CVE-2020-14066

Icewarp Email Server 12.3.0.1 insecurepermissions https://nvd.nist.gov/vuln/detail/CVE-2020-14066...

CVE-2022-3602

CVE−2022-3602 What is this? This document and repository is a write-up of CVE−2022-3602, a punycode buffer overflow issue in OpenSSL. It's an "anti-POC" the issue does not appear to exploitable intended for folks who maintain their own OpenSSL builds and for compiler maintainers. There is a...

Offensive_tools

This repository does not have a README...

Cybersecurity-Resources

Cybersecurity-Resources A Library of various cybersecurity resources...

MongoBleed-DFIR-Triage-Script-CVE-2025-14847

Eric Capuano1 posted an excellent blog regarding MongoBleed CVE-2025-14847 and indicators to look out for. PoC by Joe Desimone2 shows exactly how the memory leak exploit works and Kevin Beaumont3 has an excellent write-up on the vulnerability see reference section for links. MongoBleed Triage...

Blackash-CVE-2025-53770

🧠 CVE-2025-53770 : Critical SharePoint RCE Vulnerability Exploited via ViewState Forgery 📌 Vulnerability Overview Type : Remote Code Execution RCE CVSS Score : 9.8 Critical Component : Microsoft SharePoint Server on-prem Root Cause : Insecure deserialization of ViewState data using stolen ASP.NET...

CVE-2018-11761

概述 在最近对Apache Tika的研究中，我发现其XML解析器存在一个DOS（拒绝服务）漏洞。该漏洞是由于解析器不正确地解析XML文档所致。 受影响版本 在ElasticSearch 6.3.1（使用Tika 1.18）和6.2.3（使用Tika 1.17）上测试 分析 众所周知，核心的ingest attachment插件通过使用Apache文本提取库Tika让Elasticsearch提取常见格式（如PPT、XLS和PDF）的文件附件。因此，让我们看一下ingest attachment插件的源代码。Java / subset of parsers for types we...

CVE-2024-36991

Splunk Path Traversal Exploit CVE-2024-36991 Description This is a Proof-of-Concept PoC exploit script for CVE-2024-36991 , a path traversal vulnerability affecting Splunk Enterprise on Windows versions below: 9.2.2 9.1.5 9.0.10 The vulnerability allows unauthenticated attackers to access sensiti...

-Foxit-PDF-CVE-2023-27363-

This repository does not have a README...

PlasmaRAT

PlasmaRAT 远程访问木马RAT, 挖矿程序, DDoS 所有责任自负。 请仅将其用于研究目的。 功能 远程桌面 键盘记录器 DDoS 挖矿程序 启动项控制 网络连接查看 原生方法控制器...

NimicStack

NimicStack NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs. Whole project is based on the PoC shared by WithSecure Labs Compilation You can directly compile the source code with the following command: nim c -d=mingw --app=console --cpu=amd64...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf 是一款渗透测试/红队工具，由 Ed Williams 编写，用于使用 OpSec 安全技术从 Windows 工作站、服务器和域控制器中检索哈希和凭据。 观看我们的 YouTube 频道上的视频...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

mwcfg

Malware Configuration Extractor A Malware Configuration Extraction Tool and Modules for MalDuck This project is FREE as in FREE 🍺, use it commercially, privately or however you see fit. The easiest way to use this project is to visit mwcfg.info, and start extracting malware config right away! If...

mwcfg

Extractor de Configuración de Malware...

api_wordlist

apiwordlist Una lista de palabras con nombres de API utilizada para el fuzzing de APIs de aplicaciones web. Contenido apiseeninwild.txt - Contiene nombres de funciones de API que he visto en la naturaleza. actions.txt - Todos los verbos de nombres de funciones de API objects.txt - Todos los...

YARA-Performance-Guidelines

Guías de rendimiento de YARA Escribir reglas YARA eficientes es esencial para mantener un velocidad de escaneo rápida y precisa. Esta guía proporciona principios clave y mejores prácticas para ayudarte a optimizar tus reglas, reducir cálculos innecesarios y evitar errores comunes. Incorpora...

XMachOViewer

XMachOViewer Overview XMachOViewer is a Mach-O viewer for Windows, Linux, and macOS. Features Heuristic Scan : Automatically detect various characteristics and anomalies in Mach-O files. String Viewer : Display all readable strings within the Mach-O file. Hex Viewer : Inspect the raw hexadecimal...

CVE-2023-2523

CVE-2023-2523 CVE-2023-2523...

mkpath

mkpath Make URL path combinations using a wordlist Read a wordlist file and generate path combinations for given domain or list of domains. Input from wordlist file is lowercased and unique words are processed. Additionally, wordlist can be filtered using regex. When you use mkpath's -l parameter...