piraterf

🏴‍☠️ PIrateRF - Plateforme de transmission radio logicielle PIrateRF transforme votre Raspberry Pi Zero W en un générateur de signaux RF portable qui crée son propre hotspot WiFi. Contrôlez tout, des émissions FM aux modes numériques, depuis votre navigateur – piratez les ondes où que vous soyez !...

m4ngl3m3

m4ngl3m3! Installation rapide : root@kitploit: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py Aide de base : root@kitploit: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFI...

Pummel

root@kitploit: ██████╗ ██╗ ██╗███╗ ███╗███╗ ███╗███████╗██╗ ██╔══██╗██║ ██║████╗ ████║████╗ ████║██╔════╝██║ ██████╔╝██║ ██║██╔████╔██║██╔████╔██║█████╗ ██║ ██╔═══╝ ██║ ██║██║╚██╔╝██║██║╚██╔╝██║██╔══╝ ██║ ██║ ╚██████╔╝██║ ╚═╝ ██║██║ ╚═╝ ██║███████╗███████╗ ╚═╝ ╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚══════╝╚═════...

SteganographierGUI

SteganographierGUI Скрытие файлов в MP4/MKV Прежде чем смотреть урок ниже, убедитесь, что понимаете, что означает слово «расширение файла ». Если не понимаете, сначала поищите «как изменить расширение файла» Если после смены расширения файл всё ещё отображается как MP4, значит, у вас не включено...

crypto_identifier

crypto-identifier Outil crypto pour pentest et ctf : tente de déchiffrer des données en utilisant plusieurs algorithmes et modes de chaînage de blocs. Utile pour une vérification rapide sur un texte chiffré inconnu et un dictionnaire de clés. Algorithmes supportés : AES ARC2 ARC4 Blowfish CAST DE...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

fpicker

fpicker fpicker is a Frida-based fuzzing suite that offers a variety of fuzzing modes for in-process fuzzing, such as an AFL++ mode or a passive tracing mode. It should run on all platforms that are supported by Frida. Installation Instructions Building and Running Creating a Fuzzing Harness Mode...

bad_ducky

Bad Ducky Résumé Bad Ducky est un autre clone de Rubber Ducky. Il est basé sur la carte CJMCU BadUsb ATMEGA32u4 - clone Arduino Leonardo avec lecteur de carte intégré, que vous pouvez acheter sur ebay ou aliexpress. Mon objectif était de créer quelque chose de compatible avec les scripts Rubber...

bad_ducky

Bad Ducky Summary Bad Ducky is yet another Rubber Ducky clone. It is based on CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo clone board with onboard card reader, which you can buy on ebay or aliexpress. My goal was to create something compatible with Rubber Ducky scripts, while having ability to...

Next.js_exploit_CVE-2024-34351

csr-rsc-ssg-isr-ssr-ssrf 이 저장소는 하나 이상의 미트업을 발표하기 위한 자료로 사용될 수 있습니다. 과정은 다음과 같습니다... "CSR" Client Side Rendering: 표준 SPA 라이브러리로서의 React "RSC" React Server Components: 오직 서버 측에서만 실행되는 React 컴포넌트 "SSG" Static Site Generation: 빌드 시점에 React 컴포넌트 실행 "ISR" Incremental Static Regeneration: 요청 시 컴포넌트 재생성...

password_generator

PassForge - Générateur de mots de passe tout-en-un en CLI Un générateur de mots de passe CLI prêt pour la production, cryptographiquement sécurisé, avec 17 modes de génération, transparence d'entropie et options de personnalisation complètes. Fonctionnalités 17 modes de génération...

graphql-cop

GraphQL Cop - Security Audit Utility for GraphQL About GraphQL Cop is a small Python utility to run common security tests against GraphQL APIs. GraphQL Cop is perfect for running CI/CD checks in GraphQL. It is lightweight, and covers interesting security issues in GraphQL. GraphQL Cop allows you ...

nfcgate

NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...

CVE-2026-73489

Russh is a Rust SSH client & server library. Prior to 0.62.4, an authenticated SSH client can cause a denial of service by sending a pty-req channel request with more than 130 terminal-mode records. The parser in russh/src/server/encrypted.rs stores terminal modes in a fixed 130-entry...

CVE-2026-73489

Summary: CVE-2026-73489 affects russh (Rust SSH library) prior to 0.62.4. An authenticated SSH client can trigger a denial-of-service by sending a pty-req channel request with more than 130 terminal-mode records. The parser uses a fixed 130-entry array for terminal modes but increments the index ...

CVE-2026-73489 Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records

Russh is a Rust SSH client & server library. Prior to 0.62.4, an authenticated SSH client can cause a denial of service by sending a pty-req channel request with more than 130 terminal-mode records. The parser in russh/src/server/encrypted.rs stores terminal modes in a fixed 130-entry...

TencentOS Server 4: bouncycastle (TSSA-2026:0825)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0825 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: hfsplus: treating special inodes as regular files Since the commit af153bb63a33 "vfs: catching invalid modes in mayopen" requires that any inode be of one of the types SIFDIR/SIFLNK/SIFREG/SIFCHR/SIFBLK/SIFIFO/SIFSOCK, use SIFREG...

Exploit for Interpretation Conflict in Wordpress

wp2exp2026 🔥 WordPress All-in-One Exploit Framework — De...

CVE-2026-63248

In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics over a None/None endpoint without a certificate; with a trusted client application certificate over SignAndEncrypt, it can read security...