Exploit for CVE-2026-90817

CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE Pyt...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

Exploit for CVE-2026-96512

abraxaslabs.tech · github.com/abraxas ·&...

kasld

KASLD recovers the Linux kernel's virtual and physical memory layout — primarily the kernel text base — from a local process. What it can recover is a function of that process's vantage: its privileges and capabilities, the system's configuration, and any container confinement. It recovers the ba...

webscreenshot

webscreenshot Description A simple script to screenshot a list of websites, based on the url-to-image PhantomJS script. Features Integrating url-to-image 'lazy-rendering' for AJAX resources Fully functional on Windows and Linux systems Cookie and custom HTTP header definition support for the...

webscreenshot

webscreenshot 描述 一个基于 url-to-image PhantomJS 脚本的简单工具，用于对网站列表进行截图。 功能 集成 url-to-image 的 '懒加载渲染' 以处理 AJAX 资源 在 Windows 和 Linux 系统上完全可用 支持为 PhantomJS 渲染器定义 Cookie 和自定义 HTTP 头 多进程处理，并在用户可定义的超时后终止无响应的进程 支持多种格式作为输入目标 自定义截图大小（宽度、高度）、格式和质量 映射 PhantomJS 的有用选项，如忽略 SSL 错误、代理定义和代理认证、HTTP 基本认证 支持多种渲染器：...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: root@kitploit: curl -sL...

hal

Welcome to HAL! HAL /hel/ is a comprehensive netlist reverse engineering and manipulation framework. Navigation 1. Introduction 2. Build Instructions 3. Quickstart Guide 4. Academic Context Introduction What the hell is HAL? Virtually all available research on netlist analysis operates on a...

CVE-2026-80432

A flaw was found in kitty. An authorization vulnerability allows a program running inside the terminal to access the contents of files dragged over the window, leading to unauthorized information disclosure. This issue occurs because the drag-and-drop handler fulfills file data requests without...

CVE-2026-95834

A flaw was found in kitty. A use-after-free vulnerability exists in the drag-and-drop protocol handler when an item transfer is prematurely aborted. A program running within the terminal window can supply a specially crafted byte stream to trigger an error path during data processing, causing the...

netlas-cookbook

Netlas CookBook The goal of this guide is to teach anyone interested in cybersecurity, regardless of their knowledge level, how to make the most of Netlas Search Tools. This is a long read. We have collected as many simple use cases as possible and demonstrated how to automate them. ⭐️ Give us a...

keyFinder

KeyFinder 被动式 API 密钥与机密信息发现工具，适用于 Chrome 和 Firefox KeyFinder 是一款适用于 Chrome 和 Firefox 的浏览器扩展，能被动扫描您访问的每个页面，检测泄露的 API 密钥、令牌、机密信息和凭据。它在后台静默运行，无需任何配置。 检测内容 KeyFinder 内置 80 多种检测模式 ，涵盖以下提供商的机密信息： 工作原理 KeyFinder 在每个页面上扫描 10 个不同的攻击面 ： 1. 脚本src 地址 - 检查所有脚本源 URL 中的关键词和查询参数中的令牌 2. 内联脚本 - 扫描 标签内容中的秘密模式 3...

NemoClaw

NVIDIA NemoClaw：OpenShell 中沙盒化 AI 代理的参考栈 NVIDIA NemoClaw 是一个开源参考栈，用于在 NVIDIA OpenShell 沙盒内更安全地运行始终在线的 AI 代理。它通过一个 CLI 提供引导式入门、强化蓝图、路由推理、网络策略和生命周期管理。 支持的代理： OpenClaw（默认） Hermes LangChain Deep Agents Code 有关功能、架构、安全控制和完整功能列表，请参阅 NemoClaw 文档。 开始使用 从编码代理开始 当您希望 Cursor、Claude Code、Codex、Copilot...

avet

AntiVirus Evasion Tool AVET is not being further developed due to technical development and time constraints. AVET is an AntiVirus Evasion Tool, which was developed for making life easier for pentesters and for experimenting with antivirus evasion techniques, as well as other methods used by...

bandwhich

bandwhich This is a CLI utility for displaying current network utilization by process, connection and remote IP/hostname Table of contents bandwhich Table of contents Project status How does it work? Installation Downstream packaging status Download a prebuilt binary Building from source...

Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities

Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2026-43871 DESCRIPTION: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift:...

jiopc-architecture-whitepaper

Architecture, Performance, and Security Analysis of JioPC Cloud Virtual Desktops A Comprehensive Technical Whitepaper & Engineering Evaluation Document Version : 2.0 Target Platform : JioPC Cloud Virtual Desktop Accops HyWorks / Microsoft Azure Classification : Technical Evaluation &...

RedTeam-Tools

RedTeam-Tools 此GitHub仓库包含150多个 可用于红队活动 的工具 和资源 。 部分工具可能专门为红队设计，其他则为通用工具，但可在红队语境下调整使用。 🔗 如果你是蓝队成员，请查看BlueTeam-Tools 警告 本仓库中的材料仅供信息和教育目的使用。禁止用于任何非法活动。 注意 使用箭头隐藏工具列表标题。 点击🔙返回列表。 工具列表 红队技巧 19条 通过鼠标移动事件监听器改进HTML走私 @pr0xylife 用于钓鱼的谷歌翻译 @malmoeb 隐藏本地管理员账户 @Alh4zr3d 通过删除签名削弱Windows Defender @Alh4zr3d...

CyberScan

CyberScan CyberScan 是一个开源渗透测试工具，可用于分析数据包、解码、端口扫描、ping 以及 IP 地理定位，包括（纬度、经度、地区、国家等） 屏幕截图 支持的操作系统 Windows XP/7/8/8.1/10 GNU/Linux MacOSX 安装 你可以通过 pip 安装 CyberScan，或者下载仓库 。 pip root@kitploit: $ pip install cyberscan 下载 CyberScan 仓库 你可以通过克隆 Git 仓库来下载 CyberScan： root@kitploit: git clone...

fscan

Fscan 中文 Comprehensive intranet scanning tool for automated vulnerability assessment. Version : 2.2.0 Features Scanning Host Discovery - ICMP/Ping alive detection, B/C segment statistics for large networks Port Scanning - TCP connect scan, 133 built-in ports, port groups web/db/service/all...