wireless-ids

Wireless IDS Sistema de Detección de Intrusiones Wireless IDS es una herramienta de código abierto escrita en Python y funciona en entorno Linux. Esta herramienta analizará el tráfico aéreo circundante en busca de actividades sospechosas como paquetes de ataque WEP/WPA/WPS. Realiza lo siguiente:...

smiiiiiiiiiiiiiiii

smiiiiiiiiiiiiiiii Explotando el Modo de Gestión del Sistema con una interrupción muy muy muy muy muy muy muy larga. Resumen Resulta que puedes romper el SMM — el entorno de ejecución seguro y ultra privilegiado que se ejecuta de forma invisible en segundo plano en cada CPU x86 — con nada más que...

Astra

Astra 由于现有 API 的持续变更以及新 API 的不断添加，REST API 渗透测试变得复杂。安全工程师或开发者可将 Astra 作为其流程的组成部分，从而在开发周期早期检测并修补漏洞。Astra 能够自动检测和测试登录与登出（身份验证 API），因此任何人都可以轻松将其集成到 CICD 流水线中。Astra 可以接受 API 集合作为输入，因此也可用于独立模式下的 API 测试。 SQL 注入 跨站脚本攻击 信息泄露 身份验证与会话管理失效 CSRF（包括 Blind CSRF） 速率限制 CORS 配置错误（包括 CORS 绕过技术） JWT 攻击 CRLF 检测 Blin...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

Striker

Striker 侦察与漏洞扫描套件 重要通知 Striker 2.0 仍处于原型阶段，这意味着它不适用于普通用户。其公开目的在于促进贡献以加快开发速度。 用法： python3 striker.py example.com 工作流程 第一阶段：攻击面发现 此阶段包括查找用户指定域名的子域名、筛选存活主机以及扫描最常见的1000个TCP端口。 第二阶段：批量扫描 此阶段对配置错误的HTTP响应头、crossdomain.xml进行批量扫描，并检查一些敏感文件。 第三阶段：主动信息收集 此阶段专注于通过爬虫子域名来收集数据。收集的数据用于寻找过时的JS库、检测使用的CMS和技术。...

AD-PathFinder

ADPathFinder ADPathFinder es una herramienta de mapeo de ataques para pentesters y red teamers. Analiza datos de SharpHound y los unifica con plugins de OpenGraph para descubrir rutas de ataque hacia objetivos de alto valor, como administradores de dominio y controladores de dominio, partiendo de...

CVE-2023-2594

CVE-2023-2594 https://vulners.com/cve/CVE-2023-2594 Se ha encontrado una vulnerabilidad, clasificada como crítica, en SourceCodester Food Ordering Management System 1.0. Se ve afectada una función desconocida del componente Registration. La manipulación del argumento username conduce a una...

robodroid

RoboDroid RoboDroid es una herramienta de software de vanguardia diseñada para simplificar el proceso de gestionar y muy pronto también desplegar máquinas Android para su uso en entornos de Cyber Range. Con RoboDroid, los usuarios pueden configurar y personalizar fácilmente comportamientos...

GitHound

GitHound Resumen GitHound es un recopilador OpenGraph de BloodHound para GitHub, diseñado para mapear la estructura y los permisos de tu organización en un grafo navegable de rutas de ataque. Permite: Modela entidades clave de GitHub GHOrganization : Los metadatos de tu organización de GitHub...

knob

README Repositorio sobre los ataques de Negociación de Clave de Bluetooth KNOB en Bluetooth BR/EDR y Bluetooth Low Energy. Trabajo Relacionado Del estándar Bluetooth a los 0-days conformes al estándar HWIO20 Ataques de degradación de negociación de clave en Bluetooth y Bluetooth Low Energy TOPS20...

EUVD-2026-87480

OpenClaw npm package 'openclaw' versions = 2026.6.6 and 2026.8.1 apply the SMS webhook invalid-request rate limit before Twilio signature verification and identify clients only by the raw proxy socket address. In deployments where the SMS/Twilio webhook sits behind a trusted reverse proxy or tunn...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

attack_range

Splunk Attack Range v5 Splunk Attack Range 构建配有仪器的云环境（AWS、Azure、GCP），模拟攻击，并将数据转发到 Splunk，用于检测开发和测试。 它的功能： 构建实验环境 — 通过 Terraform 和 Ansible 部署一个小型、类似生产环境的实验环境（Splunk、Windows/Linux 服务器、可选的 Kali、Zeek 等）。 模拟攻击 — 运行 Atomic Red Team（及其他）技术以生成真实的遥测数据。 共享访问 — 使用 WireGuard VPN；生成额外的客户端配置以与他人共享该实验环境。 点击图片观看...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

stratus-red-team

Stratus Red Team Stratus Red Team es "Atomic Red Team™" para la nube, que proporciona una emulación granular y autónoma de técnicas de ataque ofensivas...

osCommerce v4.0 - Cross-site Scripting

A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-products. The manipulation of the argument cat leads to cross site scripting. It is possible to launch the attack remotely. id: CVE-2024-4348 info: name:...

Stable Diffusion Webui 1.10.0 - Open Redirect

An open redirect vulnerability exists in Stable-Diffusion-Webui 1.10.0, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. id: CVE-2024-11044...

WordPress Watu Quiz <3.3.9.1 - Cross-Site Scripting

WordPress Watu Quiz plugin before 3.3.9.1 is susceptible to cross-site scripting. The plugin does not sanitize and escape some parameters, such as email, dn, date, and points, before outputting then back in a page. An attacker can inject arbitrary script in the browser of an unsuspecting user in...

WPMobile.App <= 11.56 - Open Redirect

The WPMobile.App plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 11.56. This is due to insufficient validation on the redirect URL supplied via the 'redirect' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially...

WordPress Competition Form Plugin <= 2.0 - Cross-Site Scripting

Competition Form WordPress plugin = 2.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires victim to visit a...