protections-artifacts

Protections Artifacts Elastic Security prevents ransomware and malware, detects advanced threats, and arms responders with vital context. It’s free and open, ready for every endpoint. Protections-Artifacts is the home of our detection logic rules, yara, etc for Elastic Security for endpoint. At...

CVE-2020-24227

CVE-2020-24227 Playground Sessions — хранение учётных данных пользователей в открытом виде Playground Sessions v2.5.582 и более ранние версии для Windows хранит учётные данные пользователей в открытом текстовом виде, что позволяет любому, имеющему доступ к C:\Users\AppData\Roaming\Playground\Loca...

NetSpy

NetSpyC2 NetSpyC2 - это сервер управления и контроля C2 на Python, созданный для образовательных целей, исследований в области безопасности и контролируемых лабораторных сред. Проект демонстрирует, как можно реализовать зашифрованную связь между клиентом и сервером, управление сессиями и безопасн...

c2-cloud

About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...

TelemetrySourcerer

텔레메트리 소서러 소개 Telemetry Sourcerer는 Windows에서 AV/EDR이 사용하는 일반적인 텔레메트리 소스를 열거하고 비활성화할 수 있습니다. 레드 팀원과 보안 애호가는 연구실 환경에서 이 도구를 사용하여 다음을 수행할 수 있습니다: 상대하는 제품의 수집 기반 사각지대를 식별합니다. 특정 유형의 이벤트를 생성하는 텔레메트리 소스를 확인합니다. 도구의 변조 기능 사용이 탐지로 이어질 수 있는지 검증합니다. 개인 연구실 구축에 대한 자세한 내용은 제 게시물인 EDR 텔레메트리를 개인 인프라로 전환하기를 참고하세...

penelope

Penelope is a modern shell handler for penetration testers and CTF players. It provides a more capable alternative to basic netcat listeners, adding automatic PTY upgrades, session management, logging, file transfers and helper modules. Table of Contents 📥 Installation ⚙️ Features 🖥️ Session...

ridrelay

RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...

psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

SessionGopher

Copyright 2017 FireEye, Brandon Arvanaghi @arvanaghi가 제작 Apache License, Version 2.0 이하 "라이선스"에 따라 라이선스가 부여됩니다. 이 라이선스의 준수 없이 이 파일을 사용할 수 없습니다. 라이선스 사본은 다음에서 얻을 수 있습니다. root@kitploit: http://www.apache.org/licenses/LICENSE-2.0 적용 법률에 의해 요구되거나 서면으로 동의하지 않는 한, 라이선스에 따라 배포되는 소프트웨어는 "있는 그대로" 배포되며,...

essh

root@kitploit: ███████╗███████╗███████╗██╗ ██╗ ██╔════╝██╔════╝██╔════╝██║ ██║ █████╗ ███████╗███████╗███████║ ██╔══╝ ╚════██║╚════██║██╔══██║ ███████╗███████║███████║██║ ██║ ╚══════╝╚══════╝╚══════╝╚═╝ ╚═╝ Enhanced SSH for people with fleets Чистый Rust SSH-клиент с плотным TUI в стиле Netwatch...

CVE-2026-87916

The WPBot WordPress plugin before 8.6.0 does not perform any capability or nonce check on the AJAX action that lists stored chat sessions, allowing unauthenticated attackers to retrieve the name, email address and phone number of every chat visitor by requesting a wide date range...

CVE-2026-87916 WPBot 8.4.9 - 8.5.9 - Unauthenticated Chat Visitor PII Disclosure

The WPBot WordPress plugin before 8.6.0 does not perform any capability or nonce check on the AJAX action that lists stored chat sessions, allowing unauthenticated attackers to retrieve the name, email address and phone number of every chat visitor by requesting a wide date range...

paradoxiaRAT

Paradoxia 원격 접속 도구. GUI 대안을 찾고 계신가요?Remote Hacker Probe를 확인해보세요. 더욱 발전되고 안정적이며 많은 기능을 제공합니다. 기능 Paradoxia 콘솔 기능| 설명 ---|--- 사용하기 쉬움| Paradoxia는 사용하기 매우 쉽습니다. 지금까지 가장 쉬운 RAT입니다! 루트 쉘| - 자동 클라이언트 빌드| 원하는 아이콘을 포함하거나 포함하지 않고 Paradoxia 클라이언트를 쉽게 빌드합니다. 멀티스레드| 멀티스레드 콘솔 서버, 여러 세션을 얻을 수 있습니다. 토스트 알림| 새 세...

idamcp

IDA Pro MCP Server This project provides a Model Context Protocol MCP server for integrating IDA Pro with AI agents like Gemini, Claude, and Jetski. It features a gateway-based proxy architecture, an embedded relational SQLite query engine, and headless session management to support advanced...

Lightdash v0.1024.6 - Server-Side Request Forgery

Server-Side Request Forgery “SSRF” in the export dashboard functionality of Lightdash version 0.1024.6 allows remote authenticated threat actors to obtain the session cookie of any user who exports a crafted dashboard. When they are exported, dashboards containing HTML elements can trigger HTTP...

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 is vulnerable to cross-site scripting via the segments/add.php Segment Name field. id: CVE-2018-1000856 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 is vulnerable to cross-site scripting via the...

WP Sessions Time Monitoring Full Automatic <= 1.0.8 - SQL Injection

The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to SQL Injection via request parameters in all versions up to, and including, 1.0.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make...

RemoteSessionEnum

Blog: https://0xv1n.github.io/posts/sessionenumeration/ Целью этого проекта была попытка воспроизвести функциональность qwinsta /server: с использованием мало документированного API Windows Station WinSta...

CVE-2024-49681

CVE-2024-49681 WP Sessions Time Monitoring Full Automatic = 1.0.9 - Неавторизованная SQL-инъекция Описание: Плагин WP Sessions Time Monitoring Full Automatic для WordPress уязвим к SQL-инъекции в версиях до 1.0.9 включительно из-за недостаточного экранирования пользовательского параметра и...

CVE-2019-5420

CVE-2019-5420 Ruby-on-Rails предлагает три различные среды, в которых он может работать: разработка, тестирование и продакшен. Разумеется, код, работающий в среде разработки или тестирования, не должен быть доступен в интернете, но как всегда это происходит например, в staging-средах. Ruby-on-Rai...