Malicious code in @coopeuch/config (npm)

Source: amazon-inspector 0c9b2c76aac3e901d6585717a7e1f9729699bf3a4e280eb20a68bcef4d507d0d The package publishes to the @coopeuch npm scope at version 1.999.999 with a stub index.js, a shape designed to win resolution over an internal scope registry when an organization's scope-to-registry mapping...

Malicious code in @coopeuch/core (npm)

Source: amazon-inspector 35a2aead44a4adb850635cf457613400d143b9e4f047767b111058b881cfbb3f On npm install, postinstall.js automatically executes and collects a detailed host and environment report — hostname, username, uid/gid, home directory, platform/arch/release, CPU and memory, DNS servers,...

Malicious code in @coopeuch/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a2aead44a4adb850635cf457613400d143b9e4f047767b111058b881cfbb3f On npm install, postinstall.js automatically executes and collects a detailed host and environment report — hostname, username, uid/gid, home...

Malicious code in @coopeuch/config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9b2c76aac3e901d6585717a7e1f9729699bf3a4e280eb20a68bcef4d507d0d The package publishes to the @coopeuch npm scope at version 1.999.999 with a stub index.js, a shape designed to win resolution over an internal scope...

MAL-2026-17762 Malicious code in @coopeuch/config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9b2c76aac3e901d6585717a7e1f9729699bf3a4e280eb20a68bcef4d507d0d The package publishes to the @coopeuch npm scope at version 1.999.999 with a stub index.js, a shape designed to win resolution over an internal scope...

The vulnerability of the control console of the MaxPatrol EDR detection and response system allows a perpetrator to trigger a service failure.

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

MUDO

🩸 MUDO An all-in-one offensive-security toolkit, written from sc...

CVE-2026-92871

A flaw was found in pgpool-II. A remote, unauthenticated attacker could cause a Denial of Service DoS due to a NULL pointer dereference in the watchdog component. Exploiting this vulnerability leads to abnormal termination of the watchdog process. Mitigation Restrict network access to the pgpool-...

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 ⚠ This tool is created solely for education...

BKScan

BKScan Scanner BlueKeep CVE-2019-0708 que funciona tanto sem autenticação como autenticado ou seja, quando a Autenticação em Nível de Rede NLA está ativada. Requisitos: Um servidor RDP Windows Se o NLA estiver ativado no servidor RDP, um usuário/senha válidos que façam parte do grupo "Usuários de...

RSC_Detector

Detector de Impressão Digital RSC Uma extensão do Chrome para detectar impressões digitais de React Server Components RSC e Next.js App Router em páginas web. ⚠️ Aviso Importante Esta extensão foi projetada para apenas para fins educacionais e de pesquisa em segurança. Inclui funcionalidades que...

misp-taxonomies

MISP Taxonomies MISP Taxonomies é um conjunto de bibliotecas de classificação comuns para etiquetar, classificar e organizar informações. A taxonomia permite expressar o mesmo vocabulário entre um conjunto distribuído de utilizadores e organizações. As taxonomias que podem ser utilizadas no MISP ...

ldeep

============== Status do Projeto .. image:: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml/badge.svg :target: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml :alt: Build status .. image:: https://badgen.net/pypi/v/ldeep :target:...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

domainhunter

Domain Hunter Autoren Joe Vest @joevest & Andrew Chiles @andrewchiles Die Auswahl eines Domainnamens ist ein wichtiger Aspekt der Vorbereitung von Penetrationstests und insbesondere von Red Team-Einsätzen. Häufig können Domains, die zuvor für harmlose Zwecke genutzt wurden und ordnungsgemäß...

CertVerify

CertVerify CertVerify ist ein Tool zur Erkennung von ausführbaren Dateien exe, dll, sys, die mit nicht vertrauenswürdigen oder durchgesickerten Codesignaturzertifikaten signiert wurden. Der Zweck dieses Tools besteht darin, potenziell schädliche Dateien zu identifizieren, die mit Zertifikaten...

phantom-frida

phantom-frida phantom-frida builds Android Frida Server and Gadget from source while changing a targeted set of observable runtime identifiers. It is a builder and verification harness, not a promise that every application-specific detection method is defeated. The current compatibility target is...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

katana

Ein Crawling- und Spidering-Framework der nächsten Generation Funktionen • Installation • Verwendung • Scope • Konfiguration • Filter • Discord beitreten Funktionen Schnelles und vollständig konfigurierbares Web-Crawling Standard - und Headless -Modus JavaScript -Parsing / -Crawling Anpassbares...

uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...