phpstan

PHPStan - PHP 静态分析工具 PHPStan 专注于在无需实际运行代码的情况下发现其中的错误。它甚至能在你为代码编写测试之前就捕获整类 bug。它将 PHP 更接近编译型语言，使你可以在实际运行某行代码之前检查其正确性。 了解更多关于 PHPStan » 在在线游乐场试用 PHPStan！» 赞助商 希望你的 Logo 出现在这里？了解更多 » 金牌赞助商 银牌赞助商 铜牌赞助商 你可以通过 GitHub Sponsors 直接赞助我的 PHPStan 开源工作。 也接受通过 Revolut.me 的单次捐赠。如需发票，请通过电子邮件联系我。 文档 所有文档都位于...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156 Versión vulnerable al exploit La vulnerabilidad Baron Samedit CVE-2021-3156 afecta a las versiones heredadas de sudo 1.8.2 hasta 1.8.31p2 y a las versiones estables 1.9.0 hasta 1.9.5p1. Esta falla de desbordamiento de búfer basado en montón se...

electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

automation-controller: automation-controller-container: automation-controller: write-only survey password recovered in plaintext via Schedule/WorkflowJobTemplateNode survey min/max validation error message

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted, displayed only as a placeholder on read. When a schedule or workflow job template node is revalidated against a tightened survey specification,...

ThreatIngestor

ThreatIngestor Utilities Scripts to improve ThreatIngestor usage and help with minimizing errors. All scripts contain the following optional argument to allow for higher verbosity in stdout: root@kitploit: python3 scripts/ -v A quick list of all available scripts: Script| Example| Description...

etl-parser

etl-parser Event Trace Log file reader in pure Python etl-parser is a pure Python 3 parser library for ETL Windows log files. ETL is the default format for ETW as well as the default format for the Kernel logger. etl-parser has no system dependencies, and will work well on both Windows and Linux...

CVE-2019-1315

Elevación de privilegios mediante movimiento arbitrario de archivos en el Administrador de informes de errores de Windows Detalles: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html Necesitará la biblioteca NtApiDotNet para ejecutarlo, así como un archivo...

ghauri

Like Ghauri, consider supporting the developer...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

CVE-2023-27587-PoC

CVE-2023-27587-PoC El PoC simple de CVE-2023-27587 ¿Qué es ReadToMyShoe? ReadtoMyShoe RTMS es una aplicación web rust, yew y axum que permite subir artículos mediante URL o pegándolos directamente y escucharlos más tarde. Impacto Si se produce un error al añadir un artículo, el sitio web muestra ...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

autotimeliner

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. AutoTimeliner runs multiple Volatility3 plugins against Windows, Linux, and macOS memory images, then merges their output into a single, sorted CSV timeline: Generic Timeline Plugin Plugin| What it captures ---|---...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

Pymap-Scanner

Pymap-Scanner 功能 root@kitploit: 1-Basic Gui 2-Speed Scan 3-Custom Services 4-User Control 5-Error Control 6-Useful parameters And More. 安装模块 root@kitploit: $ Pyqt4 $ Nmap 依赖第三方 root@kitploit: +xsltproc +截图...

Drupal 11.x-dev - Full Path Disclosure

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist. id: CVE-2024-45440 info: name: Drupal 11.x-dev - Full Path Disclosure author: DhiyaneshDK severity: medium description: |...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

CVE-2026-4921

IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2026-3626

IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...