Egyscan

EgyScan V3.4 "Ultra" : あなたの無敵のデジタル要塞 🏰 デジタル領域の守護者たちよ、こんにちは！ 🛡️ EgyScan V3.0を使った特別な旅に出発しましょう。これは、執拗なサイバー脅威に対してあなたのウェブサイトを難攻不落の要塞に変える究極の守護者です。EgyScanがあなたのオンライン領域を守る止められない力として現れる、デジタル防御の未来を探検しましょう。 🚀 EgyScanで比類なき力を解き放て 🚀 EgyScan は単なるツールではありません。それはあなたのデジタル存在の守護天使です。それは次の力を持っています： 🔍 総合的な脆弱性検出：...

Havoc-C2-SSRF-poc

CVE-2024-41570: Havoc-C2-SSRF-poc 此漏洞通过伪造恶意代理注册和签入，在团队服务器上打开一个TCP套接字并从中读写数据，从而被利用。这允许攻击者泄露团队服务器的原始IP以及更多信息。 完整分析：https://blog.chebuya.com/posts/server-side-request-forgery-on-havoc-c2/ https://github.com/user-attachments/assets/9ab99915-8a8c-4bbd-b762-00280a23703c 要热修复您的团队服务器： 1. 进入Havoc目录 2...

webhandler

WebHandler 一个用于PHP系统函数的处理程序，同时也是‘netcat’处理程序的替代品 信息 WebHandler试图模拟一个‘Linux bash提示符’来处理和处理： root@kitploit: - PHP程序执行函数 例如 system、passthru、exec 等 - 绑定Shell连接 - 反向Shell连接 另一个功能是伪造HTTP头中的“User-Agent”字段。（--random-angent）。 它还支持HTTP代理（--proxy http://:） WebHandler适用于POST 和GET 请求： WebHandler是netcat连接的替代品。...

CVE-2025-26244

CVE-2025-26244-POC 利用此漏洞的代码见'spoof.go'。它模拟为C2服务器的代理。要利用此漏洞，我们需要知道： 1. 监听器的IP地址和端口 2. 监听器的公钥。 3. 监听器的首次回连URL。 我们可以通过逆向分析操作员之前生成的二进制文件来获取这些信息。 目前，'spoof.go'仅在监听器和代理都使用HTTPS协议时有效，但经过适配后，很可能也能支持DeimosC2支持的其他协议。 利用步骤 1）你需要获取操作员之前生成的HTTPS二进制文件。 2）从二进制文件中提取监听器的IP地址、端口、公钥以及首次回连URL。Trend Micro 提供了相关脚本协助此过...

EUVD-2026-69721

WWBN AVideo current e01e41ecc and earlier makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder/isAVideoMobileApp checks match HTTPUSERAGENT against a hardcoded literal "AVideoEncoder"/"AVideoMobileApp" with no IP check or shared...

CVE-2026-84479

WWBN AVideo current e01e41ecc and earlier makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder/isAVideoMobileApp checks match HTTPUSERAGENT against a hardcoded literal "AVideoEncoder"/"AVideoMobileApp" with no IP check or shared...

CVE-2026-84479 WWBN AVideo Authentication Bypass via User-Agent Header

WWBN AVideo current e01e41ecc and earlier makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder/isAVideoMobileApp checks match HTTPUSERAGENT against a hardcoded literal "AVideoEncoder"/"AVideoMobileApp" with no IP check or shared...

MAL-2026-12079 Malicious code in volna-boxy-di-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caad3654d755de84a91ca9afc1d7d393a1e2868b54b0b03020780b7878df28f8 On require, index.js loads compat.js which selects a platform-specific payload path, reconstructs C2 hostnames at runtime from split string fragments...

CVE-2026-12225 syracom Secure Login (2FA) for Confluence allows 2FA bypass via spoofed User-Agent

syracom AG Secure Login 2FA for Atlassian Jira, Confluence, and Bitbucket 3.4.0.x contains an authentication bypass vulnerability. An attacker with valid credentials for a user account can bypass the two-factor authentication flow by sending HTTP requests with a crafted User-Agent header containi...

CVE-2024-28144

CVE-2024-28144 describes a flaw in a self-developed session management that allows session takeover when an attacker can spoof the IP address and User-Agent of a logged-in user. Two users on the same IP can be logged in as the other user. Connected sources identify Image Access Scan2Net as affect...

CVE-2024-28144 Broken Access Control

An attacker who can spoof the IP address and the User-Agent of a logged-in user can takeover the session because of flaws in the self-developed session management. If two users access the web interface from the same IP they are logged in as the other user...

Build Your Own Botnet 2.0.0 Remote Code Execution

Exploit Title: BYOB Build Your Own Botnet v2.0.0 Unauthenticated RCE Remote Code Execution Date: 2024-08-14 Exploit Author: @chebuya Software Link: https://github.com/malwaredllc/byob Version: v2.0.0 Tested on: Ubuntu 22.04 LTS, Python 3.10.12, change numpy==1.17.3-numpy CVE: CVE-2024-?????,...

TREVORspray - A Featureful Round-Robin SOCKS Proxy And Python O365 Sprayer Based On MSOLSpray Which Uses The Microsoft Graph API

TREVORproxy is a SOCKS proxy that round-robins requests through SSH hosts. TREVORspray is a A featureful Python O365 sprayer based on MSOLSpray which uses the Microsoft Graph API By @thetechr0mancer Microsoft is getting better and better about blocking password spraying attacks against O365...

Nacos 安全漏洞

nacos is a dynamic service discovery, configuration and service management platform for Alibaba in China. The software supports both DNS-based and RPC-based service discovery, and can provide features such as delivering real-time health checks and blocking services from sending requests to...

Arachni v1.5.1 - Web Application Security Scanner Framework

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications. It is smart, it trains itself by monitoring and learning from the web application's behavior during the scan process and is...

Web Application Security Scanner Framework: Arachni

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of modern web applications. It is free, with its source code public and available for review. It is multi-platform, supporting all major operating...

11 Firefox Add-ons to Hack and PenTest

1. Tamper Data Tamper data is an great tool to to view and modify HTTP/HTTPS headers and post parameters. We can alter each request going from our machine to destination host with this. Thus it helps in security testing web application by modifying POST parameters. It can be used in performing XS...

JON: Unapproved agents can connect using the name of an existing approved agent

Red Hat JBoss Operations Network JON before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary agents via the registered agent name...

cold-xss.txt

Title: Cold Fusion Web Server XSS 0 day Own3d by: digi7al64 thx: WhiteAcid About: Default settings in Cold Fusion server ensure it returns a standardized error page whenever a exception occurs 404,500 etc. This page then echos the user agent, ip and referer back to the user for debugging purposes...