291 matches found
CVE-2026-54686-poc
CVE-2026-54686: PoC de suplantaciĆ³n de hooks del ciclo de vida DCS de Warp VersiĆ³n en inglĆ©s Resumen Este repositorio es un PoC local seguro de CVE-2026-54686 basado en el advisory pĆŗblico de Warp GHSA-9w2v-jhww-vm85. Las versiones de Warp anteriores a la correcciĆ³n no verificaban si algunos hook...
pwncat
pwncat pwncat es una plataforma de post-explotaciĆ³n para objetivos Linux. ComenzĆ³ como un envoltorio alrededor de shells bĆ”sicos bind y reverse y ha crecido desde entonces. Agiliza las operaciones comunes del equipo rojo mientras prepara cĆ³digo desde tu mĆ”quina atacante, no desde el objetivo...
penelope
Penelope is a modern shell handler for penetration testers and CTF players. It provides a more capable alternative to basic netcat listeners, adding automatic PTY upgrades, session management, logging, file transfers and helper modules. Table of Contents š„ Installation āļø Features š„ļø Session...
penelope
Penelope es un moderno manejador de shells para pentesters y jugadores de CTF. Proporciona una alternativa mĆ”s capaz a los oyentes bĆ”sicos de netcat, aƱadiendo actualizaciĆ³n automĆ”tica de PTY, gestiĆ³n de sesiones, registro, transferencias de archivos y mĆ³dulos auxiliares. Tabla de contenidos š„...
pentestkoala
Koala is a patched version of the dropbear SSH server that instead of binding to a port opens up reverse shells by connecting to a remote client. This is useful for gaining a pty terminal on an exploited machine and also for secure exfiltration of data via SSH port forwarding. Pivoting can also b...
Heroinn
Heroinn A cross platform C2/post-exploitation framework implementation by Rust. This project is for research and study purposes only, and any illegal behavior using this project has nothing to do with this project. Features GUI Interactive PTY shell System infomations collect File manager support...
CVE-2026-39987
CVE-2026-39987 ā Marimo Pre-Auth RCE /terminal/ws CVSS 4.0 : 9.3 CRITICAL CVSS 3.x : 9.8 CRITICAL CWE : CWE-306 Missing Authentication for Critical Function Fix : Marimo 0.23.0+ Affects : Marimo Lab / authorized testing only HTB, CTF, engagement with written scope. Table of contents Vulnerability...
CVE-2026-39987
CVE-2026-39987 For Marimo 0.20.4 PoC ā ļø This tool is intended for educational purposes and authorized security testing only. The creator is not responsible for any unauthorized or illegal use. Use at your own risk. ā ļø Info: CVE-2026-39987 is a critical pre-authentication Remote Code Execution RCE...
CVE-2026-39987_POC
PoC ā CVE-2026-39987 Ā· Marimo Pre-Auth RCE CVSS 4.0: 9.3 Critical Ā· AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H Affects: marimo 2 calls to validateauth. terminal.py - 0 @requires, 0 validateauth. -- the flaw. The AuthBackend middleware protects HTTP and the /ws websocket, but /terminal/ws accepts the...
CVE-2026-39987
CVE-2026-39987 ā Marimo Pre-Auth RCE via Terminal WebSocket / / | / / / | \ / \ \ / / | // / \ / / | | / / // // / / // // \ / Status: Patched in 0.23.0 ā marimo-team/marimo@c24d480 Vulnerability The /terminal/ws endpoint lacks the validateauth call present in every other authenticated endpoint...
play-go-copy-fail-cve-2026-31431
Play Go Copy Fail CVE-2026-31431 Purpose Learn linux syscall low-level Port python and c into golang Craft own payload then exploit as newbie Auto upgrade pty manually Inspiration tgies/copy-fail-c painoob/Copy-Fail-Exploit-CVE-2026-31431 Resource Linux Source Crypto...
CVE-2026-39987_exploit
š„ CVE-2026-39987 | Marimo Pre-Auth RCE Exploit Exploitation Framework | Full Remote Code Execution RCE | WebSocket Auth Bypass š§ To know the commands more Open the file website.html šÆ Overview This exploit targets Marimo applications running WebSocket on port 2718 default. The vulnerability allow...
CVE-2026-39987
CVE-2026-39987 ā Marimo Python Notebook Pre-Authenticated Remote Code Execution TL;DR A pre-authenticated remote code execution vulnerability in Marimo , an open-source Python notebook for data science and AI/ML. The terminal WebSocket endpoint /terminal/ws completely skips authentication...
CVE-2026-39987
CVE-2026-39987 ā Marimo Pre-Auth RCE For educational and authorized security research purposes only. Description Pre-authenticated Remote Code Execution in Marimo = 0.20.4. The WebSocket endpoint /terminal/ws skips authentication validation, allowing an unauthenticated attacker to obtain a full...
Koi
koi š &color=rgb\255%2C%20116%2C%200\ This project is my shot at making a fast, easy to use yet feature rich shell handler with a pretty interface. Disclaimer: please note that this is still under development, and I am still working on some of the key features, talked about in this section. š Tab...
CVE-2026-39987-PoC
CVE-2026-39987 PoC Summary Marimo = 0.20.4 is affected by a pre-authentication RCE vulnerability in the /terminal/ws WebSocket endpoint. The endpoint checks the application mode and terminal support, but does not validate authentication before accepting the WebSocket connection. It then creates a...
UBUNTU-CVE-2026-91838
A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped...
CVE-2026-91838
A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped...
