for CVE-2024-23692 , an unauthenticated critical Remote Code Execution RCE vulnerability affecting Rejetto HTTP File Server HFS versions prior to 2.3m. This guide leverages an In-Memory Reverse Shell...

cve-2025-55182

CVE-2025-55182: Exploit-Artefakte Ein Export einer kleinen Teilmenge der VulnCheck Initial Access Intelligence-Artefakte für die CVE-2025-55182 React2Shell-Schwachstelle. Einige Beobachtungen des Teams zu diesen Artefakten können im Blogbeitrag nachgelesen werden. Index ./inmem-webshell - Eine...

sk-cve-2026-26030-lab

CVE-2026-26030 — RCE dell'eval del filtro di Semantic Kernel lab Un laboratorio autonomo che riproduce CVE-2026-26030 : esecuzione remota di codice iniettabile tramite prompt attraverso il filtro di ricerca dello store vettoriale in memoria di Microsoft Semantic Kernel Python, Solo per lab etico...

MoreImpacketExamples

MoreImpacketExamples Dieses Repository enthält ein paar kurze Python-Skripte, die mit der Bibliothek Impacket erstellt wurden. Das Hauptziel dieses Projekts ist es, mir selbst und anderen zu helfen, die den Übergang von der Verwendung der mitgelieferten Impacket-Beispiele zur...

FilelessPELoader

FilelessPELoader Carica un PE remoto crittografato AES in memoria, lo decritta e lo esegue Utilizzo : Riferimenti : https://github.com/aplyc1a/PEMemoryLoader?fbclid=IwAR2-VAQo8pJU-tdbSENjhDBdDGi5tyzrnW1S3D9BPAYR6C6-RK4hsEDjDGk Requisiti 1. hashlib 2. pycryptodome 3. pycryptodomex...

CVE-2026-55248 plone.app.portlets: Denial of service via RSS feed portlet

plone.app.portlets provides portlets and a Plone-specific user interface for plone.portlets. Prior to 5.0.8, 6.0.4, and 7.0.2, a member who can add an RSS portlet can set its feed URL to a very large response, causing src/plone/app/portlets/portlets/rss.py to download and retain excessive data in...

CVE-2026-55248

plone.app.portlets (Plone CMS) is vulnerable to three issues in its RSS feed portlet, all fixed in versions 5.0.8, 6.0.4, and 7.0.2 . A low-privileged member can set the RSS feed URL to a very large response, causing excessive in-memory data retention and denial of service via the FEED_DATA cache...

ELFLoader

ELFLoader Este é um carregador/executor de objetos ELF em memória. O objetivo é criar um único carregador de ELF que possa ser usado para executar capacidades subsequentes em todos os sistemas operacionais x8664 e x86 nix. Como funciona A maneira como este carregador funciona é que ele contém tod...

pybof

PyBOF Execute Beacon Object files por meio do python carregamento e execução em memória de BOFs O PyBOF permite que o Python3 carregue Beacon Object Files via bytes e execute uma função BOF alvo em um interpretador Python Uso Básico Executar um BOF simples sem argumentos obrigatórios root@kitploi...

EDRSilencer

EDRSilencer Ispirato allo strumento closed source FireBlock FireBlock di MdSec NightHawk, ho deciso di creare la mia versione e questo strumento è stato creato con l'obiettivo di bloccare il traffico in uscita dei processi EDR in esecuzione tramite le API Windows Filtering Platform WFP. Questo...

No-Consolation

No-Consolation Questo è un Beacon Object File BOF che esegue PE non gestiti inline e ne recupera l'output senza allocare una console ovvero senza avviare conhost.exe. Caratteristiche Supporta 64 e 32 bit Supporta EXE e DLL Non crea nuovi processi Non crea nuovi thread Collega i moduli al PEB Salv...

pentestly

Pentestly Pentestly è una combinazione di strumenti Python in espansione per l'uso in test di penetrazione. L'obiettivo è utilizzare un'interfaccia utente familiare mentre si rendono facili i contributi al framework con la potenza di Python. Blog post: Pentestly Framework: quando il pentesting...

pupy

Pupy Einfache Installation root@kitploit: pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh Wenn Sie detailliertere Informationen wünschen,siehe Wiki Entwicklungsinstallation root@kitploit: git clone https://github.com/n1nj4sec/pupy cd pupy git...

frida-fuzzer

Frida API Fuzzer v1.4 Copyright C 2020 Andrea Fioraldi [email protected] Released under the Apache License v2.0 This experimental fuzzer is meant to be used for API in-memory fuzzing. The design is highly inspired and based on AFL/AFL++. ATM the mutator is quite simple, just the AFL's havoc...