1367 matches found
WS_RaceCondition_PoC
Race Conditions in Websockets In the field of information technology, ensuring data reliability and integrity is crucial, especially with millions of users and terabytes of data in the mix. However, as software systems become more complex, issues such as race conditions can arise, significantly...
pyFlipper
PyFlipper Flipper Zero Python CLI Wrapper Articles How to hack a restaurant Functions and characteristics: Flipper serial CLI wrapper Websocket client interface Plain TCP interface What's new firmware 1.x compatibility This release brings the wrapper in line with the current Flipper Zero CLI...
Lastenzug
LastenZug This project implements a Socka4a proxy based on websockets. The client component is implemented in C compiling down to fully position independent code PIC. During the compilation process, obfuscation is applied on assembly level by leveraging a second tool: SpiderPIC located in...
raven
Raven CobaltStrike External C2 for Websockets Additional info: https://www.cobaltstrike.com/help-externalc2 Server Build Ubuntu Copy the server folder to your VPS. Run ./setup.sh as root or with sudo Client build Windows Copy the client folder to a Windows development host. Install the Windows 10...
ExternalC2
ExternalC2 A library for integrating communication channels with the Cobalt Strike External C2 server This library provides an implementation of the Cobalt Strike External C2 spec, including a basic web channel and a websocket channel. The codebase has been documented and designed to allow...
WSC2
WSC2 LAST/CURRENT VERSION: 0.1 Author: Arno0x0x - @Arno0x0x WSC2 is a PoC of using the WebSockets and a browser process to serve as a C2 communication channel between an agent, running on the target system, and a controller acting as the actuel C2 server. The tool is distributed under the terms o...
domdig
DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...
sonar.js
sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....
cookie_crimes
Chrome Cookie Extraction Without Root This will print out a user's Chrome cookies. You don't need to have their password or be root to use it. nice nice nice nice nice. If you are not the kind of person who regularly gets the ability to execute code on other people's computers, you probably don't...
Lastenzug
LastenZug This project implements a Socka4a proxy based on websockets. The client component is implemented in C compiling down to fully position independent code PIC. During the compilation process, obfuscation is applied on assembly level by leveraging a second tool: SpiderPIC located in...
CVE-2026-114369
A flaw was found in Qt. A remote attacker can cause a Denial of Service DoS through resource exhaustion within the QWebSocket and QWebSocketServer classes of the Qt WebSockets module. By triggering excessive resource consumption over the network without requiring authentication, an attacker can...
CVE-2026-114369
Resource exhaustion vulnerability in the Qt Framework QWebSocket and QWebSocketServer classes of the Qt WebSockets module...
EUVD-2026-124346
Resource exhaustion vulnerability in the Qt Framework QWebSocket and QWebSocketServer classes of the Qt WebSockets module...
CVE-2026-114369
Resource exhaustion vulnerability in the Qt Framework QWebSocket and QWebSocketServer classes of the Qt WebSockets module...
CVE-2026-114369: qt Qt Framework: Resource exhaustion vulnerability in the Qt Framework QWebSocket and QWebSocketServer classes of the Qt WebSockets…
Resource exhaustion vulnerability in the Qt Framework QWebSocket and QWebSocketServer classes of the Qt WebSockets module...
PT-2026-145763
Resource exhaustion vulnerability in the Qt Framework QWebSocket and QWebSocketServer classes of the Qt WebSockets module...
CVE-2026-114366
An information disclosure vulnerability in the Qt Framework QWebSocket authentication handling of the Qt WebSockets module...
CVE-2026-114366
A flaw was found in Qt. Improper authentication handling in the QWebSocket component of the Qt WebSockets module allows an attacker to cause an information disclosure. A remote attacker could exploit this vulnerability to gain unauthorized access to sensitive data. Mitigation Disable...
reinschauer
Reinschauer A PoC to remotely control Windows machines over Websockets. Check out my blog for a writeup. Can be executed as Go exe, .NET/C exe and in-memory using BOF.NET and Cobaltstrike. Traffic can be tunneled via an interactive Beacon connection. Other than most HVNC implementations,...
CVE-2026-119574
A flaw was found in Traefik. A race condition in the FastProxy component allows an unauthenticated remote attacker to cause a Denial of Service DoS. By repeatedly opening and aborting upgraded protocol connections, such as WebSockets, an attacker can corrupt shared internal buffers, triggering a...