impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

dcipher-cli

dcipher-cli Crack hashes using online rainbow & lookup table attack services, right from your terminal. Install ❯❯❯ npm install -g dcipher-cli Usage ❯❯❯ dcipher --help Crack hashes using online rainbow & lookup table attack services, right from your terminal. Usage ❯❯❯ dcipher ❯❯❯ echo | dcipher...

datadome-vm-internals

DataDome VM DataDome embeds a custom VM in their bundle to hide what they're actually doing. I got curious and pulled it apart. Sharing it here for anyone who's interested in the same kind of reverse engineering puzzle. DataDome ships a heavily obfuscated JavaScript bundle to your browser. Inside...

ophcrack

OPHCRACK 3.6.0 Time-Memory-Trade-Off-Crack A windows password cracker based on the faster time-memory trade-off using rainbow tables. This is an evolution of the original ophcrack 1.0 developed at EPFL http://lasecwww.epfl.ch/oechslin/projects/ophcrack Ophrack 3.6.0 comes with a Qt Graphical User...

exploit_mitigations

Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...

page-table-exploitation

page-table-exploitation عرض توضيحي لكيفية استخدام جداول الصفحات page tables لتشغيل تعليمات برمجية عشوائية في Ring-0 مما يؤدي إلى تصعيد الامتيازات privesc. يستخدم CVE-2016-7255 كمثال...

CVE-2021-36934

CVE-2021-36934 أداة الاستغلال التلقائي لـ SeriousSAM المتطلبات HiveNightmare ، ملف تنفيذي أو ما يعادله من DLL سيتطلب ما يعادله من DLL بعض التعديلات البرمجية لتشغيله عبر rundll32، وقد يكون هذا مفيدًا عند مواجهة بيئات AppLocker. dump.exe m وهو secretsdump.py مُجمَّع عبر pyinstaller، لذا فهو كبير جد...

CVE-2026-14877

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.12.03 . The root cause is insufficient input sanitization and output escaping within the id attribute of the table component. This flaw allows authe...

EUVD-2026-96111

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id attribute in all versions up to, and including, 1.12.03 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-96648

The Data Tables Generator by Supsystic WordPress plugin (versions up to and including 1.15.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the updateRows action, specifically affecting the Table Cell 'data' valu...

EUVD-2026-96053

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for...

zyrox

Zyrox LLVM Obfuscator llvm compile and link-time plugin for obfuscating native code Why why not ¯\ツ/¯ One of my biggest projects, where I learned a lot about LLVM internals, binary formats, assembly and obfuscation techniques. I believe that learning through building is the best way to learn, thu...

WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting

WordPress Easy Pricing Tables plugin before 3.2.1 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before reflecting it back in a page available to any user both authenticated and unauthenticated when a specific setting is enabled. id:...

AP Pricing Tables Lite <= 1.1.6 - SQL Injection

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins. id: CVE-2023-0900 info: name: AP Pricing Tables Lite = 1.1.6 - SQL Injection author: r3Y3r53 severity: high description: ...

pythia

مقدمة / خلاصة تقوم هذه الأداة بفحص ملف تنفيذي بحثاً عن بيانات Delphi، بما في ذلك RTTI وجداول الدوال الافتراضية. وهي تُخرج ملف JSON يحتوي على معلومات حول الفئات والدوال المحددة، والتي يمكن استخدامها لتحليل إضافي، على سبيل المثال: إنشاء شجرة فئات. توليد أسماء وتعليقات لـ IDA. إدخالها في مزيد من...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

hashcobra

hashcobra hashcobra أداة كسر التجزئة Hash Cracking. الوصف تستخدم هذه الأداة طريقة جديدة لكسر التجزئات hashes. بمساعدة مفهوم جداول قوس قزح rainbow tables، تقوم هذه الأداة بتوليد جداول قوس قزح من قوائم الكلمات wordlists لتحسين عملية الكسر بشكل كبير. الاستخدام $ ./hashcobra -H --== hashcobra by...

WordPress Data Tables Generator by Supsystic plugin <= 1.15.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by braintx in WordPress Plugin Data Tables Generator by Supsystic versions = 1.15.1...

WordPress Data Tables Generator by Supsystic plugin <= 1.12.03 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Data Tables Generator by Supsystic versions = 1.12.03...