Dumpy

Описание Этот инструмент динамически вызывает MiniDumpWriteDump для дампа содержимого памяти lsass. Этот процесс выполняется без открытия нового дескриптора процесса для lsass и с использованием DInvokers, чтобы затруднить обнаружение его вредоносного поведения. Чтобы получить допустимый дескрипт...

CVE-2026-82553

A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is the function mysqliquery of the file studentdashboard.php of the component Student Dashboard. The manipulation of the argument rollno results in improper...

CVE-2026-82552

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngapamf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out...

CVE-2026-82551

A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngapamfhandlers.c of the component NGSetup Handler. Executing a manipulation can lead to state issue. The attack can be executed remotely. The exploit has been made available to the public...

rosenbridge

project:rosenbridge : hardware backdoors in x86 CPUs github.com/xoreaxeaxeax/rosenbridge // domas // @xoreaxeaxeax Overview project:rosenbridge reveals a hardware backdoor in some desktop, laptop, and embedded x86 processors. The backdoor allows ring 3 userland code to circumvent processor...

CVE-2026-82554

SourceCodester Queue Management System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /api/add_customer.php . Manipulating the Name parameter allows a remote, unauthenticated attacker to inject script, requiring user interaction to trigger. The impact is rated MEDIUM (C...

EUVD-2026-68276

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/addcustomer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

CVE-2026-82554 SourceCodester Queue Management System add_customer.php cross site scripting

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/addcustomer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...

dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...

CVE-2025-24071

CVE-2025-24071PoC CVE-2025-24071 : Fuite de hachage NTLM via extraction RAR/ZIP et fichier .library-ms L'Explorateur Windows initie automatiquement une requête d'authentification SMB lorsqu'un fichier .library-ms est extrait d'une archive .rar, ce qui entraîne la divulgation du hachage NTLM...

CVE-2025-4380

CVE-2025-4380 - Эксплойт Local File Inclusion LFI для плагина Ads Pro = 4.89 Описание Этот Python-эксплойт нацелен на плагин Ads Pro ≤ 4.89 для WordPress, уязвимый к Local File Inclusion LFI через AJAX-действие bsapreviewcallback. Неаутентифицированный злоумышленник может использовать эту...

inhale

Inhale - Malware Inhaler Inhale is a malware analysis and classification tool that is capable of automating and scaling many static analysis operations. This is the beta release version, for testing purposes, feedback, and community development. Background Inhale started as a series of small...

SysmonSimulator

SysmonSimulator SysmonSimulator est un utilitaire open source de simulation d'événements Windows créé en langage C, qui peut être utilisé pour simuler la plupart des attaques à l'aide des WINAPIs. Il peut être utilisé par les équipes Blue pour tester les détections EDR et les règles de corrélatio...

CVE-2025-30208

🔥 CVE-2025-30208 Vite — Сканер уязвимости произвольного чтения файлов Продвинутый сканер уязвимости CVE-2025-30208 с функциями корпоративного уровня Профессиональный инструмент для тестирования на проникновение для обнаружения уязвимости произвольного чтения файлов Vite 🚀 Быстрый старт • 📋...

meterpeter

Auteur : @r00t-3xp10it Version : v2.10.14 Distributions supportées : Windows x86|x64, Linux Inspiré par le travail de : '@ZHacker13 - ReverseTCPShell' :octocat: Liste des raccourcis Description du projet Liste des modules disponibles Dernière version de Meterpeter C2 Comment faire - Sous Linux...

apache__jspwiki_CVE-2019-10089_2-11-0-M4

Apache JSPWiki 2.11 — Документация root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

htcap

HTCAP htcap is a web application scanner able to crawl single page application SPA recursively by intercepting ajax calls and DOM changes. KEY FEATURES Recursive DOM crawling engine Discovers ajax/fetch/jsonp/websocket requests Supports cookies, proxy, custom headers, http auth and more Heuristic...

POC-S

POC-S: POC-T Strengthen Version POC-T Enhanced Edition Documentation for POC-T wiki is in the doc directory Preface: Currently Legal Disclaimer Using POC-S to attack targets without prior mutual consent is illegal. POC-S is intended for security testing purposes only. Features Compatible with POC...

ridenum

RIDENUM - A simple open source method for performing null session brute forces Copyright 2018 TrustedSec Written by: David Kennedy ReL1K Twitter: @HackingDave and @TrustedSec Website: https://www.trustedsec.com root@kitploit: . . . . . | \ | | | \ | || \ | | | | | | | / | | | | | | | .--. | | | |...