3075851 matches found
gtunnel
La documentación se puede encontrar en: https://hotnops.gitbook.io/gtunnel/...
lynis
Documentación ¿Te gusta este software? Marca la estrella del proyecto y conviértete en un stargazer. lynis Lynis - Herramienta de auditoría de seguridad y hardening para sistemas basados en UNIX. Lynis es una herramienta de auditoría de seguridad para sistemas basados en UNIX como Linux, macOS, B...
certbot
.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...
CVE-2026-31908
CVE-2026-31908 - Apache APISIX Header Injection Exploit 📋 Overview This is a Proof of Concept PoC exploit for CVE-2026-31908 , a critical header injection vulnerability discovered in Apache APISIX versions 2.12.0 through 3.15.0. The vulnerability exists in the forward-auth plugin, where improper...
CVE-2023-28432_docker
CVE-2023-28432docker Test environments for CVE-2023-28432, information disclosure in MinIO clusters. The directories provide different versions / configurations for a MinIO cluster:...
CVE-2023-44770_ZenarioCMS--Reflected-XSS---Organizer-Alias
ZenarioCMS Reflected XSS v.9.4.59197 Author: Sergio Description: Cross Site Scripting vulnerability in ZenarioCMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Organizer - Spare alias. Attack Vectors: Scripting a vulnerability in the sanitization of the...
CVE-2024-32002
CVE-2024-32002 A Reverse shell generator for gitlab-shell vulnerability cve 2024-32002 This is still in the testing phase and I will update it once done...
CVE-2026-41940
CVE-2026-41940 - WHM/cPanel Authentication Bypass Mass Exploit 📋 Description CVE-2026-41940 is a critical authentication bypass vulnerability in WHM/cPanel that allows attackers to bypass authentication and gain root access to a server without valid credentials. The vulnerability leverages CRLF...
CVE-2025-61922-PoC
CVE-2025-61922 Exploit: PrestaShop Checkout Account Takeover A simple, educational proof-of-concept script demonstrating the zero-click account takeover vulnerability in the PrestaShop Checkout module CVE-2025-61922. ⚠️ Legal & Ethical Notice: Use Responsibly This tool is for educational purposes...
RawrXDA
🎉 announcing dotenvx. run anywhere, multi-environment, encrypted envs. Dotenv es apoyado por la comunidad. Gracias espaciales a: Graphite is the AI developer productivity platform helping teams on GitHub ship higher quality software, faster. dotenv Dotenv es un módulo de dependencia cero que carg...
advisories
advisories "Testing can prove the presence of bugs, but not their absence." -- Edsger W. Dijkstra A collection of my public security advisories. See also https://github.com/hnsecurity/vulns https://hnsecurity.it/blog/author/marco-ivaldi/ Advisories Linux CVE-2006-1242. Linux kernel IP ID...
GG-AESY
Entrada del blog: https://redteamer.tips/introducing-gg-aesy-a-stegocryptor/ ADVERTENCIA: puede que necesites restaurar los paquetes NuGet y reiniciar Visual Studio antes de compilar. Si alguien sabe cómo puedo deshacerme de este problema, envíame un DM. Manual Para empezar, recomiendo...
JKS-private-key-cracker-hashcat
JKS private key cracker - Clavo en el ataúd de JKS El Java Key Store JKS es la forma que tiene Java de almacenar una o varias claves criptográficas privadas y públicas para criptografía asimétrica en un archivo. Si bien existen varios formatos de almacén de claves, Java y Android todavía usan por...
CVE-2021-41773-POC
CVE-2021-41773-POC CVE-2021-41773 の POC およびラボ構築ドキュメント CVE-2021-41773 とは? CVE-2021-41773 は、Apache HTTP サーバー 2.4.49 および 2.4.50 に存在するパストラバーサル パス横断 の脆弱性です。この脆弱性は、このバージョンで導入されたパス正規化 コードの更新を悪用します。 root@kitploit: パス正規化関数: 通常、パス正規化は URL パスを標準形式にフィルタリングし、攻撃者による悪意のある行為を防ぎます。 Apache HTTP Server 2.4.49...
CVE-2023-43144
CVE-2023-43144 Descripción Assets Management System 1.0 es vulnerable a inyección SQL a través del parámetro id en delete.php PoC root@kitploit: sqlmap -u 'http://localhost/delete.php?id=4' --cookie="PHPSESSID=SESSID" --dbms=MySQL --dbs --batch Revisión de código delete.php root@kitploit: ?php...
CVE-2018-6574-go-get-RCE
CVE-2018-6574-go-get-RCE この問題は、パッケージのインストール時にGolangがネイティブ拡張をビルドするという事実に起因します。これにより、コンパイラに追加フラグを渡してコード実行を行うことが可能になります。例えば、CFLAGSを使用できます。 以下のコマンドを使用してビルドできます： $ gcc -shared -o attack.so -fPIC attack.c 完全なペイロードをGithubにホストしたら、パッケージリンクを被害者に渡すことができます。...
CVE-2026-41651
🚨 CVE-2026-41651 — Pack2TheRoot Privilege Escalation Vulnerability in PackageKit TOCTOU Race Condition 📌 Overview CVE-2026-41651 is a local privilege escalation vulnerability affecting the PackageKit system service used in various Linux distributions. The vulnerability is caused by a Time-of-Chec...
QuasarNix
QuasarNix: Adversarially Robust Living-off-the-Land Reverse-Shell Detection Dmitrijs Trizna · Luca Demetrio · Battista Biggio · Fabio Roli Overview Linux living-off-the-land LOTL reverse shells abuse legitimate binaries bash, python, nc, … to establish covert outbound connections, making...
SuperDiagnosticTool
SuperDiagnosticTool AI-Powered Windows Diagnostic & Self-Healing Tool SuperDiagnosticTool is an intelligent system diagnostic utility that combines real-time hardware telemetry with Google Gemini AI to analyze, diagnose, and automatically remediate Windows system issues. Built with a safety-first...