pdbdownload

An utility to download PDB files associated with a Portable Executable PE. Features Download PDB symbols from msdl.microsoft.com. Process a single or a batch of PortableExecutable PE files. Demonstration https://github.com/user-attachments/assets/095fb528-65a6-488e-bfa0-46101738a451 Usage...

SentinelOne-ATTACK-Queries

ATT&CK Mapped SentinelOne Queries MITRE ATT&CK mapped queries for SentinelOne Deep Visiblity DISCONTINUED This project has been replaced by theSentinelOne-Queries repository which moves towards shareable signatures and for use in tooling. New repo is built of the work within this repository and...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in recent security patch releases. Vulnerability Details CVEID:CVE-2026-13757 DESCRIPTION: A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and...

ffufw

ffufw ffuf with that special sauce Install go install github.com/puzzlepeaches/ffufw@latest Why? ffufw is a wrapper around ffuf to make directory bruteforcing easier and more intelligent. The tool has the following features: Multithreaded execution of ffuf commands for a list of URLs Dynamic...

kfd

Quick disclaimer: I have no intention of adding offsets for other devices and iOS versions. kfd kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices. It leverages various vulnerabilities that can be exploited to obtain dangling PTEs, which will be...

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions

The U.S. Federal Bureau of Investigation FBI and Department of Justice DoJ have announced the disruption of malicious tools used by a China-linked advanced persistent threat group known as Flax Typhoon. To that end, the agencies seized several domains and blocked access to platforms that were use...

TokenStealer

TokenStealer A simple tool I wrote some time ago for stealing and playing with Windows tokens. Parts of code have been taken and adatpted from https://github.com/FSecureLABS/incognito Clearly, you will require Impersonation or AssignPrimary privilege and Debug privilege to access all processes...

No-Consolation

No-Consolation This is a Beacon Object File BOF that executes unmanaged PEs inline and retrieves their output without allocating a console i.e. spawning conhost.exe. Features Supports 64 and 32 bits Supports EXEs and DLLs Does not create new processes Does not create new threads Links modules to...

CovenantDecryptor

CovenantDecryptor CovenantDecryptor is designed to decrypt the communication data of Covenant traffic. The extraction of the private key from memory is applicable to other C2, such as Empire, given its use of the RSACryptoServiceProvider to create the key. How Covenant communication works ? The...

SelectMyParent

What's this This is a project for parent process spoofing. How to use step 1:Select a parent process and remember the pid Step 2:Execute the following command. Implement parent process spoofing SelectMyParent.exe notepad 928 Step 3:Using process explorer to view the process tree, you can see the...

CVE-2026-67598

CVE-2026-67598 Emlog Pro — Disabled TLS Certificate Validation in the AI Assistant Network-adjacent MITM → LLM-provider API-key theft & AI-response injection Summary · Attack Flow · Affected Code · Proof · Remediation · Timeline · References 📋 At a glance | ---|--- CVE ID| CVE-2026-67598 Product|...

CVE-2016-10204_Webshell

CVE-2016-10204Webshell A bash script demonstrating the manual exploitation of CVE-2016-10204 against a target endpoint, leading to upload of a php webshell. Currently, the webshell variable is set for a MySQL payload. This can be replaced with whatever backend you need to target. More information...

Pentest-Command

项目背景 在渗透测试过程中我们会使用到各类的框架，例如:MSF、CS、Empire、Impacket等，本项目的主要目的是收录在后渗透测试阶段中常用到的命令 基础知识 Windows目录介绍 a、开机启动程序目录c C:\Users\Al1ex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup b、开机自启动程序该特色常被用于进行权限维持c C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup c. System installation path...

dnsresolver

dnsresolver A Lightning-Fast DNS Resolver Table of Contents Installation Usage Basic Usage Resolving Hosts with Ports Virtual Host Enumeration Using Unresolved Domains Using Localhost Demonstrations Feedback License Installation Make sure you have rust installed, then run the following command to...

Monitor

Project Description Used for implementing privilege persistence during the post-exploitation testing phase Project Usage Step 1 : Download the project, then compile Monitor.cpp using VS. Of course, you can also use the pre-compiled one. The Monitor.cpp code is as follows: include "Windows.h" int...

Hadoop-Yarn-ResourceManager-RCE

Vuln Impact There was an unauthorized access vulnerability in Hadoop yarn ResourceManager. This vulnerability existed in Hadoop yarn, the core component of Hadoop. Because Hadoop yarn opened the RPC service to the public by default, a remote attacker could take advantage of this unauthorized...

potential-cassandra

CVE-2024-23114 Prepare the enviroment We'll need a Mysql instance docker run --rm -d --name cassandra -p 9042:9042 cassandr Now we'll need to create the required tables: You have two files: employee.sql and employeecompleted.sql Run the following command: docker exec -it cassandra bash...

Xjar_tips

Xjartips Introduction: Spring Boot JAR 安全加密运行工具, 同时支持的原生JAR. 基于对JAR包内资源的加密以及拓展ClassLoader来构建的一套程序加密启动, 动态解密运行的方案, 避免源码泄露以及反编译. 功能特性 无代码侵入, 只需要把编译好的JAR包通过工具加密即可. 完全内存解密, 降低源码以及字节码泄露或反编译的风险. 支持所有JDK内置加解密算法. 可选择需要加解密的字节码或其他资源文件. 支持Maven插件, 加密更加便捷. 动态生成Go启动器, 保护密码不泄露. 其中xjar...

CVE-2026-42533-POC

CVE-2026-42533 Pre-auth heap buffer overflow and heap information leak in nginx, caused by missing save/restore of PCRE capture state across the two passes of the script engine. A regex map variable evaluated between two capture references overwrites r-captures, so the LEN pass and the VALUE pass...

CVE-2026-107910

An improper authentication vulnerability in the isauthenticated function src/bolt/boltapi.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph queries without credentials through the Bolt endpoint. The function decides whether a password is required by issuing an...