50234 matches found
InlineExecute-Assembly
InlineExecute-Assembly InlineExecute-Assembly è un Beacon Object File BOF proof-of-concept che consente ai professionisti della sicurezza di eseguire assembly .NET in-process, in alternativa al tradizionale modulo execute-assembly di Cobalt Strike basato su fork-and-run. InlineExecute-Assembly...
pythem
pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...
boofuzz
.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...
unicorn
unicorn Scritto da: Dave Kennedy @HackingDave Sito web: https://www.trustedsec.com Magic Unicorn è un semplice strumento per utilizzare un attacco di downgrade PowerShell e iniettare shellcode direttamente in memoria. Basato sugli attacchi PowerShell di Matthew Graeber e sulla tecnica di bypass d...
FakeImageExploiter
FakeImageExploiter v1.4 - backdoor images.jpg.ps1 root@kitploit: Codename: Metamorphosis Versione rilascio: v1.4 Stable Autore: pedro ubuntu r00t-3xp10it Distribuzioni supportate : Linux Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 Dichiarazione legale:...
wifipumpkin3
Wifipumpkin3 Potente framework per attacchi con punti di accesso rogue. Panoramica wifipumpkin3 è un potente framework per attacchi con punti di accesso rogue, scritto in Python, che consente e offre a ricercatori di sicurezza, red teamer e reverse engineer di montare una rete wireless per condur...
evilgophish
Table of Contents evilgophish A Word About Sponsorship Credits Prerequisites Disclaimer Why? Background Infrastructure Layout setup.sh Cloudflare Turnstile Setup Cloudflare Turnstile HTML Template Guide replacerid.sh Email Campaign Setup QR Code Generator SMS Campaign Setup Live Feed Setup A Word...
evilginx2
Evilginx 3.0 Evilginx è un framework per attacchi man-in-the-middle utilizzato per il phishing di credenziali di accesso insieme ai cookie di sessione, permettendo così di bypassare la protezione dell'autenticazione a due fattori. Questo strumento è il successore di Evilginx, rilasciato nel 2017,...
evilginx2
Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...
ffuf
ffuf - Fuzz Faster U Fool Un veloce web fuzzer scritto in Go. Installazione Esempio di utilizzo Scoperta dei contenuti Scoperta di vhost Fuzzing di parametri Fuzzing di dati POST Utilizzo di un mutator esterno File di configurazione Aiuto Modalità interattiva Installazione Scarica un binario...
CVE-2026-81034
Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...
donut
Aktuelle Version: v1.1 Inhaltsverzeichnis 1. Einführung 2. Funktionsweise 3. Erstellung 4. Verwendung 5. Unterprojekte 6. Entwicklung mit Donut 7. Fragen und Diskussionen 8. Haftungsausschluss 1. Einführung Donut ist ein positionsunabhängiger Code, der die In-Memory-Ausführung von VBScript-,...
CVE-2026-79240
A flaw was found in ANGLE in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to arbitrary code execution within the sandbox environment...
EUVD-2026-66610
Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...
CVE-2026-81034 Netmaker through 1.6.0 Improper Certificate Validation in SMTP Client
Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...
CVE-2026-54548
kas is a setup tool for bitbake-based projects. Prior to version 5.4 , when internal SSH key setup is triggered via SSH_PRIVATE_KEY or SSH_PRIVATE_KEY_FILE and no user-specific SSH configuration exists, the function ssh_no_host_key_check() in kas/libcmds.py creates ~/.ssh/config with a global Hos...
CVE-2026-54548 kas: Persistent SSH Host Key Checking Disablement
kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...
CVE-2026-19271 Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk
Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection. This issue affects Liderahenk: from 3.4.0 before 3.5.5...
CVE-2026-19271
CVE-2026-19271 is a Blind LDAP Injection vulnerability in the Sign-In Endpoint of TÜBİTAK BİLGEM's Liderahenk , an identity management platform. The flaw stems from improper neutralization of special elements in LDAP queries, allowing an unauthenticated, network-based attacker to extract informat...