AttackSurfaceManagement

ACERCA DE: Descubra la superficie de ataque y priorice los riesgos con nuestra plataforma continua de Gestión de la Superficie de Ataque ASM - Sn1per Professional. Para más información, visite https://sn1persecurity.com. CARACTERÍSTICAS: Descubrimiento de la Superficie de Ataque Descubra fácilmen...

sshhipot

Version 2 is under development. Please switch to the v2 branch, build, and run with -h. SSHHiPot High-interaction SSH honeypot ok, it's really a logging ssh proxy. Still more or less a work-in-progress. Feel free to go install this repository if you'd like to try it. Run it with -h to see more...

CVE-2024-27316_poc

CVE-2024-27316 Inundación de CONTINUACIÓN HTTP/2 PoC Servidor objetivo Apache httpd Iniciar docker-compose up -d Verificación de conectividad httpd v2.4.58 vulnerable curl --http2 -i --head http://localhost:3392/ curl --http2 -i --head -k https://localhost:3393/ httpd v2.4.59 versión corregida cu...

CVE-2026-102243 MODSetter SurfSense MCP Connector Integration test command injection

A vulnerability was identified in MODSetter SurfSense up to 2.0.3. This issue affects some unknown processing of the file /api/search-source/connectors/mcp/test of the component MCP Connector Integration. Such manipulation leads to command injection. It is possible to launch the attack remotely...

CVE-2026-102243

A command injection vulnerability exists in MODSetter SurfSense up to version 2.0.3 . The flaw resides in the MCP Connector Integration component, specifically involving unknown processing of the /api/search-source/connectors/mcp/test file. This vulnerability allows for remote attacks. While the ...

CVE-2026-102243 MODSetter SurfSense MCP Connector Integration test command injection

A vulnerability was identified in MODSetter SurfSense up to 2.0.3. This issue affects some unknown processing of the file /api/search-source/connectors/mcp/test of the component MCP Connector Integration. Such manipulation leads to command injection. It is possible to launch the attack remotely...

EUVD-2026-88609

A vulnerability was identified in MODSetter SurfSense up to 2.0.3. This issue affects some unknown processing of the file /api/search-source/connectors/mcp/test of the component MCP Connector Integration. Such manipulation leads to command injection. It is possible to launch the attack remotely...

Stormspotter

Stormspotter 创建 Azure 订阅中资源的“攻击图”。它使红队和渗透测试人员能够可视化租户内的攻击面和横向移动机会，并助力防御方快速定位安全事件并确定响应工作的优先级。 安装 使用 Docker 大多数用户可能会发现通过 Docker 安装 Stormspotter 更容易。这是推荐的方法。 git clone https://github.com/Azure/Stormspotter docker-compose up docker-compose 文件将创建三个容器： Stormspotter 前端 Stormspotter 后端 Neo4j v4...

PHP-CGI-INTERNAL-RCE

PHP-CGI-INTERNAL-RCE Este PoC demuestra cómo un atacante puede encadenar Orange Tsai's CVE-2024-4577 con DNS rebinding para lograr ejecución remota de código en infraestructura de red interna directamente a través del navegador web de la víctima. Al eludir la Política del Mismo Origen SOP y...

wp_drupal_timing_attack

wpdrupaltimingattack Python 脚本，利用 CVE-2014-9016 和 CVE-2014-9034。 仅用于合法目的。...

CVE-2026-102240

A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/networktools of the component Network Tools CGI. The manipulation of the argument sid results in os command injection. The attack may be performed from remote. The exploit has be...

CVE-2026-101858

A flaw has been found in RaspAP raspap-webgui up to 3.5.5. Affected is the function WiFiManager::writeWpaSupplicant of the file src/RaspAP/Networking/Hotspot/WiFiManager.php of the component SSID Processing. This manipulation of the argument ssid causes os command injection. The attack can be...

CVE-2026-101860

A vulnerability was found in RaspAP raspap-webgui up to 3.5.5. Affected by this issue is the function PluginInstaller::addSudoers of the file src/RaspAP/Plugins/PluginInstaller.php of the component sudo Configuration. Performing a manipulation results in improper privilege management. The attack...

CVE-2026-101859

A vulnerability has been found in RaspAP raspap-webgui up to 3.5.5. Affected by this vulnerability is the function escapeshellcmd of the file ajax/openvpn/delovpncfg.php of the component OpenVPN Configuration Handler. Such manipulation of the argument cfgid leads to os command injection. The atta...

EUVD-2026-88607

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

CVE-2026-102241

The Netcore NAP930 (version 0.1.241010.141410) contains a vulnerability in the Backup/Restore component, specifically within the /lib/functions/backup_common.sh file. Manipulation of the aes_pass argument leads to the use of a hard-coded cryptographic key . This vulnerability can be initiated rem...

ImproHound

ImproHound 识别破坏AD分层结构的BloodHound攻击路径 ImproHound 是一个带有图形界面的 dotnet 独立 Windows x64 可执行文件。 要使用 ImproHound，您必须运行 SharpHound 从 AD 收集必要的数据。然后将数据上传到您的 BloodHound 安装实例。ImproHound 会连接到 BloodHound 底层的 Neo4j 数据库。在 ImproHound 中，您将通过 OU 结构将 AD 对象分为不同的层级，ImproHound 将识别出允许 AD 对象危及更高（更接近零）层级对象的 AD 关系，并将层级违规保存到 C...

routopsy

routopsy Routopsy is a toolkit built to attack often overlooked networking protocols. Routopsy currently supports attacks against Dynamic Routing Protocols DRP and First-Hop Redundancy Protocols FHRP. Most of the attacks currently implemented make use of a weaponised 'virtual router' as opposed t...

routopsy

routopsy Routopsy es un conjunto de herramientas diseñado para atacar protocolos de red que a menudo se pasan por alto. Routopsy actualmente admite ataques contra Protocolos de Enrutamiento Dinámico DRP y Protocolos de Redundancia de Primer Salto FHRP. La mayoría de los ataques actualmente...

EUVD-2026-88606

A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/networktools of the component Network Tools CGI. The manipulation of the argument sid results in os command injection. The attack may be performed from remote. The exploit has be...