CVE-2024-49113

LDAP Nightmare Un exploit para CVE-2024-49113 reportado por Yuki Chen @guhe120. Una vulnerabilidad en el Protocolo Ligero de Acceso a Directorios LDAP de Windows. Creado por SafeBreach Labs publicado el 1 de enero de 2025. Para el análisis técnico completo de la vulnerabilidad y cómo logramos...

nsd

NSD NLnet Labs 네임 서버 데몬NSD은 권위 있는authoritative DNS 네임 서버입니다. 속도, 신뢰성, 안정성 및 보안이 매우 중요한 환경에서의 운영을 위해 개발되었습니다. 피드백이 있으시면 언제든 환영합니다. 주저하지 말고 GitHub에 이슈를 작성하거나 커뮤니티 포럼에 메시지를 남겨 주세요. NSD에 대해 더 자세히 알아보려면 문서를 읽어보세요. 빌드 다음이 설치되어 있는지 확인하세요: C 툴체인 컴파일러, 링커, 어셈블러 등 C를 컴파일하는 데 필요한 도구 모음 OpenSSL 및 해당 include ...

unicorn-bios

unicorn-bios About Basic BIOS emulator/debugger for Unicorn Engine. Written to debug the XEOS Operating System boot sequence. Usage: root@kitploit: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for the virtual machine in...

HSC MailInspector - Local File Inclusion

HSC MailInspector v5.3.3-7 contains a path traversal caused by improper control of user-supplied file paths in /vendor/phpunit/phpunit.php, letting remote attackers read arbitrary files, exploit requires crafted request. id: CVE-2026-29962 info: name: HSC MailInspector - Local File Inclusion...

Sigma

Sigma Rules A collection of Sigma rules developed at Huntress Labs Twitter: https://twitter.com/embeeresearch https://twitter.com/HuntressLabs License The rules are essentially free to use without restriction, provided that appropriate credit is maintained Author/Owner etc. Detection Rule License...

malware-samples

malware-samples A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net or https://twitter.com/inquest. Be sure to also check out the Deep File Inspection DFI portion of https://labs.inquest.net for an interactive searchable...

CVE-2026-62089

Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...

EUVD-2026-76194

Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...

CVE-2026-62089 WordPress Master Addons for Elementor plugin <= 3.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...

python-inquestlabs

RETIRED November 2025 inquestlabs A Pythonic interface and command line tool for interacting with the InQuest Labs API. Note that an API key is not required to interact with this API. An API key does provide the ability to increase their lookback, remove rate limitations, and download available...

ioc

IoC Threat Intel IoCs + bits and pieces of dark matter. Published by Gen Threat Labs. Licenses The content of this repository is released under the Detection Rule License DRL 1.1...

CVEs

Rhino CVE Proof-of-Concept Exploits A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs. CVE-2025-32815: Infoblox NetMRI Authentication Bypass via Hardcoded Credentials CVE-2025-32814: Infoblox NetMRI Unauthenticated SQL Injection via...

AnythingLLM - Information Disclosure

AnythingLLM suffers from an information disclosure vulnerability through the /api/setup-complete API endpoint. By accessing this endpoint, a remote and unauthenticated attacker can access sensitive configuration of the target AnythingLLM instance. This detection is included in the AI and LLM...

ssllabs.rb

ssllabs.rb Ruby gem for Qualys SSL Labs server test. API Notes All API objects described in the SSL Labs API docs are exposed as native ruby objects. Properties are accessed with "underscored" names, i.e. endpoint.hoststarttime will return the hostStartTime field from the API response. All boolea...

dr_robot

. . . . . . . : \ : \ : \ : . \ : / : . \ :| | | || || || : | || | \ | : | | | :| | . | || : \ | : \ | : || | | : | | | |. / | | | |\ . / |/ ./ | | :/ | | || :/ :/ | | : : : Copyright 2019 National Technology & Engineering Solutions of Sandia, LLC NTESS. Bajo los términos del Contrato DE-NA000352...

ioccheck

ioccheck A tool for simplifying the process of researching file hashes, IP addresses, and other indicators of compromise IOCs. Features Look up hashes across multiple threat intelligence services, from a single command or a few lines of Python. Currenty supports the following services: VirusTotal...

CVE-2025-57819-ioc-check

CVE-2025-57819-ioc-check Description CVE-2024-6387-ioc-check is a lightweight, efficient tool designed to identify IoCs on freepbx servers with any of endpoint Users should upgrade to the latest supported versions of FreePBX currently 15, 16, and 17 and confirm that the installed "endpoint" modul...

dirtypipe-container-breakout-poc

Escape de contenedor Dirty Pipe Movido a https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/dirtypipe-container-breakout...

SSR-DNSSEC

The DNS infrastructure used for this PoC was the one suggested on the SEED Labs, available at: https://seedsecuritylabs.org/Labs20.04/Networking/DNS/DNSSEC/, with some minor changes. The infrastructure, consists of a root server, a top-level domain server for edu, a domain server for example.edu,...

json-interop-vuln-labs

Laboratorios de Vulnerabilidades de Interoperabilidad JSON Descripción Estos son los laboratorios complementarios a mi artículo de investigación "An Exploration of JSON Interoperability Vulnerabilities". Laboratorio 1: Compras gratuitas en una aplicación de comercio electrónico Ataques de colisió...