335922 matches found
logdata-anomaly-miner
logdata-anomaly-miner Esta herramienta analiza datos de registro logs y permite definir pipelines de análisis para la detección de anomalías. Fue diseñada para ejecutar el análisis con recursos limitados y los permisos más bajos posibles, lo que la hace adecuada para su uso en servidores de...
DanderSpritz_lab
Laboratorio DanderSpritz Propósito El objetivo del laboratorio DanderSpritz es permitir a investigadores y defensores configurar rápidamente una versión completamente funcional de DanderSpritz - El conjunto de herramientas de post-explotación del Equation Group y un dominio Windows Server 2008 y ...
CVE-2022-21350
Why two POCs? One with com.51pwn.hktalent.CreatJar.mainargs; is used to create the minimal payload generation tool. After creation, use the other one. Running CVE-2022-21350powerBy51pwn.jar to build the payload, errors do not affect the use of the payload. other exp CVE20202551 CVE20202555...
CVE-2020-14882
CVE-2020–14882 Weblogic Unauthorized bypass RCE bypass patch with CVE-2020–14882 private static final String IllegalUrl = new String";", "%252E%252E", "%2E%2E", "..", "%3C", "%3E", ""; list %252E%252E %2E%2E .. %3E %3C ; lower "%252E%252E%252F".lower '%252e%252e%252f' %252E%252E%252F to...
react2shell-scanner
react2shell-scanner A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. For technical details on the vulnerability and detection methodology, see our blog post:...
sandbox-agent
Agents Infraestructura de agentes de Rivet. Únete a nosotros en Discord. Proyectos Proyecto| Directorio| Documentación ---|---|--- Rivet Agents : ejecuta agentes como Pi como Rivet Actors duraderos @rivet-dev/pi, @rivet-dev/sandbox-adapter| packages/, documentación en docs/| rivet.dev/agents/docs...
CVE-2024-21006
1、No hay mucho que decir, es solo una explotación de LDAP. 2、Por favor, revise los registros de solicitudes del servicio LDAP. 3、La versión objetivo debe ser Oracle WebLogic Server 12.2.1.4.0 y 14.1.1.0.0. Además, se necesita una versión baja de JDK. 4、Use JNDIExploit-1.4-SNAPSHOT.jar para inicia...
ghidra-mcp
Ghidra MCP Server If you find this useful, please ⭐ star the repo — it helps others discover it! If Ghidra MCP saves you time, consider sponsoring the project. One-time and recurring support both help fund compatibility updates, production hardening, docs, and new tooling. A production-ready Mode...
jndi-ldap-test-server
jndi-ldap-test-server This is a minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection attacks in Java, especially CVE-2021-44228. How to test vulnerability to CVE-2021-44228 1. Download the test server binary for your platform you can find all binaries under Release...
React2Shell
⚛️ React2Shell CVE-2025-55182 Advanced Exploitation Toolkit for Next.js Server Actions CVE-2025-55182. React2Shell is a powerful, interactive shell wrapper designed to exploit the React2Shell vulnerability. It goes beyond simple RCE by providing command history, file transfer capabilities, and...
windbg-mcp
WinDbg MCP Un servidor MCP Model Context Protocol que expone cada función del depurador de Windows de pybag como una herramienta nativa de MCP. Le otorga a cualquier cliente compatible con MCP Claude Desktop, Claude Code, Cowork, OpenAI Codex CLI, Cursor y agentes personalizados control total sob...
toolbox
-Significant%20AI%2C%20fully%20reviewed-1f77b4 Herramientas de pruebas de seguridad de aplicaciones basadas en MCP para tu agente de programación. No es un escáner, sino un banco de trabajo colaborativo. Los agentes tienen dificultades con las interfaces de usuario y las API con estado; tú eres...
cve-2025-55182-checker
CVE-2025-55182 Checker A portable Bash script to detect vulnerable versions of React Server DOM and Next.js packages affected by CVE-2025-55182. Features Recursively scans all package.json files in a project. Detects vulnerable versions of: react-server-dom- 19.0.0, 19.1.0, 19.1.1, 19.2.0 next...
CertificateDsc
CertificateDsc Code of Conduct This project has adopted this code of conduct. Releases For each merge to the branch main a preview release will be deployed to PowerShell Gallery. Periodically a release version tag will be pushed which will deploy a full release to PowerShell Gallery. Contributing...
CVE-2021-22005
CVE-2021-22005 VMware vCenter Server Arbitrary File Upload Vulnerability Code By: Junsheng @Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read...
nsd
NSD The NLnet Labs Name Server Daemon NSD is an authoritative DNS name server. It has been developed for operations in environments where speed, reliability, stability and security are of high importance. If you have any feedback, we would love to hear from you. Don’t hesitate to create an issue ...
Web-Security-Learning
Web-Security-Learning Repository: https://github.com/CHYbeta/Web-Security-Learning Knowledge Planet Vulnerability Attack and Defense: https://t.zsxq.com/mm2zBeq Table of Contents: Web-Security-Learning Web Security SQL Injection MySQL MSSQL PostgreSQL MongoDB Techniques Tools XSS CSRF Other...
fix-react2shell-next
fix-react2shell-next One command to fix CVE-2025-66478 React 2 Shell RCE in your Next.js / React RSC app. npx fix-react2shell-next Deterministic version bumps per the official advisories. What it does 1. Recursively scans all package.json files handles monorepos 2. Checks for vulnerable versions...
PivotSuite
DESCARGO DE RESPONSABILIDAD: Este software es solo para fines educativos. Este software no debe utilizarse para actividades ilegales. El autor no se hace responsable de su uso. PivotSuite PivotSuite: Hackea la Red Oculta - Un Kit de Pivoteo de Red Descripción PivotSuite es un kit de pivoteo de re...