SilentMoonwalk

SilentMoonwalk 完全动态调用栈欺骗器的 PoC 实现 概要 SilentMoonwalk 是一个完全动态调用栈欺骗器的 PoC 实现，它实现了一种技术，用于从调用栈中移除原始调用者， 并使用 ROP 使栈展开与控制流不同步。 作者 本 PoC 是有关栈欺骗主题的联合研究成果。该研究的作者是： KlezVirus Waldo-IRC Trickster0 我想强调，如果没有 Waldo-IRC 和 Trickster0 的工作，这项工作将不可能完成，他们两人都 为 PoC 的早期阶段以及背后的研究做出了贡献。 概述 该仓库演示了一个 PoC 实现，用于在调用任意 Window...

CVE-2023-27163

CVE-2023-27163 - SSRF en Request Baskets Prueba de concepto de SSRF en Request Baskets texto alternativo Las versiones de Request Baskets anteriores a la 1.2.1 son vulnerables a ataques de Server Side Request Forgery SSRF a través del componente /api/baskets/name. uso git clone...

EUVD-2026-93875

A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileges and gain administrative access to the affected system...

CVE-2026-76748

A privilege escalation vulnerability exists in the API of AOS-S . An authenticated read-only user can successfully exploit this flaw to escalate their privileges and obtain administrative access to the affected system. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . No specific techni...

drift-node-sdk

El SDK de Tusk Drift para Node.js permite realizar pruebas de API rápidas y deterministas mediante la captura y reproducción de las llamadas de API realizadas hacia y desde tu servicio. Registra automáticamente llamadas de API reales y reprodúcelas como pruebas con la CLI de Tusk para detectar...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

CVE-2026-106513 MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change

MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the SimpleBackgroundJobs plugin—through its web UI and API to site-admin users. The background job workers trust raw Redis job payloads without additional...

EUVD-2026-93666

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...

CVE-2026-103620

A missing authorization vulnerability in GitHub Enterprise Server allows repository collaborators with write access to delete the current default branch using the GraphQL API . This flaw enables an attacker to set an attacker-controlled branch as the new default. In repositories requiring pull-re...

CVE-2025-0868

渗透测试项目报告：利用CVE-2025-0868 DocsGPT JSON Eval远程代码执行 1. 引言 一个严重的远程代码执行RCE漏洞CVE-2025-0868于2025年2月20日被披露，存在于开源DocsGPT库中，由在解析JSON有效载荷时不安全地使用eval函数引起。 关键细节： 影响DocsGPT 0.8.1至0.12.0版本 CVSS 4.0评分为9.3（严重） 允许未经身份验证、可通过网络访问的代码注入 对机密性、完整性和可用性造成全面影响 关于CVE-2025-0868...

SecretFinder

关于 SecretFinder SecretFinder 是一个基于 LinkFinder 的 Python 脚本，用于发现 JavaScript 文件中的敏感数据，如 apikeys、accesstoken、authorizations、jwt 等。它通过使用 jsbeautifier for Python 结合一个相当大的正则表达式来实现。这个正则表达式由四个小的正则表达式组成。它们负责在 JS 文件中查找和搜索任何内容。 输出以 HTML 或纯文本形式呈现。 帮助 usage: SecretFinder.py -h -e -i INPUT -o OUTPUT -r REGEX -b...

EUVD-2026-93660

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...

CVE-2026-104073 NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...

CVE-2026-104073

NetBox versions 2.9.5 before 4.7.0 are vulnerable to a server-side template injection vulnerability. A low-privileged user with the "Can add custom links" permission can exploit this by exposing the raw Django HttpRequest object to the Jinja2 template context. An attacker can craft a custom link ...

CVE-2025-8625

CVE-2025-8625 Copypress Rest API 1.1 - 1.2 - Secreto JWT configurable omitido y validación de tipo de archivo ausente que permiten ejecución remota de código no autenticada 🛡️ Exploit de RCE para Copypress Rest API 1.1 - 1.2 📝 Descripción El plugin Copypress Rest API para WordPress versiones 1.1 a...

AutoNessus

AutoNessus 此脚本与Nessus API通信，旨在帮助自动化扫描。根据脚本使用的标志，可以列出所有扫描、列出所有策略、启动、停止、暂停和恢复扫描。如果客户有指定的测试时间段，创建cron任务/计划任务来自动化启动或暂停扫描可能会很有帮助。 请随意使用和修改此代码；它适用于我们的需求，但可能不完全适用于您的需求。欢迎任何建议或改进。 依赖项 需要安装Python 2.x版本和"requests"模块。 安装说明请参见：http://docs.python-requests.org/en/latest/user/install/ 启动与帮助 python autoNessus.py...

CVE-2026-106422

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in an API. This vulnerability allows a remote attacker to bypass web origin policy by using a crafted HTML page. The security severity is rated as Low by Chromium. No specific exploit information is pr...

EUVD-2026-93611

Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106422

Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

RedditC2

RedditC2 滥用 Reddit API 来承载 C2 流量，由于蓝队成员大多使用 Reddit，这可能是一种使流量看起来合法的好方法。 🚫 声明：使用此项目仅用于教育/测试目的 。在未经授权的机器 上使用是严格禁止 的。如果发现有人将其用于非法/恶意意图 ，本仓库的作者将不 承担任何责任。 要求 在 python3 中安装 PRAW 库： pip3 install praw 快速开始 参阅快速入门指南以立即上手！ 演示...