iac-scan-runner

IaC Scan Runner Service that scans your Infrastructure as Code for common vulnerabilities. Aspect| Information ---|--- Tool name| IaC Scan Runner Docker image| xscanner/runner PyPI package| iac-scan-runner Documentation| docs Contact us| [email protected] Table of Contents Description Runnin...

iac-scan-runner

IaC Scan Runner Servicio que escanea tu Infraestructura como Código en busca de vulnerabilidades comunes. Aspecto| Información ---|--- Nombre de la herramienta| IaC Scan Runner Imagen Docker| xscanner/runner Paquete PyPI| iac-scan-runner Documentación| docs Contáctanos| [email protected]...

jboss-autopwn

jboss-autopwn JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security C. Papathanasiou 2010 INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss A...

pacbot

مقدمة Policy as Code Bot PacBot هو منصة للمراقبة المستمرة للامتثال، وإعداد التقارير حول الامتثال، والأتمتة الأمنية للسحابة. في PacBot، يتم تنفيذ سياسات الأمن والامتثال كرمز. يتم تقييم جميع الموارد التي يكتشفها PacBot مقابل هذه السياسات لقياس مدى مطابقتها. يوفر إطار الإصلاح التلقائي في PacBot القد...

Chrome-Forensic_CVE-2024-0044

🔍 Chrome Forensic - CVE-2024-0044 A robust digital forensics tool for extracting and analyzing Google Chrome artifacts from Android devices Features • Installation • Usage • Documentation 👤 Author Information Author: JackTekno GitHub: github.com/JackTekno 📋 Overview This tool utilizes the...

copy-as-yara

Copy as YARA Author: alden Copy disassembly nicely formatted for YARA rules. Description: This is a really simple plugin that allows you to copy disassembly in a way that can be used in YARA rules. You have the option to either copy the assembly code as it is or use address wildcarding to create...

decker

ديكر - إطار تنسيق اختبار الاختراق الغرض ديكر هو إطار تنسيق لاختبار الاختراق. يعتمد على لغة تكوين هاشيكورب 2 نفس لغة التكوين مثل تيرافورم للسماح بـاختبار الاختراق التصريحي كرمز، بحيث يمكن حفظ اختباراتك وتتبع نسخها وإعادة استخدامها والتعاون فيها مع فريقك أو المجتمع. مثال على ملف تكوين ديكر: // يتم...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195

Lenovo IdeaTab A1000G — Root Note: This documentation and exploit code was generated with AI assistance Kiro. Verify before use — AI can and does make mistakes. Device Field| Value ---|--- Model| Lenovo IdeaTab A1000G SoC| MediaTek MT8317 = MT6517 CPU| Dual-core Cortex-A9 @ 1.2GHz Kernel| Linux...

latch-plugin-openVPN-AS

latch-plugin-openVPN-AS...

cnspec

cnspec Open source, cloud-native security and policy project cnspec assesses your entire infrastructure's security and compliance. It finds vulnerabilities and misconfigurations across public and private cloud environments, Kubernetes clusters, containers, container registries, servers, endpoints...

RITM

RITM This is a Python implementation of the man-in-the-middle attack described by Charlie Clark @exploitph in his post, New Attack Paths? AS Requested Service Tickets, and demonstrated in his proof-of-concept, Roast in the Middle. In short, this tool: 1. Performs ARP spoofing between your targets...

Grafana-Plugin-Enumerator-CVE-2021-43798

Grafana CVE-2021-43798 Plugin Enumerator A small Bash-based tool for testing Grafana instances for CVE-2021-43798 , a directory traversal vulnerability affecting vulnerable Grafana versions. The tool enumerates Grafana plugin IDs and uses curl --path-as-is to test whether directory traversal can...

AS400

AS/400 presentation for SteelCon...

CVE-2026-87841

The UnitechPay WordPress plugin through 1.0.6.3 does not verify the authenticity of the payment notifications it receives, allowing unauthenticated attackers to mark orders placed through it as paid without any payment being made, as well as to force other orders into a failed state...

CVE-2017-12149

CVE-2017-12149 CVE-2017-12149 JBOSS as 6.X Deserialization Reverse Shell Version Rewritten GUI interface based on the author's command-line mode detail:http://www.cnblogs.com/sevck/p/7874438.html...

CVE-2026-7867-disk2root

Filesystem.Mount → as-user Spoofing → Authorization Bypass → Root-context Mount → LPE Overview CVE-2026-7867 is a local privilege escalation vulnerability in udisks2 involving the Filesystem.Mount D-Bus method, the as-user option, fstab-managed mount flows...

jboss-autopwn

⚠️ NOTE: This tool is no longer under active maintenance. JBoss Autopwn Script Christian G. Papathanasiou http://www.spiderlabs.com INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss AS server. Once deployed, the script uses its upload and command execution capability to provid...

EUVD-2026-95260

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

CVE-2021-4034

CVE-2021-4034 This is a POC for the vulnerability found in polkit's pkexec binary which is used to run programs as another users. For in-depth study: https://access.redhat.com/security/vulnerabilities/RHSB-2022-001 Run gcc poc.c -o poc && ./poc...