CVE-2022-31691

CVE-2022-31691 Отчёт о моём пока что безрезультатном исследовании CVE-2022-31691. Предыстория Я часто использую Spring Tool Suite STS для Eclipse и привык полагаться на него при инициализации новых проектов Spring Boot. Эта уязвимость см. https://tanzu.vmware.com/security/cve-2022-31691...

ghidra-mcp

Ghidra MCP Server If you find this useful, please ⭐ star the repo — it helps others discover it! If Ghidra MCP saves you time, consider sponsoring the project. One-time and recurring support both help fund compatibility updates, production hardening, docs, and new tooling. A production-ready Mode...

CVE-2026-Pending-Flask-Uploads-Path-Traversal-PoC

CVE-2026-XXXXX Ожидается: Обход пути в Flask-Uploads Информация об уязвимости Продукт : Flask-Uploads Версия : 0.2.1 и, возможно, более старые версии Тип уязвимости : Обход пути Directory Traversal CWE-ID : CWE-22 Серьезность : ВЫСОКИЙ CVSS 7.5 Воздействие : Произвольная запись файлов, удаленное...

Vulnhalla

Vulnhalla Автоматизированный анализ CodeQL с классификацией на основе LLM Подробный обзор исследования и мотивации Vulnhalla — в официальном блоге CyberArk Threat Research: Vulnhalla: Выбирая истинные уязвимости из стога сена CodeQL Vulnhalla автоматизирует полный конвейер анализа безопасности: 1...

Aurora-Incident-Response

Aurora Incident Response Documentation de réponse aux incidents simplifiée. Développé par des intervenants en incidents pour des intervenants en incidents. Aurora amène le « Spreadsheet of Doom » utilisé dans la classe SANS FOR508 au niveau supérieur. Ayant dirigé de nombreux cas et enseigné à ta...

nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

peetch

peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...

BlueToolkit

Расширяемый фреймворк для тестирования уязвимостей Bluetooth для BR/EDR и BLE. Документация • Установка • Использование • Эксплойты • Оборудование • TODO • Оценка автомобилей • Ресурсы по Bluetooth • Лицензия BlueToolkit — это модульный фреймворк для тестирования безопасности Bluetooth методом...

sgx-step

A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...

CVE-2019-0986

Recherche en sécurité pour FUN Tout est axé sur Microsoft Windows OS CVE-2019-0986 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0986 Ceci est le PoC que j'ai envoyé à Microsoft lorsque j'ai signalé la vulnérabilité ci-dessus. Ce PoC exploite le « User Profile Servic...

Nuages

Nuages Nuages est un framework C2 modulaire. Reportez-vous au Wiki pour la documentation et les tutoriels, n'hésitez pas à ouvrir des issues pour obtenir de l'aide, signaler des bugs ou demander des fonctionnalités Introduction Nuages vise à être un framework C2 dans lequel les éléments backend...

sslyze

SSLyze SSLyze is a fast and powerful SSL/TLS scanning tool and Python library. SSLyze can analyze the SSL/TLS configuration of a server by connecting to it, in order to ensure that it uses strong encryption settings certificate, cipher suites, elliptic curves, etc., and that it is not vulnerable ...

warpgate

Warpgate is a smart & fully transparent SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC bastion host that doesn't require a client app or an SSH wrapper. Set it up in your DMZ, add user accounts and easily assign them to specific hosts and URLs within the network. Warpgate will record ever...

dradis-ce

Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...

mitmproxy2swagger

mitmproxy2swagger https://user-images.githubusercontent.com/5400940/168086818-c48f60ab-3f95-42eb-b435-c8b1a6326b81.mp4 A tool for automatically converting mitmproxy captures to OpenAPI 3.0 specifications. This means that you can automatically reverse-engineer REST APIs by just running the apps an...

vuln-list

vuln-list Collect vulnerability information and save it in parsable format automatically Source Directory| OS| Source| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux Errata| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine secdb| https://secdb.alpinelinux.org/ amazon/1|...

vuln-list

vuln-list Собирает информацию об уязвимостях и сохраняет её в парсируемом формате автоматически Источник Каталог| ОС| Источник| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux Errata| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine secdb| https://secdb.alpinelinux.org/...

hetty

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. Features Machine-in-the-middle MITM HTTP proxy, with logs and advanced...