1146 matches found
Docker-Escape-Miner
Using a published Docker exploit to gain root access and run a bitcoin mining script This uses two open source libraries: nightminer by @ricmoo for python bitcoin mining RunC-CVE-2019-5736 by @twistlock for the docker escape System Requirements This was tested on Kali Linux, with Docker version...
SharpML
SharpML SharpML is a proof of concept file share data mining tool using Machine Learning in Python and C. The tool is discussed in more detail on our blog here, but is summarised below also: SharpML is C and Python based tool that performs a number of operations with a view to mining file shares,...
evine
Evine Interactive CLI Web Crawler. Evine is a simple, fast, and interactive web crawler and web scraper written in Golang. Evine is useful for a wide range of purposes such as metadata and data extraction, data mining, reconnaissance and testing. If you like the project, give it a star. It forces...
DriveLife-PsTrojan
DriveLife-PsTrojan TrojanDropper/PS.Maloader.d Introduction to the "DriveLife" Virus Since its emergence in 2018, the "DriveLife" virus has spawned multiple variants and continuously refined its techniques to evade detection and removal by security software. The virus exploits multiple high-risk...
cromos
Cromos Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application and more cromos create executable files to force installation via PowerShell for example, and also upload files to dropbox to host the malicious files...
ParamSpider
paramspider Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing 📖 About • 🏗️ Installation • ⛏️ Usage • 🚀 Examples • 🤝 Contributing • About paramspider allows you to fetch URLs related to any domain or a list of domains from Wayback achives. It filters out "boring"...
pockint
POCKINT a.k.a. Pocket Intelligence is the OSINT swiss army knife for DFIR/OSINT professionals. A lightweight and portable GUI program, it provides users with essential OSINT capabilities in a compact form factor: POCKINT's input box accepts typical indicators URL, IP, MD5 and gives users the...
Bella
Bella Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎 💻 What is it? Bella is a robust, pure python, post-exploitation and remote administration tool for macOS. Bella a.k.a. the server is an SSL/TLS encrypted reverse shell that can be dropped on...
drupal-check
drupal-check This is a script for performing log diving in Cpanel Apache, and Default Apache configurations. It will look for signs of a potential compromise, not guarenteed evidence, just looking to make analysis easier for the investigator...
KaliIntelligenceSuite
Kali Intelligence Suite Kali Intelligence Suite KIS is an intelligence gathering and data mining tool for penetration testers. It shall aid in the fast, autonomous, central, and comprehensive collection of intelligence by automatically: executing Kali Linux tools e.g., dnsrecon, gobuster, hydra,...
Log4j-Vulnerability
Log4j Vulnerability Tutorial: https://youtu.be/PNDBjoT83zA Tutorial: https://cryptodeeptech.ru/log4j-vulnerability Background on Log4j Alibaba Cloud Security Team publicly disclosed a critical vulnerability CVE-2021-44228 enabling unauthenticated remote code execution against multiple versions of...
RedTeamCoin
RedTeamCoin RedTeamCoin is a blockchain-based cryptocurrency mining pool implementation designed for authorized security testing and red team operations. Built in Go with Java client support, it simulates real-world cryptomining attacks to help organizations assess their detection capabilities an...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
Summary Multiple vulnerabilities were addressed in IBM Process Mining 2.2.1 IF001 Vulnerability Details CVEID:CVE-2026-93005 DESCRIPTION: IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated attacker to cause a denial of service through insufficient rate limiting of email...
CVE-2026-93005
IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated attacker to cause a denial of service through insufficient rate limiting of email notifications, resulting in excessive emails being sent to targeted recipients...
CVE-2026-93005
IBM Process Mining versions 2.0.0 through 2.2.1 are vulnerable to a denial of service (DoS) attack. The root cause is insufficient rate limiting of email notifications, which allows an authenticated attacker to trigger the transmission of excessive emails to targeted recipients (CWE-770 ). Impact...
CVE-2026-93005 Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated attacker to cause a denial of service through insufficient rate limiting of email notifications, resulting in excessive emails being sent to targeted recipients...
EUVD-2026-119738
IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated attacker to cause a denial of service through insufficient rate limiting of email notifications, resulting in excessive emails being sent to targeted recipients...
CVE-2026-112369
IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms...