1690 matches found
buffalo
Buffalo Ein Python-3-Skript zur Durchführung von Wörterbuch-/Wortlistenangriffen auf einen Ziel-SSH-Server unter Verwendung von zwei Textdateien als Eingabe. Verfasst für meine technische Prüfung bei Intel. Installation Dieses Skript ist von Paramiko und Colorama abhängig. Installiere die...
google_socks
Questo script viene utilizzato per consentire a due socket di comunicare trasmettendo dati tramite Google Drive. Consulta questo post del blog per maggiori dettagli. Processo di configurazione Installa i moduli Python necessari vedi sotto Esegui "python2 ./googlesocks.py --setup" e segui le...
laf
laf Uno script Python che cerca pannelli di amministrazione/login su un determinato host o elenco di host. root@kitploit: usage: laf.py -h -d host -l hostfile|- -sys system -c cookie -u user -da -p pass -ic -k -v Find admin/login panel for a single host -d or a list of hosts -l. optional argument...
stackflow
stackflow Strumento universale per lo sfruttamento di buffer overflow basato su stack Usage root@kitploit: usage: ./stackflow.py OPTIONS optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST rhost -p RPORT, --rport RPORT rport -c CMDS, --cmds CMDS commands to send...
plugxdecoder
plugxdecoder Einfaches Python-Skript, das PlugX-Verkehr und verschlüsselte/komprimierte Artefakte dekodiert. Pull-Requests von denen, die beitragen möchten, werden akzeptiert. Derzeit benötigt: CTypes mit ntdll, dpkt http://code.google.com/p/dpkt Getestet mit Python 2.7 unter Windows. Langfristig...
Aggressor-Aggregator
Aggressor Aggregator Descrizione Uno script di supporto per consolidare i repository di Aggressor Script e Beacon Object File BOF in un unico CNA per Cobalt Strike. Progettato per l'automazione in ambienti red team CTF con configurazione/distruzione frequente dei client degli operatori. Questo...
detect_bluekeep.py
detectbluekeep.py Python-Skript zur Erkennung der Sicherheitslücke Bluekeep - CVE-2019-0708 - mit TLS/SSL-Unterstützung Arbeit basierend auf dem Metasploit-Modul von @zerosum0x0 https://github.com/zerosum0x0/CVE-2019-0708 RC4 übernommen von https://github.com/DavidBuchanan314/rc4 Voraussetzungen...
VulnCheck KEV: CVE-2024-37014
Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...
EUVD-2026-41736
A vulnerability was determined in AD-Security ADMiner 1.9.0. Affected is the function requesta of the file adminer/scripts/analysecache.py of the component Cache Handler. This manipulation of the argument sys.argv1 causes deserialization. The attack can only be executed locally. The pull request ...
PT-2026-55214
Name of the Vulnerable Software and Affected Versions neuro-cortex-memory versions 3.17.0 and later Description Local arbitrary code execution is possible because the server treats the CLAUDE PROJECT DIR environment variable as a trusted source root. When the open visualization tool is invoked, t...
PYSEC-2026-477 PraisonAI has critical RCE via `type: job` workflow YAML
praisonai workflow run loads untrusted YAML and if type: job executes steps through JobWorkflowExecutor in jobworkflow.py. This supports: - run: → shell command execution via subprocess.run - script: → inline Python execution via exec - python: → arbitrary Python script execution A malicious YAML...
PYSEC-2026-488 PraisonAI has critical RCE via `type: job` workflow YAML
praisonai workflow run loads untrusted YAML and if type: job executes steps through JobWorkflowExecutor in jobworkflow.py. This supports: - run: → shell command execution via subprocess.run - script: → inline Python execution via exec - python: → arbitrary Python script execution A malicious YAML...
Exploit for Uncontrolled Resource Consumption in Solarwinds Serv-U
SolarWinds Serv-U Unauthenticated DoS: Safe Detection Script...
injection_exploit
Injection Exploit SQLi 6 engines + SSTI 11 engines — GET/...
CVE-2026-41265
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific flaw exists within the run method of the AirtableAgents class. The issue results from the lack of proper sandboxing when evaluating an LLM generated python script. Using prompt...
DMonitor 1.0.3 Outbound Connection / Port Configuration Auditor
This Python script is an outbound connection and port configuration auditor for DMonitor version 1.0.3...
Malicious code in ethers-signing-key (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6735be7311be4f6b4f609762cfb77504fe141bc9d8d5b5c0a75d521119aa2fa The package's npm postinstall hook executes a one-liner that uses childprocess.exec to curl/wget an unpinned Python script from a personal user's...
MAL-2026-3761 Malicious code in ethers-signing-key (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6735be7311be4f6b4f609762cfb77504fe141bc9d8d5b5c0a75d521119aa2fa The package's npm postinstall hook executes a one-liner that uses childprocess.exec to curl/wget an unpinned Python script from a personal user's...
Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation
Google on Monday disclosed that it identified an unknown threat actor using a zero-day exploit that it said was likely developed with an artificial intelligence AI system, marking the first time the technology has been put to use in the wild in a malicious context for vulnerability discovery and...