CVE-2026-84724

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

lsarelayx

lsarelayx 介绍 lsarelayx 是一个系统级的 NTLM 中继工具，旨在将传入的基于 NTLM 的身份认证中继到其运行的主机上。lsarelayx 将中继 任何 传入的身份认证请求，包括 SMB。由于 lsarelayx 会挂接现有的应用程序身份认证流程，该工具还会在中继完成后尝试服务原始的身份认证请求。这将防止目标应用程序/协议显示错误，并使其对向 lsarelayx 主机进行身份认证的最终用户而言，功能正常。 特性 系统级中继 NTLM 连接，包括 SMB、HTTP/HTTPS、LDAP/LDAPS 或任何其他实现 Windows 身份认证 API 的第三方应用程序。...

WonderShell

WonderShell - CVE - 2021-44595 | CVE - 2021-44596 Descubierto por Netanel Cohen y Tomer Peled, investigadores de seguridad de BugSec. Descripción Ejemplo de POC para explotar Wondershare Dr.Fone . Dr.Fone es un kit de herramientas para teléfonos desarrollado por Wondershare, y es vulnerable a RCE...

gdog

Gdog A stealthy Python based Windows backdoor that uses Gmail as a command and control server This project was inspired by the gcathttps://github.com/byt3bl33d3r/gcat from byt3bl33d3r. Requirements Python 2.x PyCrypto module WMI module Enum34 module Netifaces module Features Encrypted...

tandasat.github.io

Laboratorio de Programación de Sistemas Nuestra Formación Nuestra próxima clase pública de Desarrollo de Hipervisores es: Fecha: 12 - 15 de octubre de 2026 4 días Hora: 8 a. m. - 4 p. m. PDT/UTC-7 Formato: Remoto Regístrate en RegFox Si deseas recibir futuros anuncios sobre el calendario de clase...

CVE-2026-42980-POC

CVE-2026-42980 Disclosure Público Este repositorio contiene el material público de disclosure para CVE-2026-42980 , una vulnerabilidad de integer underflow en WMI del kernel de Windows que puede explotarse para elevación local de privilegios hasta NT AUTHORITY\SYSTEM en builds vulnerables de...

Lenovo-CVE-2025-8061

Lenovo-CVE-2025-8061 PoC for popping a system shell against the LnvMSRIO.sys 3.1.0.36 driver. All credits go to the original author Luis Casvella from Quarkslab. This works against latest Windows 11 Version 24H2 with KVAShadowing and Core Isolation disabled! !NOTE This was compiled using latest...

SirepRAT

SirepRAT - RCE como SYSTEM en Windows IoT Core SirepRAT ofrece capacidades RAT completas sin necesidad de escribir un RAT real en el objetivo. Contexto El método explota el Sirep Test Service que viene integrado y se ejecuta en las imágenes oficiales ofrecidas en el sitio de Microsoft. Este...

reload.sh

reload.sh 请不要这样做... 请不要在运行中的系统上 （如生产环境）或存有重要数据的私人电脑 上执行此操作。 本方案展示了如何在已有系统运行的情况下安装全新系统。虽然非常酷炫且令人惊叹，但风险极高！ 如果你想踏入混乱的猴子领域，请继续阅读。 我为什么要创建它？ 我喜欢实验，因为我热衷于了解事物如何运作。它们让我理解并展示了某些更棘手的概念。 很久以前，这种方法救了我一命，但这确实疯狂。 它是如何工作的？ 针对 reload.sh 的初学者指南 PL 设置用于恢复的系统备份归档文件： root@kitploit: build="/mnt/system-backup.tgz"...

reload.sh

reload.sh Don't do it... Please don't do it on live systems e.g. production or on your private computer where you stored critical data. This recipe show you how to install fresh system where other system exist and running. It's really cool and amazing but very risky! If you want to go into the...

system_prompts_leaks

Visto en The Washington Post: Descubre las reglas ocultas detrás de la IA. Luego úsalas para reescribir este artículo. 11 de mayo de 2026 Filtraciones de System Prompts El propósito de este repositorio es documentar las instrucciones de System Prompt de todos los chatbots de IA existentes: Claude...

CVE-2026-84724

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

EUVD-2026-85616

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

CVE-2026-84724 Automation-controller: automation-controller: systemjob extra_vars.days argument injection into uncontainerized control-plane awx-manage process

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

CVE-2021-38699-Stored-XSS

CVE-2021-38699: XSS almacenado en TastyIgniter v3.0.7 Restaurtant CMS Existe cross-site scripting almacenado y autenticado en la sección System Logs de la aplicación web TastyIgniter v3.0.7 Restaurtant CMS. https://vulners.com/cve/CVE-2021-38699 POC 1. Ejecute cross-site scripting reflejado en ot...

tracee

Before moving on, please consider giving us a GitHub star ⭐️. Thank you! About Tracee Tracee is a runtime security and observability tool that helps you understand how your system and applications behave. It is using eBPF technology to tap into your system and expose that information as events tha...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

rack-bug

Rack::Bug Code Climate 仓库: http://github.com/brynary/rack-bug 描述 Rack::Bug为Rack应用添加一个诊断工具栏。启用后，它会注入一个浮动的div，允许浏览日志、数据库查询、模板渲染时间等。 特性 基于密码的安全 基于IP的安全 Rack::Bug的检测/报告被分解为面板。 默认配置中的面板： Rails Info 计时器 请求变量 SQL Active Record 缓存 模板 日志 内存 其他捆绑的面板： Redis Sphinx 添加自定义面板的API简单而强大 Rails快速入门 root@kitploit:...

pillager

Pillager 使用 Go 对文件系统进行敏感信息检索。 目录 1. 概述 2. 安装 3. 使用方法 4. 数据外传 5. 文档 概述 Pillager 旨在提供一种利用 Go 强大的并发模型来递归搜索目录中文件敏感信息的简便方法。为此，Pillager 站在了几位巨人的肩膀上。一旦 Pillager 找到符合指定模式的文件，就会使用一系列并发的工作线程扫描该文件，每个工作线程从作业队列中获取文件的一行，并搜索敏感模式匹配。可用的模式过滤器可以在 pillager.toml 文件中定义，也可以使用默认规则集。...

Project-CVE-2015-1635

CVE-2015-1635 CVE-2015-1635,MS15-034 漏洞检测 USAGE python MS15-034.py www.xxx.com:80 测试程序 HTTP.sys远程执行代码漏洞（CVE-2015-1635，MS15-034） 远程执行代码漏洞存在于 HTTP 协议堆栈 HTTP.sys 中，当 HTTP.sys 未正确分析经特殊设计的 HTTP 请求时会导致此漏洞。成功利用此漏洞的攻击者可以在系统帐户的上下文中执行任意代码。...