deception-as-detection

Engaño como Detección Técnicas de detección basadas en engaño mapeadas a las Tácticas, Técnicas y Conocimiento Común Adversarial de MITRE ATT&CK™: Matriz de Técnicas de Windows Matriz de Técnicas de Linux Matriz de Técnicas de Mac 📔 Historias de Engaño Se ha creado una historia de engaño de muest...

thanatos

Thanatos Thanatos es un agente C2 para Windows y Linux escrito en rust. Instalación Para instalar Thanatos, necesitarás tener Mythic configurado en una máquina. En el directorio raíz de Mythic, usa mythic-cli para instalar el agente. sudo ./mythic-cli install github...

meterpeter

Autor: @r00t-3xp10it Versión publicada: v2.10.14 Distribuciones compatibles: Windows x86|x64, Linux Inspirado en el trabajo de: '@ZHacker13 - ReverseTCPShell' :octocat: Lista de navegación rápida Descripción del proyecto Lista de módulos disponibles Última versión de Meterpeter C2 Cómo usar - En...

Sinister

Sinister Este pequeño script de Python puede hacer un trabajo realmente impresionante. Sinister es un generador de Keylogger para Windows/Linux, que envía registros de teclas y capturas de pantalla por correo electrónico junto con otra información jugosa de la víctima, escrito en Python 3. Descar...

unshackle

Fin del soporte ⚠ el proyecto ahora está archivado y ya no se trabajará en él debido al tiempo necesario para mantenerlo y probarlo en VMware en una PC no muy buena, Unshackle - Herramienta de Omisión de Contraseñas Unshackle es una herramienta de código abierto para omitir contraseñas de usuario...

BearFTP

BearFTP ¿Te atreves a hackear a un oso? BearFTP es un servidor FTP honeypot, diseñado para registrar los intentos de los hackers y reportarlos a bases de datos públicas de listas negras de IP. Características: Soporte de configuración sin necesidad de recompilar Edita archivos y el contenido de l...

CVE-2019-0708-POC

CVE-2019-0708-POC Prueba de concepto funcional para CVE-2019-0708, genera una shell remota. Ejecutar con python3, Ejemplo python3 CVE-2019-0708-windows.py Se requieren diferentes versiones para Linux y Windows. Ofuscado por razones obvias...

ida-efitools2

About It is an IDA plugin for extending UEFI reverse engineering capabilities. Based on ida-efitools with a bunch of fixes and new features. Works with both Python 2 and Python 3. Supports outdated versions of IDA Pro 7.x with no guarantees. Features GUIDs defining Structures propagating register...

wtf v0.5.8

what the fuzz A distributed, code-coverage guided, cross-platform snapshot-based fuzzer designed for attacking user and or kernel-mode targets running on Microsoft Windows and Linux user-mode experimental!. Overview what the fuzz or wtf is a distributed, code-coverage guided, customizable,...

MAL-2026-12074 Malicious code in statist-browser-typed-client-nfs.grocery.mobile.events (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fcb1561dd1153104da17218a74c318e8d497b4df1429bbbda8cda0144bd06ce On require of the package's main entry, index.js transitively loads platform.js, which selects a platform-specific payload URL, fetches opaque...

MAL-2026-10091 Malicious code in qlinforge (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713a696ce725031aab16903d7a29c80611a4c4368c7e35bacf29069a3581c602 setup.py registers a custom install command that, on Linux, downloads an opaque binary from http://115.190.124.243:9090/payloadlinuxamd64 to...

EUVD-2026-42058

Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication for critical function vulnerability allows a remote, unauthenticated attacker to access an unprotected API...

A Critical Deadline Is Approaching for Windows and Linux Security

The cryptographic keys that secure your computer’s boot sequence will start to expire on June 24. Here’s what that means for you...

MAL-2026-5924 Malicious code in binproto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbe88a299e58c31b71b346733abb6684ce1a1e8e68fad118eca48a53a2b15a3 On any call to the exported pack function, index.js downloads a platform-specific binary from https://wotann-dktl.vercel.app/service/assets/fetchBina...

Important: nvlink5

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service...

Important: libnvsdm

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service...

Important: libnvidia-nscq

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service...

Amazon Linux 2023 : cuda-drivers (ALAS2023NVIDIA-2026-295)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-295 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successfu...

Important: cuda-drivers

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service...

Important: nvidia-settings

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service...