smuggler

root@kitploit: / | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler An HTTP Request Smuggling / Desync testing tool written in Python 3 Acknowledgements A special thanks to James Kettle for his research and methods into HTTP desyncs And a special thanks to...

gf

gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: root@kitploit: ▶ grep -HnrE...

Bin-Finder

描述 该工具用于查找已加载某个特定二进制文件的进程，或未加载该二进制文件的进程。这在以下场景中非常有用： 它可以检测未加载特定 EDR/AV DLL 的进程，从而帮助发现 EDR 的例外项。 它可以以极低的跨进程活动量获取特定进程的 PID（例如，查找加载了 c:\windows\sytem32\lsass.exe 的进程即可获得 Lsass 的 PID）。 它可以获取服务或 RPC/COM 服务器的 PID，而无需遍历每个正在运行的 svchost 进程。 你也许能发现该工具的其他有价值的用法。以上结果的获取无需遍历系统中的所有进程 ，且噪音更低。 该工具通过使用...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nvdimm: Fixed scenarios where firmware activation led to deadlocks. Lockdep reports the following deadlock scenarios for CXL root devices: - power-management, deviceprepare, operations, and deviceshutdown operations for...

Reporting from Vegas: Networking, AI, and good boys

Welcome to this week's edition of the Threat Source newsletter. Howdy friends, and hello from Cisco Live U.S., here in sunny and very hot Las Vegas! An interesting quirk of being sent to one of these events is you learn to understand your limits as a person. Cisco Live is a three-day event, and i...

From Ransomware to Residency: Inside the Rise of the Digital Parasite

Are ransomware and encryption still the defining signals of modern cyberattacks, or has the industry been too fixated on noise while missing a more dangerous shift happening quietly all around them? According to Picus Labs’ new Red Report 2026, which analyzed over 1.1 million malicious files and...

Malicious code in quiet_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c21bb6b4620573089017e0b7264ddda04a7cfb7c877d0c70d1df1727c32dd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129673 Malicious code in quiet_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c21bb6b4620573089017e0b7264ddda04a7cfb7c877d0c70d1df1727c32dd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116645 Malicious code in quiet_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a833ebc7e73a613bd8eae2a9119755189ce97df92766e4c44dc8ccedbd6304a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet_deer-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d397db918c7c9262877eb0ce0bce8e8465071dd300ac841b38ef2739f195c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107660 Malicious code in quiet_gibbon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063b6ee1e609942b1c6f980503a4beeebc15fa78719026c8f099112fc2e18653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77533

Malicious code in quietmarlingray-99 npm...

Malicious code in quiet_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158ef91b4278969b7c78df625b58aadebcf851ddf8a5c4cdeb2716835f6190be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-62390

Malicious code in quiettermitez3n npm...

EUVD-2025-62389

Malicious code in quietwoodpeckerz3n npm...

MAL-2025-89887 Malicious code in quiet_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44a35845c0807a13ce3b3503cb53ddf09fb1014dbc9d6e6debd34bad05d9efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-67367

Malicious code in quietbasiliskz3n npm...

EUVD-2025-52506

Malicious code in quiet-silver-goat npm...

EUVD-2025-52509

Malicious code in quiet-amethyst-swift npm...

MAL-2025-70143 Malicious code in quiet-silver-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e857e75436012cd93ae040b6b7d28b0519a8635530c9d5578b7be6cd23ea2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...