bucket-stream

🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...

fortios-auth-bypass-poc-CVE-2024-55591

CVE-2024-55591 PoC уязвимости обхода аутентификации Fortinet FortiOS Описание Используя этот PoC, вы можете обойти аутентификацию и просмотреть системный журнал. Использование sysirq@sysirq-machine:/Work/Fortinet/FortiGate7016/CVE-2024-55591$ python3 poc.py usage: poc.py -h --target TARGET --port...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

EUVD-2026-95319

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs...

kippo

NOTE: For more recent development, check out Michel Oosterhof's fork Kippo Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Kippo is inspired, but not based on Kojoney. Demo Some interesti...

Honeypot-Logs-CVE-2025-5777

سجلات-الوعاء-الخادع-CVE-2025-5777 سجلات الوعاء الخادع لـ CitrixBleed 2 NetScaler...

CVE-2024-28741-northstar-agent-rce-poc

NorthStar C2: RCE агента через хранимый XSS PoC эксплуатации RCE агента для CVE-2024-28741, уязвимости хранимого XSS в NorthStar C2. Этот эксплойт работает путём отправки нескольких вредоносных запросов на регистрацию агента на сервер команды teamserver, чтобы поэтапно собрать работающую...

Mortimer

Mortimer Une collection de scripts pour traiter des données de criminalistique réseau et du renseignement, principalement dans une base de données postgres. Publié en open source par NCC Group Plc - http://www.nccgroup.com/ Développé pour John Green, cirt at nccgroup dot com...

OSSEM

بيانات وصفية لأحداث الأمان مفتوحة المصدر OSSEM مشروع بقيادة المجتمع يركز بشكل أساسي على توثيق وتوحيد ونمذجة سجلات أحداث الأمان. https://ossemproject.com/intro.html الأهداف تعريف ومشاركة نموذج بيانات مشترك لتحسين توحيد وتحويل سجلات أحداث الأمان تعريف ومشاركة هياكل البيانات والعلاقات المحددة في سجل...

CVE-2026-107293

A flaw was found in pydantic-ai. An information disclosure vulnerability occurs when OpenTelemetry instrumentation is configured to omit message contents, as retry prompts generated during output validation are still exported to the telemetry backend. A user with read access to telemetry logs can...

Ivanti-Connect-Secure-Logs-Parser

Analyseur de journaux Ivanti Secure Connect Ce dépôt fournit un script Python conçu pour convertir les fichiers journaux .vc0 d'Ivanti Secure Connect au format CSV pour le forensic numérique et la réponse aux incidents. En particulier, l'analyseur : Extrait les horodatages des fichiers journaux...

epagneul

epagneul Epagneul هي أداة لتصور والتحقيق في سجلات أحداث ويندوز. النشر يتطلب تثبيت docker و docker-compose. التثبيت make النشر دون اتصال على جهاز متصل بالإنترنت، قم ببناء إصدار دون اتصال: make release سيؤدي هذا إلى إنشاء مجلد release يحتوي على صور docker جاهزة للاستخدام. انسخ المشروع إلى جهازك...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Developed by Daniel Compton https://github.com/commonexploits/port-scan-automation.git Released under AGPL see LICENSE for more information Installing git clone...

CVE-2025-24000-exploit

CVE-2025-24000 — Exploit d'élévation de privilèges Post SMTP Aperçu Ce script exploite CVE-2025-24000 , une vulnérabilité de contrôle d'accès brisé de sévérité élevée dans le plugin WordPress Post SMTP versions ≤ 3.2.0. Il permet à tout utilisateur authentifié avec un compte à faibles privilèges...

csf

ArmourBird CSF - Container Security Framework Note: The CSF Client is under active development and is getting converted into GoLang for better performace and architecture Table of Contents 1. About 2. Architecture Diagram 3. APIs-CSF Server 4. Installation/Usage 5. Building Docker Images 6. Sneak...

CVE-2026-87980

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs...

CVE-2022-1388-Exploit

CVE-2022-1388-Exploit Scripts de test et d'exploitation pour CVE 2022-1388 F5 Big-IP masscheck.py prend un fichier en entrée et vérifie si les hôtes sont vulnérables sans les exploiter. Détection : La recherche de /mgmt/tm/util/bash comme point de terminaison est susceptible d'apparaître dans les...

CVE-2021-38699-Stored-XSS

CVE-2021-38699: XSS stocké dans TastyIgniter v3.0.7 Restaurtant CMS Un cross-site scripting authentifié stocké existe dans la section System Logs de l'application web TastyIgniter v3.0.7 Restaurtant CMS. https://vulners.com/cve/CVE-2021-38699 POC 1. Exécutez un cross-site scripting réflectif...

CVE-2026-87980

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable in the UNIX S-TAP component due to the cleartext storage of sensitive information in logs (CWE-532). A local attacker could exploit this to obtain sensitive data. Remediation is available via the IBM Guardium Data Protectio...

CVE-2026-87980 Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs...