Zhilly

AI Pentester Assistant 🛡️ Zhilly AI Pentester Assistant AI-Powered, Portable Cyber Security & Cyber Interaction Tool Yapay Zeka Destekli, Taşınabilir Siber Güvenlik ve Siber Etkileşim Aracı 🇬🇧 English • 🇹🇷 Türkçe • ⚡ Web Flasher 🇬🇧 English / English Version 📖 About the Project This project is an...

dracon-utilities

Dracon Utilities Three small Rust CLI tools that look after a Linux development machine: one keeps your git repos committed and backed up, one keeps your disk and memory from falling over, and one stops secrets from landing in your git history. They run as ordinary user-level systemd services — n...

bandjacks

Bandjacks Sistema de Modelado Mundial de Defensa contra Amenazas Cibernéticas Resumen Bandjacks es un sistema integral de inteligencia de amenazas cibernéticas CTI que: Extrae técnicas MITRE ATT&CK de informes de amenazas en 12-40 segundos Construye un grafo de conocimiento de actores de amenazas...

concealed_code_execution

隐蔽代码执行 Hunt& Hackett 提供了一系列工具和技术性文章，描述了在 Windows 上依靠隐蔽代码执行的攻击技术。你将在这里找到这些技术的工作原理解释、检测建议以及用于测试检测覆盖范围的示例源代码。 内容 本仓库涵盖了两类大量使用 Windows 内部机制的攻击技术，并提供了检测它们的建议和工具： 进程篡改 ——一系列在进程范围上隐蔽代码的技术。 代码注入 ——一系列允许在其他进程中执行代码而不干扰其功能的技巧。 检测 ——针对各种隐蔽代码执行技术的防御建议汇编。 本项目的核心价值： 系统化方法...

concealed_code_execution

Concealed Code Execution Hunt& Hackett presents a set of tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows. Here you will find explanations of how these techniques work, receive advice on detection, and get sample source code for testi...

bad_io_uring

Bad IOuring https://www.blackhat.com/us-23/briefings/schedule/index.htmlbad-iouring-a-new-era-of-rooting-for-android-32243 Construir el exploit Asegúrate de que Android NDK esté instalado. Para Pixel 6, root@kitploit: make pixel Para Samsung S22, root@kitploit: make s22 Cómo usar el exploit El...

CVE-2025-24890 gix-sec safe.directory protections absent for elevated administrators

gitoxide is an implementation of git written in Rust. Prior to 0.13.3, the gix-sec crate on Windows incorrectly treats repositories controlled by another user as trusted when an administrator runs a dependent program with an unfiltered elevated token. In gix-sec/src/identity.rs,...

EUVD-2025-210908

gitoxide is an implementation of git written in Rust. Prior to 0.13.3, the gix-sec crate on Windows incorrectly treats repositories controlled by another user as trusted when an administrator runs a dependent program with an unfiltered elevated token. In gix-sec/src/identity.rs,...

CVE-2025-24890 gix-sec safe.directory protections absent for elevated administrators

gitoxide is an implementation of git written in Rust. Prior to 0.13.3, the gix-sec crate on Windows incorrectly treats repositories controlled by another user as trusted when an administrator runs a dependent program with an unfiltered elevated token. In gix-sec/src/identity.rs,...

CVE-2025-24890

CVE-2025-24890 affects the gix-sec crate (part of gitoxide , a Rust git implementation) on Windows prior to version 0.13.3 . The root cause is in is_path_owned_by_current_user (gix-sec/src/identity.rs), where the administrator-specific IsWellKnownSid and CheckTokenMembership calls erroneously ins...

LocalPotato_CVE-2023-21746

Una vulnerabilidad de escalada de privilegios local LPE en Windows fue reportada a Microsoft el 9 de septiembre de 2022 por Andrea Pierini @decoderit y Antonio Cocomazzi @splintercode. La vulnerabilidad permitiría a un atacante con una cuenta de bajos privilegios en un host leer/escribir archivos...

MITM6-Kerberos-CNAME-Abuse

Kerberos Authentication Relay - CNAME Abuse Technique PoC Background This tool is the proof-of-concept for Kerberos CNAME Abuse Relay technique, based on the MITM6 tool. The research uncovered a flaw in Windows Kerberos client behavior: when a DNS CNAME record is returned, the client follows the...

CVE-2025-31161

CVE-2025-31161 - Exploit de omisión de autenticación en creación de usuario de CrushFTP 📌 Descripción Este exploit de Python ataca servidores CrushFTP vulnerables a CVE-2025-31161. La vulnerabilidad permite la creación de cuentas de usuario no autenticadas mediante el envío de un payload XML...

etl-parser

etl-parser 纯Python的事件跟踪日志文件读取器 etl-parser 是一个纯 Python 3 解析库，用于解析 ETL Windows 日志文件。ETL 是 ETW 的默认格式，也是内核日志记录器的默认格式。 etl-parser 没有系统依赖，在 Windows 和 Linux 上都能良好运行。 由于该格式没有文档记录，我们结合了 Geoff Chappel 博客中的信息以及 Airbus CERT 团队进行的逆向工程成果。 什么是 ETL，为什么处理它很麻烦？可以将 ETL 视为容器，就像 AVI 对于视频文件一样。读取 ETL 的体验与在没有正确编解码器的情况下读...

etl-parser

etl-parser Event Trace Log file reader in pure Python etl-parser is a pure Python 3 parser library for ETL Windows log files. ETL is the default format for ETW as well as the default format for the Kernel logger. etl-parser has no system dependencies, and will work well on both Windows and Linux...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

qark

Kit de Revisión Rápida de Android Esta herramienta está diseñada para buscar varias vulnerabilidades de seguridad en aplicaciones Android, ya sea en código fuente o en APKs empaquetadas. La herramienta también es capaz de crear APKs desplegables de "Prueba de Concepto" y/o comandos ADB, capaces d...

CVE-2022-45599

CVE-2022-45599 CVE URL:| https://vulners.com/cve/CVE-2022-45599 ---|--- Reported by:| TanYeeTat Product:| Aztech WMB250AC Wireless Mesh Routers Affected Firmware:| 2020 Release topaz-linux.lzma.img Firmware download:| closed source Product Manual: https://kylaconnect.com/download-center/...

wshlient

Wshlient Web Shell 客户端 描述与演示 Wshlient 是一个设计得相当简单且多功能的 Web Shell 客户端。你只需创建一个包含 HTTP 请求的文本文件，并告知 Wshlient 在何处注入命令，然后即可享受 Shell 的便利。 https://github.com/user-attachments/assets/eafcf666-4c52-4e28-a341-a03bba93fe89 如果上述视频无法为你播放： 安装 除了 Python 内置的库外，Wshlient 仅使用 requests。你可以直接安装它，或使用 requirements.txt：...

wshlient

Wshlient Web Shell Client Description & Demo Wshlient is a web shell client designed to be pretty simple yet versatile. One just need to create a text file containing an HTTP request and inform where Wshlient inject the commands, then you can enjoy a shell...