msfconsole-termux

msfconsole-termux How To Install Metasploit-Table on the Android Termux pkg update apt-get install curl wget -y wget https://raw.githubusercontent.com/jas502n/msfconsole-termux/master/metasploit.sh |chmod 777 metasploit.sh && ./metasploit.sh EXP msfconsole -q -x "use...

CVE-2020-2551

CVE-2020-2551 The setup script of this project has been tested on version 10.3.6, version 12 has not been tested. Environment kali+weblogic10.3.6+jdk6u25 Ensure the machine deploying weblogic has at least 1.5G of memory, because the script specifies -x1024m in its parameters. Usage Deploy weblogi...

CVE-2022-23808

phpMyAdmin Exploit Exploit Title : phpMyAdmin 5.1.1 - XSS Cross-site Scripting Exploit Author : Dipak Panchal @th3.d1p4k Vendor Homepage : https://www.phpmyadmin.net Software Link : https://www.phpmyadmin.net/files/5.1.1/ Affected Versions : phpMyAdmin versions of the 5.1 branch prior to 5.1.2 ar...

Kali-Setup

Kali Customize Script This script idea was originally taken from g0tmi1k https://github.com/g0tmi1k/os-scripts. I do not claim credit for the basis of the script! That said, I have added a TON more tools and fixed a lot of errors with the original version. I maintain this and keep it updated to h...

Firmware-CVE-2025-7545

Preparing to download the repository 1. Update packages: sudo apt-get update 2. If necessary, install git: sudo apt install -y git Downloading the repository, installing the vulnerable Binutils, and setting up the environment 1. Download the repository: git clone...

rex-sec-glibc

rex-ossec-base setup Will update the glibc files as are required. check Will check the glibc packages as they stand. task "setup", make Rex::Collectd::Base::setup; ;...

Setup IPsec VPN — Updated!

English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN Server Auto Setup Scripts Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. An IPsec VPN encrypts your network traffic, so that nobody between you and the VPN server can eavesdrop on your data as it...

MAL-2026-13619 Malicious code in atlas-internal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd4a17504623add1ff4f374ea9c2283d1eb5a863265e012592142b169cd9d90 setup.py overrides the egginfo command to execute automatically during pip install. The overridden command collects the installer's hostname, current...

MAL-2026-13540 Malicious code in delivery-ci-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8753c683761d897d4f95cbdc7567d80c8e455b1d4ade844d24f0367633806335 index.js unconditionally loads setup.js on require/import. setup.js assembles three Cloudflare Workers hostnames oob-worker.cf102-baf.workers.dev,...

Malicious code in boxy-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb29953971bb0c3eae94e97f7a9efe132bd4a954252ae52c989f990f389d098 index.js unconditionally requires./setup.js on module load. setup.js assembles Cloudflare Workers hostnames from split-string arrays...

Malicious code in custom-plugins-request-factory (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25a4c4f3672ed82aa59bcac3fff0c6eadcb3eb35add0f52155c4436cba62c52 The package's main entry auto-requires setup.js on load, which fetches a platform-specific executable from split-string-obfuscated Cloudflare Workers...

MAL-2026-12668 Malicious code in custom-plugins-request-factory (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25a4c4f3672ed82aa59bcac3fff0c6eadcb3eb35add0f52155c4436cba62c52 The package's main entry auto-requires setup.js on load, which fetches a platform-specific executable from split-string-obfuscated Cloudflare Workers...

MAL-2026-12081 Malicious code in bitcoinlib-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 32582a69a108bf3ab34d8bd16122918dd29a56bff6f68a771b77c6c946bf9308 During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category:...

Malicious code in @umacloud/cli-linux-musl-x64 (npm)

npm/@umacloud/cli-linux-musl-x64 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11891 Malicious code in @servicetitan/marketing-email-components (npm)

npm/@servicetitan/marketing-email-components is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...

MAL-2026-11911 Malicious code in @servicetitan/quick-actions (npm)

npm/@servicetitan/quick-actions is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11837 Malicious code in @servicetitan/carto-tokens (npm)

npm/@servicetitan/carto-tokens is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11912 Malicious code in @servicetitan/react-hooks (npm)

npm/@servicetitan/react-hooks is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @servicetitan/cp-api (npm)

npm/@servicetitan/cp-api is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

MAL-2026-11638 Malicious code in @onereach/si-dropdown-simple (npm)

npm/@onereach/si-dropdown-simple is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...