wanderer

Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

CVE-2021-38163

CVE-2021-38163 CVE-2021-38163 - exploit para SAP Netveawer SAP NetWeaver Visual Composer 7.0 RT versions - 7.30, 7.31, 7.40, 7.50, sin restricción, un atacante autenticado como usuario no administrativo puede cargar un archivo malicioso a través de una red y desencadenar su procesamiento, el cual...

visual-forensic-steganography

视觉取证隐写分析 VFS工具允许对不同数字图像格式执行视觉攻击。该功能对于检测某些隐写技术的使用（尤其是LSB（最低有效位））以及恶意软件分析师分析隐写恶意软件片段非常有用。所有这些操作无需将信息上传到不受信任的第三方服务。 使用非常简单。只需用我们的JavaScript代码打开网页（visual.html），打开数字图像，按颜色平面可视化视觉攻击，并根据选择提取信息。 示例 作者与许可证 本项目由 Dr. Manuel Urueña @muruenya 和 Dr. Alfonso Muñoz @mindcrypt 开发。代码基于 GNU 通用公共许可证 v3 发布。...

lykan

lykan Lykan es un programa de análisis de fugas escrito en C que genera gráficos visuales de los datos analizados. Recibe como entradas volcados de texto de contraseñas sin procesar donde las contraseñas están separadas por '\n' y extrae información estadística sobre los volcados, incluyendo las...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

Yellow Pencil Visual Theme Customizer < 7.2.1 - Privilege Escalation

The WaspThemes Visual CSS Style Editor aka yellow-pencil-visual-theme-customizer plugin before 7.2.1 for WordPress allows ypoptionupdate CSRF, as demonstrated by use of ypremoteget to obtain admin access. id: CVE-2019-11886 info: name: Yellow Pencil Visual Theme Customizer 7.2.1 - Privilege...

Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection

Visual Tools DVR VX16 4.2.28.0 could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2021-42071 info: name: Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection author: gy741 severity: critical description: Visual...

WordPress Visual Form Builder <3.0.8 - Information Disclosure

WordPress Visual Form Builder plugin before 3.0.8 contains a information disclosure vulnerability. The plugin does not perform access control on entry form export, allowing an unauthenticated user to export the form entries as CSV files using the vfb-export endpoint. id: CVE-2022-0140 info: name:...

Burp_CVE-2025-31324

CVE-2025-31324 Burp Suite 扩展 概述 此基于 Python 的 Burp Suite 扩展用于检测 CVE-2025-31324 ，这是 SAP NetWeaver Visual Composer 的 Metadata Uploader 组件中的一个严重漏洞。该漏洞由于缺少授权检查，允许未经身份验证的远程代码执行。扩展通过向 /developmentserver/metadatauploader 端点发送测试文件并检查成功上传的指示器来执行主动扫描。 注意 ：此工具仅用于道德安全测试 。仅在对系统拥有明确许可的情况下使用。未经授权的使用可能违法且不道德。 功能...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

kekeo

kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...

CVE-2020-27955

Git-lfs Exploit de ejecución remota de código RCE CVE-2020-27955 versión .bat / powershell Vulnerables: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken, etc. Descubierto por Dawid Golunski https://legalhackers.com https://exploitbox.io Probado en Windows en...

CVE-2024-30085

CVE-2024-30085 CVE-2024-30085 Alex Birnberg Versiones afectadas: Windows 11 23H2 Originalmente de aquí Ligeramente modificado para compilar sin configuración en Visual Studio...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

Mindmap

Hacking Articles- Mapa Mental de Ciberseguridad Una colección completa de mapas mentales de ciberseguridad que cubren tecnologías, herramientas, metodologías, cursos y certificaciones utilizados en la industria de la seguridad. Este repositorio organiza conceptos complejos de ciberseguridad en...

CVE-2020-27955-LFS

Exploit de ejecución remota de código RCE en Git-lfs CVE-2020-27955 versión .bat / powershell Vulnerables: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken, etc. Descubierto por Dawid Golunski https://legalhackers.com https://exploitbox.io Probado en Windows...

CVE-2024-35250-BOF

CVE-2024-35250-BOF Implementación de Beacon Object File BOF para CVE-2024-35250. Construcción La plantilla del proyecto proviene de bof-vs. Compilar con la configuración Release de Visual Studio 2019/2022. Agradecimientos https://github.com/varwara/CVE-2024-35250...

CVE-2020-27955-LFS-main

Exploit de ejecución remota de código RCE en Git-lfs CVE-2020-27955 versión .bat / powershell Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken, etc. Descubierto por Dawid Golunski https://legalhackers.com https://exploitbox.io Probado en Windows...

CVE-2025-31324

CVE-2025-31324 Una prueba de concepto desarrollada para explotar CVE-2025-31324. Uso root@kitploit: usage: python CVE-2025-31324.py --help SAP NetWeaver Visual Composer Metadata Uploader = 7.50 CVE-2025-31324 PoC positional arguments: FILE local file to upload optional arguments: -h, --help show...