CVE-2026-89301

The rtMedia for WordPress, BuddyPress and bbPress plugin is vulnerable in all versions up to and including 4.7.13 due to insufficient file path validation in the process function. This flaw allows unauthenticated attackers to perform limited file deletion of arbitrary safe files on the server via...

CVE-2023-42326

pfSense 2.7.0 命令注入漏洞利用 CVE-2023-42326 此 Python 脚本是 pfSense 2.7.0 中命令注入漏洞（CVE-2023-42326）的概念验证（PoC）利用程序。该漏洞允许经过身份验证的攻击者通过 interfacesgifedit.php 和 interfacesgreedit.php 组件注入并执行任意命令。 功能特性 利用模式选择（gif 或 gre），用于选择存在漏洞的组件。 命令注入功能，能够运行任意 shell 命令。 Netcat 反弹 shell 处理，带自动线程管理。 调试模式，增强请求数据的可见性。 前提条件...

pe2pic

简体中文 || English pe2pic 用于PE文件的小型可视化工具 入门指南 通过以下方式安装依赖项: pip install -r requirements.txt 用法 usage: pe2pic.py -h --infile INFILE --outfile OUTFILE --double --minheight MINHEIGHT PE可视化工具 可选项: -h, --help 显示帮助消息并退出 --infile INFILE 输入文件 --outfile OUTFILE 输出文件 --double 双层截面视图？ --minheight MINHEIGHT...

gf

gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: ▶ grep -HnrE...

fernflower

fernflower 快速在终端反编译class文件 usage: Usage: java -jar fernflower.jar -= + Example: java -jar fernflower.jar -dgs=true c:\my\source\ c:\my.jar d:\decompiled\ Ps: 再也不需要jd-gui了，比jd-gui强大...

CVE-2025-33053-WebDAV-RCE-PoC-and-C2-Concept

CVE-2025-33053 - WebDAV 远程代码执行 RCE PoC 与 C2 模拟 ⚠️ 仅供教育用途 该项目演示了一个利用 WebDAV 和 .url 文件投放实现逼真远程代码执行的概念验证。它包含一个基于诱饵的可执行文件以及一个受控的命令与控制 C2 模拟。未分享任何恶意载荷。 📜 摘要 本仓库包含针对 CVE-2025-33053 的 PoC，该漏洞存在于 Windows 处理指向 WebDAV 共享的 .url 文件的方式中。该 PoC 演示了攻击者如何： 通过 ZIP（Invoice.pdf.zip）投放 .url 快捷方式 触发运行托管在 WebDAV 容器上的载荷...

SysWhispers3

SysWhispers3 SysWhispers 通过生成头文件/ASM 文件帮助规避检测，使植入程序能够直接进行系统调用。 官方 Discord 频道 快来 Discord 一起玩吧！ 我为什么不为 SysWhispers2 创建 PR？ SysWhispers3 作为独立版本的原因有很多，但最重要的包括： SysWhispers3 是 Inceptor 使用的“事实分支”，并实现了一些与原始版本工具无关的实用类。 SysWhispers2 正朝着支持 NASM 编译（用于 gcc/mingw）的方向发展，而此版本专门设计并测试支持 MSVC（因为 Inceptor...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

satellite

satellite Satellite is an web payload hosting service which filters requests to ensure the correct target is getting a payload. This can also be a useful service for hosting files that should be only accessed in very specific circumstances. Quickstart Guide 1. Install satellite on Ubuntu using th...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say sudo dnf install tcpflo...

troll-a

Troll-A Troll-A 是一个命令行工具，用于从 WARC（Web ARChive）文件中提取密码、API 密钥和令牌等机密信息。Troll-A 是一个易用 、全面 且快速 的解决方案，用于在网络存档中查找机密信息。 特性 协议： 支持通过 HTTP/HTTPS 从网络服务器、Amazon S3 对象存储服务、本地文件系统或 STDIN 直接获取网络存档。 压缩： 支持使用 GZip、BZip2、XZ 或 ZStd 压缩的网络存档。对于 ZStd，还支持在压缩数据流前附加自定义字典（如同 .megawarc.warc.zst 文件中使用的）。 全面： 使用来自 Gitleaks...

sobelow

Sobelow Sobelow is a security-focused static analysis tool for Elixir & the Phoenix framework. For security researchers, it is a useful tool for getting a quick view of points-of-interest. For project maintainers, it can be used to prevent the introduction of a number of common vulnerabilities...

claudleak

claudleak 扫描公共GitHub仓库中AI编码工具配置文件（.claude/、.cursor/、.continue/、.codex/、CLAUDE.md、AGENTS.md等）中的泄露凭证。 使用TruffleHog进行秘密检测。 示例.claude/目录： "permissions": "allow": "Bashgo build:", "BashRAPID7ENCRYPTEDCREDS='eP3g488hQ23QiU4kJahhwPKs3PyE' go test ./pkg/agents/ -run TestRules -v -count=1 -timeout 30s",...

CVE-2018-13379

🛡️ CVE-2018-13379 - Fortinet SSL VPN 漏洞 🔍 概述 CVE-2018-13379 是 Fortinet FortiOS SSL VPN 中的一个严重路径遍历 漏洞。 它允许攻击者下载 VPN Web 会话文件 并提取敏感信息。 影响： 信息泄露（用户名、会话令牌） CVSSv3： 8.6（高危） 利用方式： 远程，无需认证 💻 受影响版本 FortiOS 5.4.6 – 5.4.12 FortiOS 5.6.3 – 5.6.7 FortiOS 6.0.0 – 6.0.4 FortiProxy ≤ 1.2.8 / 2.0.0 🛠️ 此脚本功能...

VMware - Local File Inclusion

VMware Workspace ONE Access, Identity Manager, and Realize Automation are vulnerable to local file inclusion because they contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access withou...

Joomla! Harmis Messenger 1.2.2 - Local File Inclusion

Joomla! Harmis Messenger 1.2.2 is vulnerable to local file inclusion which could give an attacker read access to arbitrary files. id: CVE-2019-9922 info: name: Joomla! Harmis Messenger 1.2.2 - Local File Inclusion author: 0xAkoko severity: high description: Joomla! Harmis Messenger 1.2.2 is...

JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing

JetBackup WordPress plugin = 2.0.9.9 does not use index files to prevent directory listing in certain configurations, letting malicious actors leak backup files, exploit requires access to the web server. id: CVE-2023-7165 info: name: JetBackup = 2.0.9.7 - Sensitive Information Exposure via...

XWiki Platform - Information Disclosure

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. id: CVE-2025-55747 info: name: XWiki Platform - Information Disclosure author: Redmomn...

Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion

The Avada Fusion Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybedeletefiles function. An unauthenticated attacker can delete arbitrary files on the server by manipulating the filepath parameter in the...

Vite - Path Traversal

Vite versions prior to 6.2.6, 6.1.5, 6.0.15, 5.4.18, and 4.5.13 contain a file exposure vulnerability caused by improper handling of request URLs with '' in the dev server running on Node or Bun, letting attackers access arbitrary files, exploit requires the server to be exposed to the network an...