dockernymous

SCROLL DOWN FOR REQUIREMENTS AND INSTRUCTIONS IT JUST WON'T WORK IF YOU DON'T FOLLOW THEM Warning: Dockernymous is in a very early state of development. Only use it for educational purposes. DON'T use it if you rely on strong anonymity! News 13.10.2018 I completely changed the overall function...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

debian-ssh

Debian OpenSSL Predictable PRNG Links Original URL: http://metasploit.com/users/hdm/tools/debian-openssl/1 Mirror2 Exploit: https://www.exploit-db.com/exploits/5622/ Perl3 https://www.exploit-db.com/exploits/5720/ Python4 https://www.exploit-db.com/exploits/5632/ Ruby12 Recommend Tool: Crowbar13...

Converto

Converto V2 Instalador automatizado de Kali Linux o Parrot OS para VPS Instalando Kali Linux o Parrot OS en un servidor VPS. Probado en Ubuntu. Probado en Debian. También instala VNC VNC gráfico / no gráfico. Pasos para la instalación :- Video :- Cómo instalar IMAGE ALT TEXT HERE 1.sudo apt-get...

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...

aardwolf

🚩 Sponsors このプロジェクトが気に入ったら、ブラウザで動作するフルペンテストスイートであるOctoPwnのライセンス購入を検討してください！ 新しいビルド/リリースの通知やその他の情報については、Discordに参加してください。 AARDWOLF - Python製の非同期RDP/VNCクライアント（ヘッドレス） このプロジェクトは、RDPおよびVNCプロトコルを試すことを目的としています。 このプロジェクトにはGUIは含まれません。GUIクライアントについてはaardwolfguiを確認してください。 🚩 ブラウザで動作...

scrying

NCC Group Scrying A new tool for collecting RDP, web and VNC screenshots all in one place This tool is still a work-in-progress and should be mostly usable but is not yet complete. Please file any bugs or feature requests as GitHub issues Motivation Since Eyewitness recently dropped support for R...

scrying

NCC Group Scrying Una nueva herramienta para recopilar capturas de pantalla de RDP, web y VNC en un solo lugar Esta herramienta aún está en desarrollo y debería ser mayormente utilizable, pero aún no está completa. Por favor, reporta cualquier error o solicitud de funcionalidad como issues de...

crowbar

Crowbar - Brute forcing tool What is Crowbar? Crowbar formally known as Levye is a brute forcing tool that can be used during penetration tests. It was developed to brute force some protocols in a different manner according to other popular brute forcing tools. As an example, while most brute...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

CVE-2019-5736-POC

Escapando de Docker a través de RunC Un código de prueba de concepto para CVE-2019-5736 Este POC está fuertemente basado en el POC de YuvalAvra. No reclamo ningún crédito por el código utilizado en este POC. Se puede encontrar más información sobre esta vulnerabilidad y una demostración de cómo s...

CVE-2026-22002-VNC-Authentication-Bypass-via-Protocol-Version-Confusion

CVE-2026-22002 – VNC Authentication Bypass via Protocol Version Confusion Program Code Python vncserversim.py - VNC server with version negotiation flaw import socket, struct def handleconn: Send server version "RFB 003.008\n" conn.sendb"RFB 003.008\n" Receive client version clientver = conn.recv...

CVE-2019-17662

CVE-2019-17662 Descripción ThinVNC 1.0b1 es vulnerable a la lectura arbitraria de archivos, lo que lleva a comprometer el servidor VNC. La vulnerabilidad existe incluso cuando la autenticación está activada durante el despliegue del servidor VNC. La contraseña de autenticación se almacena en text...

CVE-2019-17662-Exploit

CVE-2019-17662 Descripción ThinVNC 1.0b1 es vulnerable a la lectura arbitraria de archivos, lo que lleva a un compromiso del servidor VNC. La vulnerabilidad existe incluso cuando la autenticación está activada durante la implementación del servidor VNC. La contraseña de autenticación se almacena ...

Rocky Linux 10.2 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_36749)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202636749 advisory. gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tilelistobu parser byte/bit confusion CVE-2026-52718 gstreamer1-plugins-bad-free:...

AlmaLinux 9.2 [TuxCare] Security Update: qemu-guest-agent / qemu-img / qemu-kvm / qemu-kvm-audio-pa / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1777042213)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777042213 advisory. - A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an...

Rocky Linux 10.1 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc (crlsa-2026_1831)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20261831 advisory. qemu-kvm: VNC WebSocket handshake use-after-free CVE-2025-11234 Tenable has extracted the preceding description block directly from the CIQ security advisory. No...

AlmaLinux 9.6 [TuxCare] Security Update: qemu-guest-agent / qemu-img / qemu-kvm / qemu-kvm-audio-dbus / etc (ALMALINUX9.6:CLSA-2026:1779581056)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779581056 advisory. - A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This c...