whoc

whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...

CVE-2025-63408

CVE-2025-63408 path-traversal.py: Una reimplementación de https://github.com/eric-m-holub/double-agent/blob/main/doubleagent.py Utiliza UUIDs como parte del nombre de archivo solicitado para evitar que el servidor remoto se bloquee después de la primera explotación de path traversal. run.py /...

wotop

Web-On-Top-Of-Protocol WOTOP ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a tool meant to...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

CVE-2022-29464

Exploit CVE-2022-29464 Este repositorio contiene un script para explotar la vulnerabilidad CVE-2022-29464, que permite subir archivos a servidores vulnerables. Úsalo únicamente en entornos autorizados y con fines educativos. Requisitos Python 3.8 o superior Instalación Paso 1: Clonar el repositor...

CVE-2014-6271

Probador de CVE-2014-6271 Bash Shellshock y Aftershock para Ansible 1. Instalar Ansible http://docs.ansible.com/introinstallation.html 2. Agregar servidores al archivo de inventario ejemplo: username@ip 3. Copiar tu clave pública a .ssh/authorizedkeys de los servidores remotos 4. ejecutar prueba ...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

CVE-2023-23752

Binarios para CVE-2023-23752 Solo con fines éticos y educativos 😉 Uso CVE-2023-23752 -u http://someserverexample.com Compilar desde el código fuente Go Si tienes Go instalado, haz: git clone https://github.com/gunzf0x/CVE-2023-23752.git cd CVE-2023-23752 go run main.go -u...

telegram-c2

Telegram C2 通过 Telegram 机器人控制服务器。 安装 Tutorial Video 创建一个 Telegram 机器人 编辑 main.py，将 BOTAPIKEY 设置为机器人的 api key，将 telegramuserid 设置为你的 Telegram ID 安装以下依赖 pip install -r requirements.txt 编译为独立可执行文件以便于部署 pip install -U pyinstaller pyinstaller main.py 部署到目标机器 启动 Telegram 机器人 用法 /start - 启动 Telegram 机器人...

sshtunnel

|CircleCI| |AppVeyor| |readthedocs| |coveralls| |version| |pyversions| |license| Author : Pahaz Repo : https://github.com/pahaz/sshtunnel/ Inspired by https://github.com/jmagnusson/bgtunnel, which doesn't work on Windows. See also: https://github.com/paramiko/paramiko/blob/master/demos/forward.py...

CVE-2023-39141-LFI-enumerator

Enumerar archivos de servidor remoto explotando CVE-2023-39141 Ver POC: https://gist.github.com/JafarAkhondali/528fe6c548b78f454911fb866b23f66e...

CVE-2025-6514

mcp-remote Conecta un Cliente MCP que solo soporta servidores locales stdio a un Servidor MCP Remoto, con soporte de autenticación: Nota: esto es una prueba de concepto funcional pero debe considerarse experimental. ¿Por qué es necesario? Hasta ahora, la mayoría de los servidores MCP existentes s...

Security Bulletin: WebSphere Application Server, which is bundled with IBM WebSphere Remote Server, is affected by an HTTP request smuggling vulnerability (CVE-2026-11710)

Summary WebSphere Application Server is shipped with IBM WebSphere Remote Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

Security Bulletin: WebSphere Application Server, which is bundled with IBM WebSphere Remote Server, is affected by a privilege escalation (CVE-2026-11545)

Summary WebSphere Application Server is shipped with IBM WebSphere Remote Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

PT-2026-96124

Name of the Vulnerable Software and Affected Versions CuteNews version 2.1.2 Description An unrestricted file upload issue exists in the core/modules/media.php file. Remote authenticated users with access to the Media Manager panel can upload files of dangerous types to execute arbitrary code...

EUVD-2026-81696

In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion encodelayoutstatsmaxsz budgets XDRQUADLENPNFSLAYOUTSTATSMAXSIZE, i.e. 256 bytes, for the layoutupdate4 body written by the layout driver. The flexfiles record can exceed that...

OESA-2026-3733 git security update

Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Git is easy to learn and has a tiny footprint with lightning fast performance. It outclasses SCM tools like Subversion, CVS, Perforce, and...

Astra Linux - Vulnerability in Squid

A vulnerability was discovered in Squid 4.x versions prior to 4.15 and 5.x versions prior to 5.0.6. If a remote server sends a specific response header via HTTP or HTTPS, it results in a denial of service. This header could plausibly occur in normal network traffic...

Astra Linux – Vulnerability in Python 3.7, Python 2.7

A flaw was discovered in Python. Improper handling of HTTP responses in the Python HTTP client code may allow a remote attacker, who controls the HTTP server, to cause the client script to enter an infinite loop, consuming CPU resources. The greatest threat of this vulnerability is to system...

CVE-2026-78254

A flaw was found in Apache Ant. The ftp and scp tasks, used for downloading files, are vulnerable to a path traversal issue. A malicious remote server can exploit this by providing specially crafted relative paths, allowing it to write files outside the intended download directory. This could lea...