EUVD-2026-82379

A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of the file server/internal/machine/api/machinescript.go of the component Machine Script Feature. The manipulation of the argument params results in os command injection. The atta...

CVE-2026-92993 Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection

A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of the file server/internal/machine/api/machinescript.go of the component Machine Script Feature. The manipulation of the argument params results in os command injection. The atta...

CVE-2026-92993

Dromara mayfly-go (up to 1.11.5 ) is vulnerable to an OS command injection via the RunMachineScript function in server/internal/machine/api/machine_script.go (Machine Script Feature). Remote attackers with the machine:script:run permission and tag access can achieve arbitrary command execution on...

remove-ai-watermarks v0.41.1

Remove AI Watermarks Remove AI provenance marks from images and video you generated yourself: known visible labels such as the Google Gemini sparkle watermark and vendor text marks; invisible pixel watermarks through direct local-format disruption or diffusion regeneration; C2PA, EXIF, XMP, IPTC,...

The Autonomous Engine Behind Remediation, and What Finally Makes It Safe

Executive Summary Vulnerability exploitation now happens at a speed that manual, ticket-based remediation can 't match. Qualys's Enterprise TruRisk Management Platform closes that gap with autonomous remediation: exposures are prioritized by threat, business, and environmental context, then...

HTB-Pterodactyl-Writeup

Penetration Test Report — HackTheBox: Pterodactyl Date: April 8, 2026 Target: Pterodactyl HackTheBox Difficulty: Medium OS: Linux openSUSE Leap 15.6 Tester: V0idW1re Executive Summary The Pterodactyl machine on HackTheBox presented a realistic attack scenario involving a misconfigured web...

RAT-via-Telegram

RAT-via-Telegram Windows Remote Administration Tool via Telegram now in Python 3.7! | Originally created by Ritiek Why another one? The current Remote Administration Tools in the market face 2 major problems: Lack of encryption. Require port forwarding in order to control from hundreds of miles...

gcat

Gcat 一个基于 Python 的隐蔽后门，使用 Gmail 作为命令与控制服务器 本项目灵感来源于 Benjamin Donnelly 的原始 PoC 代码 这是 PoC 代码... ... 发布该代码是为了让组织测试其对这类攻击的防御能力。要检测此类攻击，请参阅 RITA 等项目。 有关此项目的最新维护版本，请参见 GDog 设置 要让此工具工作，你需要： 一个 Gmail 账户（请使用专用账户！不要使用你的个人账户！ ） 在账户安全设置中打开“允许不够安全的应用” 可能还需要在账户设置中启用 IMAP 本仓库包含两个文件： gcat.py 用于枚举可用客户端并向其发送命令的脚本...

gcat

Gcat A stealthy Python based backdoor that uses Gmail as a command and control server This project was inspired by the original PoC code from Benjamin Donnelly This is PoC code... ... that was released for orginazations to test their defenses against these type of attacks. In order to detect them...

tlsenum

tlsenum tlsenum is a command-line TLS enumeration tool that attempts to enumerate what TLS cipher suites a server supports and list them in order of priority. It works by sending out sending out TLS ClientHello messages and parsing the ServerHello responses from the server. tlsenum assumes that t...

DoHC2

⚠️ NOTE: This tool is no longer under active maintenance. DoHC2 DoHC2 allows the ExternalC2 library from Ryan Hanson https://github.com/ryhanson/ExternalC2 to be leveraged for command and control C2 via DNS over HTTPS DoH. This is built for the popular Adversary Simulation and Red Team Operations...

maltrieve

root@kitploit: | | | || | | |/ | | \ / | | | | | | | | | \ | | / | Maltrieve Maltrieve originated as a fork of mwcrawler. It retrieves malware directly from the sources as listed at a number of sites. Currently we crawl the following: Malc0de Malware Domain List Malware URLs VX Vault URLquery...

DAMM

DAMM An open source memory analysis tool built on top of Volatility. It is meant as a proving ground for interesting new techniques to be made available to the community. These techniques are an attempt to speed up the investigation process through data reduction and codifying some expert...

blackpill

BlackPill BlackPill is a stealthy Linux rootkit made in Rust. Features The rootkit is composed of multiple modules talking about Rust modules, not kernel modules: defense evasion : hide files, processes, network connections, etc. hooking : hook syscalls and IDT hypervisor : create a virtual machi...

martian

Martian Proxy Martian Proxy is a programmable HTTP proxy designed to be used for testing. Martian is a great tool to use if you want to: Verify that all or some subset of requests are secure Mock external services at the network layer Inject headers, modify cookies or perform other mutations of...

passera

Note: I no longer have the time to continue development of Passera, but pull requests are more than welcome! The number one requested item would be an updated Firefox extension, since the latest API change broke the current release. Passera A simple tool that allows users to have strong unique...

NINJA-PingU

NINJA PingU NINJA-PingU Is Not Just a Ping Utility is a free open-source high performance network scanner tool for large scale analyses. It has been designed with performance as its primary goal and developed as a framework to allow easy plugin creation. NINJA PingU comes out of the box with a se...

CVE-2025-9074-docker-escape

CVE-2025-9074-Docker Escape HTB MonitorsFour This code is for educational purposes only and controlled environments such as laboratories Hack The Box. Do not use on systems without authorization. This repository contains an exploit script for the Docker Remote API exposed without authentication...

awind-research

Awind Research This repository holds interesting bits and pieces related to research I performed on wireless presentation devices manufactured by Awindinc and OEM'ed to multiple manufacturers. The repository is split into these subsections: hardware - hardware hacking stuff, mostly for MMC dumpin...

Johnny-You-Are-Fired

Johnny-You-Are-Fired Artifacts for the USENIX publication | Full paper here Abstract OpenPGP and S/MIME are the two major standards to encrypt and digitally sign emails. Digital signatures are supposed to guarantee authenticity and integrity of messages. In this work we show practical forgery...