WiFi-Pineapple-MK7_Evil-Portal

WIFI PINEAPPLE MARK VII - 邪恶门户 领先的非法接入点及WiFi渗透测试工具包，用于近距离操作。 被动和主动攻击分析易受攻击和配置错误的设备。 https://hak5.org/collections/sale/products/wifi-pineapple 作者 :: TW-D 版本 :: 1.0.0 版权 :: Copyright c 2024 TW-D 许可证 :: 遵循与Ruby相同的条款分发 要求 :: PHP = 8.1, Ruby = 2.7.0p0 和 WiFi Pineapple Mark VII 2.1.3-stable...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in Next.js (CVE-2026-44572, CVE-2026-44573)

Summary Multiple vulnerabilities including SSRF and header manipulation in Next.js CVE-2026-44572, CVE-2026-44573 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 15.5.21. Vulnerability Details CVEID:CVE-2026-44572 DESCRIPTION: Next.js is a Rea...

njutils

njutils ./njclient.py 192.168.56.101 5552 -k "You won't find keylogs here" -u "5k1d d357r0y3r" -p "m41nfr4m3-3000" -f "TRACKING LOCATION - PREPARING DRONE STRIKE" -o "Mac OSX 9.9" njclient.py の -K オプションを使用して、接続成功時にあなたの l33t ASCII アートを開きます。例: ./njclient.py 192.168.56.101 5553 -y0.7dg -K...

installer

概要 インストール mql cnspec ターゲットプラットフォームのスキャン パッケージ情報 Kubernetes ステータス Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: インストール mql と cnspec をインストールする最も簡単な方法は、インストールスクリプトを使用することです。 Shell スクリプト経由 Linux および macOS https://install.mondoo.com/shbash bash -c "$curl -sSL...

redamon

Unmask the hidden before the world does An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merge...

CVE-2023-50164-PoC

CVE-2023-50164 PoC This repository is a proof of concept PoC of the CVE-2023-50164 vulnerability. 1. About CVE-2023-50164 CVE-2023-50164 is a file path traversal vulnerability that occurs in Apache Struts web application. An attacker could exploit this vulnerability to upload malicious file...

chiasmodon

Chiasmodon Chiasmodon is an OSINT tool that allows users to gather information from various sources and conduct targeted searches based on domains, Google Play applications, email addresses, IP addresses, organizations, URLs, and more. It provides comprehensive scanning capabilities, customizable...

CVE-2019-11043

CVE-2019-11043 php-fpm+Nginx RCE 0x01 phuip-fpizdam-Mac のインストール go get github.com/neex/phuip-fpizdam go install github.com/neex/phuip-fpizdam root@kitploit: ale@Pentest /go go get github.com/neex/phuip-fpizdam ale@Pentest /go go install github.com/neex/phuip-fpizdam ale@Pentest /go ls bin src...

CVE-2026-47321 Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate

The CompressionFilter class uses ZLib to deflate and inflate data sent and received. When we inflate incoming data, the filter does not control the resulting size, and create a buffer no matter what. Some compressed data may have a compression ration greater than 1 thousand, leading to an...

CVE-2026-47321

The CompressionFilter class uses ZLib to deflate and inflate data sent and received. When we inflate incoming data, the filter does not control the resulting size, and create a buffer no matter what. Some compressed data may have a compression ration greater than 1 thousand, leading to an...

CVE-2026-47321 Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate

The CompressionFilter class uses ZLib to deflate and inflate data sent and received. When we inflate incoming data, the filter does not control the resulting size, and create a buffer no matter what. Some compressed data may have a compression ration greater than 1 thousand, leading to an...

CVE-2026-47321

Apache MINA's CompressionFilter uses ZLib to inflate incoming data without bounding the resulting size. An attacker can send a small compressed payload with a compression ratio exceeding 1,000× , exhausting application memory and causing a denial of service (CVSS 3.1: 7.5 HIGH , impact: availabil...

EUVD-2026-83858

The CompressionFilter class uses ZLib to deflate and inflate data sent and received. When we inflate incoming data, the filter does not control the resulting size, and create a buffer no matter what. Some compressed data may have a compression ration greater than 1 thousand, leading to an...

procrustes

Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...

dnssearch

dnssearch This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on...

Important: Red Hat Security Advisory: openssh security update

An update for openssh is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

openssh: OpenSSH: sftp client allows attacker to control downloaded file location

A flaw was found in OpenSSH. The sftp client, when used to download files from a malicious server with the 'sftp server:/path .' command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or...

GyoiThon

GyoiThon : 次世代ペネトレーションテストツール 日本語ページはこちら。 プレゼンテーション 2018年1月25日：JANOG41 2018年3月23日：Black Hat ASIA 2018 Arsenal 2018年8月12日：DEFCON26 DemoLabs 2018年10月24日：OWS in CSS2018 2018年11月3日：AV TOKYO 2018 HIVE 2018年12月22日～23日：SECCON YOROZU 2018 2019年3月28日：Black Hat ASIA 2019 Arsenal ドキュメント インストール 使用方法 Tips デモ動画...

device-modeling-language

设备建模语言 设备建模语言（DML）是一种用于为虚拟平台编写快速功能或事务级设备模型的领域特定语言。DML 提供了适合功能设备模型的高级抽象，包括寄存器组、寄存器、位域、事件发布、模型间接口以及日志记录等结构。DML 代码由 DML 编译器（DMLC）编译，生成针对特定模拟器定制 API 调用的 C 代码。 目前，编译器支持为 Intel® Simics® 模拟器构建模型，但未来可能会添加其他后端。 构建和测试 DMLC 要构建 DMLC，您需要安装 Simics 模拟器并设置一个 Simics 项目。 使用 Intel Simics 模拟器的公开发行版 如果您尚未安装 Simics...

TelegramRAT

TelegramRAT root@kitploit: クロスプラットフォームのTelegramベースRAT。Telegram経由で通信し、ネットワーク制限を回避します。 注意: root@kitploit: 新しいクロスプラットフォームRATを使用: https://github.com/machine1337/pyFUD インストール: root@kitploit: 1. git clone https://github.com/machine1337/TelegramRAT.git 2. 次に、「HOW TO USE」セクションの指示に従ってください。 デモ:...