hardcodes

hardcodes extract strings from source code hardcodes is a utility for searching strings hardcoded by developers in programs. It uses a modular tokenizer that can handle comments, any number of backslashes & nearly any syntax you throw at it. Yes, it is designed to process any syntax and following...

ROS-20260923-73-0056

The vulnerability of the floattoint function in the drivers/hid/amd-sfh-hid/sfh11/amdsfhdesc.c file of the Linux kernel subsystem for user interface devices’ driver lies in the handling of buffer overflows. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Redcloud

Weather report. Cloudy with a chance of shells! Early release. Follow me on Twitter to stay updated on Redcloud's development. 💁☁️🐚🌱 Quick Start - Architecture - Use-cases - Screenshots Introduction Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team...

CVE-2026-92929

The OpenEye Apex Network Video Recorder (NVR) firmware, specifically version 3.2.9.376 , is vulnerable to an authentication bypass. The software incorrectly trusts the X-Forwarded-For header provided by clients to determine the request source address. This design flaw, present since at least firm...

CVE-2026-92929

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the...

CVE-2025-57520-Stored-XSS-in-Decap-CMS-3.8.3-

CVE-2025-57520 – Stored XSS in Decap CMS Steps 1. Login as Contributor/Editor low privilege...

gdbgui

A browser-based frontend to gdb gnu debugger Documentation : https://gdbgui.com Source Code : https://github.com/cs01/gdbgui/...

LeakManager

LeakManager Install root@kitploit: sudo apt-get install mongodb-org screen pip3 install -r requeriments.txt Usage root@kitploit: screen -S leakManager hug -f index.py -p 1337 OR gunicorn index:hugwsgi -b 0.0.0.0:1337 OR uwsgi --http 0.0.0.0:1337 --wsgi-file index.py --callable hugwsgi ctrl + a + ...

CVE-2023-27703

CVE-2023-27703 CVE-2023-27703 An Android version of pikpak version V1.29.2 element debugging interface leakage vulnerability fix at pikpak 1.30.1 Suggested description The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface. Additional Informati...

CVE-2020-1313

CVE-2020-1313 Abstract Windows Update Orchestrator Service is a DCOM service used by other components to install windows updates that are already downloaded. USO was vulnerable to Elevation of Privileges any user to local system due to an improper authorization of the callers. The vulnerability...

Wireshark

基本信息 Wireshark 是一款适用于 Linux、macOS、BSD 以及其他 Unix 和类 Unix 操作系统和 Windows 的网络流量分析器（或称“嗅探器”）。它使用 Qt（一个图形用户界面库），并以 libpcap 和 npcap 作为数据包捕获和过滤库。 Wireshark 发行版还附带 TShark，它是一款面向行的嗅探器（类似于 Sun 的 snoop 或 tcpdump），使用与 Wireshark 相同的解析、捕获文件读写和报文过滤代码；同时还附带...

BruteShark

About What it can do Download Examples Usage BruteSharkDesktop BruteSharkCli Modules Architecture Contributing About BruteShark is a Network Forensic Analysis Tool NFAT that performs deep processing and inspection of network traffic mainly PCAP files, but it also capable of directly live capturin...

dr_checker

DR.CHECKER：一款用于Linux内核驱动程序的稳健漏洞检测工具 本仓库包含所有源代码，包括设置脚本。 现在拥有一个出色的UI，可查看警告以及对应的源文件。 已在以下系统测试 Ubuntu = 14.04.5 LTS 公告 2018年2月16日 ： DR.CHECKER 已支持Docker化。请参考 Docker 使用 了解使用方法。 常见问题 0. 使用Docker化设置（推荐） 请参考 Docker 使用 文档，了解如何在预构建的Docker容器中使用DR.CHECKER。 1. 设置 我们的实现基于LLVM，具体是LLVM 3.8。还需要像 c2xml...

CVE-2026-88020

Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability when the web interface attempts to route the program based on a query string parameter with no encoding...

inspector

MCP Inspector A developer tool for inspecting Model Context Protocol MCP servers. It ships as a single package, @modelcontextprotocol/inspector, that provides three ways to inspect a server: Web — a Vite + React + Mantine single-page app with a Node backend. CLI — a scriptable command-line client...

CVE-2024-1403

CVE-2024-1403 Progress OpenEdge Authentication Bypass An exploit proof of concept for Progress OpenEdge CVE-2024-1403. Blog Post More details here: https://www.horizon3.ai/attack-research/cve-2024-1403-progress-openedge-authentication-bypass-deep-dive Usage You must provide your own versions of t...

CVE-2026-88020

Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability when the web interface attempts to route the program based on a query string parameter with no encoding...

CVE-2026-88020 Improper Neutralization of Input During Web Page Generation in OpenPLC Runtime v3

Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability when the web interface attempts to route the program based on a query string parameter with no encoding...

EUVD-2026-84871

Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability when the web interface attempts to route the program based on a query string parameter with no encoding...

wavecrack

Wavecrack 描述 一个用户友好的Web界面，用于在多用户之间共享一个hashcat破解箱，并提供一些预定义选项。 截图 主页 添加要破解的哈希值 查看结果和统计信息 概述 这个Web应用程序可用于使用hashcat启动异步密码破解 。 界面力求尽可能用户友好 ，方便选择密码破解方法，并自动执行各种攻击模式的顺序 。 它还显示已破解密码的统计信息 ，并允许以CSV格式导出已破解密码列表 。 该应用程序设计用于多用户环境，不同用户的破解结果之间严格隔离 ：用户认证可以通过LDAP目录或基本认证 完成。 用法 Wavecrack可用于执行以下操作：...