b374k

b374k shell 3.2 This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser Features : File manager view, edit, rename, delete, upload, download, archiver, etc Search file,...

b374k

b374k shell 3.2 这个 PHP Shell 是一个有用的工具，供系统或网络管理员进行远程管理，无需使用 cpanel、通过 ssh、ftp 等方式连接。所有操作均在 Web 浏览器中完成 功能： 文件管理器（查看、编辑、重命名、删除、上传、下载、打包等） 搜索文件、文件内容、文件夹（也可使用正则表达式） 命令执行 脚本执行（php、perl、python、ruby、java、node.js、c） 通过绑定/反弹 shell 连接提供 shell 简单的数据包构建器 连接 DBMS（mysql、mssql、oracle、sqlite、postgresql 以及更多使用 ODB...

PCLink

PCLink Server The secure backbone for your personal PC remote control ecosystem. PCLink is a modern, web-first server designed for secure remote PC management and high-performance screen streaming. Featuring a high-performance FastAPI backend, a responsive Web UI, and an extensible plugin system...

evil-winrm

Evil-WinRM !Version-shield !Ruby2.3-shield !Gem-Version !License-shield !Docker-shield 用于黑客/渗透测试的终极 WinRM 外壳 描述与用途 该外壳是用于黑客/渗透测试的终极 WinRM 外壳。 WinRM（Windows 远程管理）是微软对 WS-Management 协议的实现。它是一种基于 SOAP 的标准协议， 允许来自不同供应商的硬件和操作系统进行互操作。微软将其包含在其操作系统中， 以便让系统管理员的工作更加轻松。 该程序可用于任何启用了此功能（通常位于端口 5985）的 Microsof...

EvilWinRM-NG

EvilWinRM-NG 开始上手 为了让您轻松上手 GitLab，这里列出了一些推荐的下一步操作。 已经是专家了？直接编辑这个 README.md 并让它成为您自己的。想简单点？使用底部的模板！ 添加文件 创建 或 上传 文件 通过命令行添加文件 或使用以下命令推送现有的 Git 仓库： cd existingrepo git remote add origin https://gitlab.com/ceald1/evilwinrm-ng.git git branch -M main git push -uf origin main 与您的工具集成 设置项目集成 与您的团队协作...

DFIR_Resources_REvil_Kaseya

DFIR专业人员应对REvil勒索软件Kaseya供应链攻击的资源 昨天，Sophos和Huntress Labs发现，MSP常用的远程管理提供商Kaseya遭到入侵，从而发动了供应链勒索软件攻击。大量组织受到影响，包括瑞典CoOp超市连锁店暂时关闭了800家门店。 我们在Github上提供了一些资源，可能有助于数字取证和事件响应专家在周末应对这些攻击： 取证分析与报告 恶意软件样本 反编译的恶意软件样本（通过retdec） 来自受感染系统的网络流量捕获PCAP 入侵指标与Yara规则 配置与勒索信 来自受感染系统的完整磁盘捕获（参见发布版）...

CVE-2024-57972

Autores Tânia Silva, António Pinto, Pedro Pinto y Sara Paiva Denegación de servicio en HoloLens a través de las funcionalidades de Device Portal Un ataque de denegación de servicio DoS tiene como objetivo sobrecargar un sistema objetivo hasta que gradualmente deja de poder responder a todas las...

Tenda AC1200 V-W15Ev2 - Authentication Bypass

The Tenda AC1200 V-W15Ev2 router is affected by improper authorization/improper session management. The software does not perform or incorrectly perform an authorization check when a user attempts to access a resource or perform an action. This allows the router's login page to be bypassed. The...

server

Ulterius: Easy Remote Management Interested in sublicensing? Want to use our code in your stack or rebrand it for internal use? Reach out to us at [email protected] Ulterius is a tool that allows unfettered access to a Windows system via a remote web interface. This program allows you to sta...

LOLRMM

LOLRMM - Living Off the Land Remote Monitoring and Management 🖥️🔍 Welcome to LOLRMM Living Off the Land Remote Monitoring and Management, a community-driven project that provides a curated list of Remote Monitoring and Management RMM tools that could potentially be abused by threat actors. Our...

3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials

An attacker was operating inside the network of 3BB , one of Thailand's largest broadband providers, and maintained remote control of internal machines using a legitimate management tool called MeshCentral, threat intelligence firm Hunt.io said. The company uncovered the intrusion by examining a...

CVE-2026-51650

Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain remote-management enablement and port information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51650

Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain remote-management enablement and port information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51650

Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain remote-management enablement and port information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83215

Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain remote-management enablement and port information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51650: Improper Access Control

Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain remote-management enablement and port information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67884

Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain remote-management enablement and port information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-68302

In the Linux kernel, the following vulnerability has been resolved: amt: re-read skb header pointers after every pull Several AMT receive and transmit paths cache a pointer into the skb head iphdr, ipv6hdr, ethhdr or the AMT message header and then call a helper that can reallocate that head befo...

CVE-2026-68425

CVE-2026-68425 concerns the Linux kernel InfiniBand MAD path (IB/mad). The vulnerability arises when kernel-handled RMPP receive processing begins reassembly for DATA responses before matching the response to an outstanding send, enabling a reordered burst to reach receive-side insertion without ...

CVE-2026-68302

CVE-2026-68302 is a Linux kernel issue in the Adjacency Management Protocol (AMT) implementation. Several AMT receive/transmit paths cache skb header pointers (ip_hdr, ipv6_hdr, eth_hdr, or AMT header) and a later helper can reallocate the skb head, making cached pointers invalid (use-after-free)...