TokenUniverse

Token Universe Token Universe ist ein fortschrittliches Werkzeug zum Experimentieren und Erforschen von Windows-Sicherheitsmechanismen. Es bietet eine Benutzeroberfläche zum Erstellen, Anzeigen, Imitieren und Ändern von Zugriffstokens, zum Starten von Prozessen, zur Verwaltung der Local Security...

outis

outis outis ist ein benutzerdefiniertes Remote Administration Tool RAT oder so ähnlich. Denken Sie an Meterpreter oder Empire-Agent. Der Fokus dieses Tools liegt jedoch weder auf einem Exploit-Toolkit es gibt keine Exploits noch auf der dauerhaften Verwaltung von Zielen. Der Fokus liegt auf der...

NamedPipePTH

NamedPipePTH Dieses Projekt ist ein PoC-Code zur Nutzung von Pass-the-Hash für die Authentifizierung bei einer lokalen Named Pipe Benutzer-Impersonation. Es gibt auch einen Blogbeitrag zur Erklärung: https://s3cur3th1ssh1t.github.io/Named-Pipe-PTH/ Es basiert stark auf dem Code der Projekte...

egressbuster

EgressBuster Copyright 2015 TrustedSec - EgressBuster Geschrieben von: David Kennedy ReL1K Unternehmen: TrustedSec HAFTUNGSAUSSCHLUSS: Dies dient nur zu Testzwecken und darf nur verwendet werden, wenn eine ausdrückliche Zustimmung erteilt wurde. Verwenden Sie dies nicht für illegale Zwecke, Punkt...

DropSpawn_BOF

DropSpawn Einleitung DropSpawn ist ein CobaltStrike BOF, das verwendet wird, um zusätzliche Beacons über eine relativ unbekannte Methode des DLL-Hijacking zu spawnen. Funktioniert x86-x86, x64-x64 und x86-x64/umgekehrt. Verwenden Sie es als Alternative zur Prozessinjektion. Windows-ausführbare...

SpawnWith

SpawnWith Um arquivo de objeto Beacon BOF experimental que fornece uma alternativa aos comandos spawnas e inject. Isso expõe um novo comando, spawnwith pid listener, que executa o seguinte: 1. Obtém um handle para o processo de destino. 2. Obtém um handle para o token primário do processo. 3...

CS-DropSpawn_BOF

DropSpawn Introdução DropSpawn é um BOF do CobaltStrike usado para gerar Beacons adicionais por meio de um método relativamente desconhecido de sequestro de DLL. Funciona em x86-x86, x64-x64 e x86-x64/vice-versa. Use como alternativa à injeção de processos. Executáveis do Windows seguirão a ordem...

CVE-2026-91149

A flaw in Cockpit allows an unauthenticated remote attacker to trigger a denial of service by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. The service creates an unbounded number of detached threads , exhausting system resources such as memory and file d...

CVE-2026-91149 Cockpit: cockpit: denial of service via unbounded connection thread spawning

A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. This forces the service to create an unbounded number of detached threads, consuming system resources such as...

CVE-2026-91149 Cockpit: cockpit: denial of service via unbounded connection thread spawning

A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. This forces the service to create an unbounded number of detached threads, consuming system resources such as...

CVE-2026-57124

PraisonAI (a multi-agent LLM framework) is vulnerable to unauthenticated remote code execution in versions prior to 4.6.59 . The default UI host applications expose POST /api/mcp/connect without mandatory authentication, accepting caller-controlled command and args fields that are passed to Stdio...

CVE-2026-86096 PX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task Startup

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start due to a race condition between task spawning and object deletion. Attackers can trigger the calibration process via shell commands to write to freed heap memory, corrupting unrelated objects or...

macnoise v0.5.0

MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...

CVE-2026-76227

Renovate versions 42.68.1 through 42.96.2 (and 42.68.1 through 43.4.3), along with corresponding Docker images, fail to restrict environment variables to an allowlist when spawning child processes. The root cause was an inadvertent removal of the filtering logic during a migration to the execa li...

EUVD-2026-58049

rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resources by specifying the --zt short alias for --compress-threads, which bypasses the refuse options directive's string matching on long option names. Attackers can specify --zt=N...

MAL-2026-13738 Malicious code in @openzeppelin-5/contracts (npm)

@openzeppelin-5/contracts is a malicious npm package published by npm account mssjeep843 that impersonates OpenZeppelin's @openzeppelin/contracts the v5 line via the look-alike scope @openzeppelin-5, falsely describing itself as a "compatibility distribution". It ships no Solidity contracts — onl...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 – MCPJam Inspector Unauthenticated RCE PoC...

Malicious code in bnpl-molecule-mobile-bnpl-onboarding (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23d110510740ced78dc5855c7f9c0c3dedff3669ad49cb52aeee3c5467f00d3b On require of the package, index.js loads runtime.js which selects a platform-keyed asset linux/darwin/win32, downloads an opaque binary from one of...

Malicious code in boxy-test-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ce2597c942a6017ba1aad05cadffba71e6673f8ae9298ef589493e3c4e5ad3 On require'boxy-test-block', index.js loads compat.js which reconstructs attacker-controlled destination hosts via string-split obfuscation...

MAL-2026-12793 Malicious code in helixbox-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45774464be73a3ba586a4eb9af5a89b3f2439a4f49a80c0b69eb4668cfcf7f89 The helixbox-connect bin opens a WebSocket to the hardcoded relay wss://helixbox-relay.onrender.com and dispatches messages from the peer into local...