burp_global_match_replace

全局匹配与替换 GMR Burp Suite 扩展 全局匹配与替换 GMR 扩展了 Burp Suite，通过匹配/替换规则在全局范围内或跨多个您选择的工具（Repeater、Intruder、Proxy 等）应用规则。它提供每个请求和响应的差异对比，让您清楚看到哪些内容发生了变化。 此扩展使用 Burp Montoya API。 功能特性 全局匹配/替换 跨 Burp 工具（不仅限于 Proxy） 基于规则的引擎 ，每条规则可指定目标（请求/响应 + 工具选择） 两种规则类型 ：简单模式（支持通配符）和正则表达式 每条规则的多行支持 ，用于匹配跨行内容 规则测试面板...

bambdas

Bambda 脚本 欢迎来到 PortSwigger 官方 Bambda 脚本仓库。本仓库收录了由 PortSwigger 和社区共同开发的脚本合集，满满都是🧡 📑 本页目录 Bambda 脚本类型 仓库内容 将脚本导入 Burp 更新库中的脚本 贡献你自己的脚本 资源 Bambda 脚本类型 Bambdas 是在受支持的 Burp 工具中运行的脚本。你可以通过创建以下内容快速定制 Burp Suite： 表过滤器 – 动态过滤 Burp 中的表。 表列 – 添加自定义表列以呈现重要数据。 Repeater 自定义操作 – 在 Burp Repeater 中提取、转换和分析数据。...

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

vulnerable-bsr-lab-CVE-2023-6933

CVE-2023-6933 脆弱性ラボ 概要 このラボ環境は、Better Search Replace WordPress プラグイン（バージョン ≤1.4.4）における重大な PHP オブジェクトインジェクション脆弱性 CVE-2023-6933 を実演します。 脆弱性の詳細 CVE ID : CVE-2023-6933 CVSS スコア : 9.8（緊急） 影響を受けるプラグイン : Better Search Replace ≤1.4.4 脆弱性タイプ : 非シリアル化されたユーザー入力による PHP オブジェクトインジェクション 攻撃ベクトル : AJAX エンドポイント...

fhex

Fhex - A Full-Featured HexEditor This project is born with the aim to develop a lightweight, but useful tool. The reason is that the existing hex editors have some different limitations e.g. too many dependencies, missing hex coloring features, etc.. This project is based on qhexedit2 , capstone...

fhex

Fhex - フル機能の16進エディタ このプロジェクトは、軽量でありながら便利なツールを開発することを目的として生まれました。その理由は、既存の16進エディタにはいくつかの異なる制限があるためです（例：依存関係が多すぎる、16進カラーリング機能がないなど）。 このプロジェクトは qhexedit2 、capstone 、keystone エンジンに基づいています。将来的に新機能が追加される可能性があり、PR を歓迎します。 機能 チャンクローダー - メモリを消費せずに大きなファイルの一部のみをロードするために使用します（チャンク間の移動には alt +...

CVE-2023-6933

CVE-2023-6933 漏洞介绍 描述 WordPress 的 "Better Search Replace" 插件存在一个严重的 PHP 对象注入漏洞。该安全缺陷存在于所有版本（包括 1.4.4 及之前版本）。它源于对不受信任输入的反序列化，使未认证的攻击者能够向系统注入 PHP 对象。值得注意的是，该插件本身不包含 PHP 对象注入链。然而，如果目标系统上安装了另一个包含 POI 链的易受攻击的插件或主题，则该漏洞可能允许攻击者删除任意文件、访问敏感数据或执行恶意代码。 附加分析 在本次分析中，我们还将涵盖 WordPress 6.4.0...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

Better Search Replace < 1.4.5 - PHP Object Injection

The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. I...

CVE-2026-103620 Missing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQL

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...

CVE-2026-15253

CVE-2026-15253 Easy Media Replace = 0.2.0 - 认证用户（作者及以上）存储型跨站脚本 描述 Easy Media Replace 插件通过媒体附件标题存在存储型跨站脚本（XSS）漏洞。当作者使用 XSS 载荷重命名媒体文件，且管理员或编辑在列表视图中浏览媒体库并悬停在“替换”链接上时，载荷会被执行。这是因为插件在输出媒体标题时未应用 escattr，从而突破了 HTML 属性上下文。 POC 1. 使用作者级别账户连接。 2. 上传一个文件。 3. 使用标题重命名文件：photo" onmouseover='alertdocument.domain...

study-turbolinks-link

JavaScript 使用方法 https://github.com/turbolinks/turbolinksapi-reference Turbolinks.visit'/home/two' // default is advance. Turbolinks.visit'/home/two', action: 'advance' Turbolinks.visit'/home/two', action: 'replace'...

GO-2026-6588 podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

podman quadlet install --replace does not fully replace the old file in github.com/containers/podman...

Rocky Linux 9 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc (crlsa-2026_69540)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202669540 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description block...

Rocky Linux 10.2 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc (crlsa-2026_69541)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202669541 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description blo...

Rocky Linux 8 [CIQ] Security Update: pg_repack / pg_repack-debuginfo / pg_repack-debugsource / pgaudit / etc (crlsa-2022_7128)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227128 advisory. postgresql: Extension scripts replace objects not belonging to the extension. CVE-2022-2625 Tenable has extracted the preceding description block directly from the...

PT-2026-105605

podman quadlet install --replace does not fully replace the old file in github.com/containers/podman...

AlmaLinux 9.6 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.6:CLSA-2026:1790795134)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790795134 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

AlmaLinux 9.2 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.2:CLSA-2026:1790809774)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790809774 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

Rocky Linux 9.6 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.6:CLSA-2026:1790795134)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790795134 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function b...