55 matches found
powersap
PowerSAP PowerSAP은 Bizploit, Metasploit 보조 모듈 또는 인터넷에서 사용할 수 있는 Python 스크립트와 같은 공개 도구의 인기 있고 효과적인 기술을 예를 들어 간단한 PowerShell로 재구현한 것입니다. 이 재구현은 새로운 취약점이나 공개되지 않은 취약점을 포함하지 않습니다. PowerSAP을 사용하면 .Net 커넥터 'NCo'를 통해 SAP RFC에 접근할 수 있습니다. 크레딧 모든 크레딧은 다음에게 돌아갑니다: Onapsis - Mariano, Jordan… ERPScan @chipik...
xray
xray에 오신 것을 환영합니다 👋 강력한 보안 평가 도구 🏠사용 문서 • ⬇️xray 다운로드 • ⬇️xpoc 다운로드 • ⬇️xapp 다운로드 • 📖플러그인 저장소 English Version 참고: xray 시리즈는 오픈소스가 아니며, 빌드된 바이너리를 직접 다운로드하면 됩니다. 저장소에는 주로 커뮤니티에서 기여한 poc가 포함되어 있으며, xray가 릴리스될 때마다 자동으로 패키징됩니다. ✨ xray2.0 xray 1.0이 기능이 추가되면서 복잡해지고 비대해지는 문제를 해결하기 위해 xray 2.0을 출시했습니다. 이...
WordPress-KeepInMind-CVE-2026-9271-Exploit
KIM-Guardian Pro CVE-2026-9271 — WordPress KeepInMind 저장형 XSS 평가 CVE-2026-9271용 공인 보안 평가 도구 저자: Sudeepa Wanigarathna · 도구: KIM-Guardian Pro v1.0 메인 스크립트: CVE-2026-9271.py !IMPORTANT 승인된 사용 전용. 이 도구는 보안 연구, 교육, 그리고 본인이 소유했거나 명시적인 서면 승인을 받은 시스템의 테스트를 위한 것입니다. 컴퓨터 시스템에 대한 무단 접근은 불법입니다. 저자는 오용에 대한 어떠...
AzureADAssessment
Microsoft Azure AD アセスメント アセスメント実施者向けガイド Microsoft の従業員またはパートナーがお客様向けにアセスメントを実施する場合は、Wiki のアセスメント ガイドをご覧ください。 PowerShell ギャラリーからインストールする エラーが発生した場合は、このドキュメントの最後にあるFAQ セクションを参照してください。 Install-Module AzureADAssessment -Force -Scope CurrentUser If you have already installed the module, run the...
py-web-vuln-scanner
No d...
Oracle E-Business Suite 12.2.15 Payments Vulnerability Scanner
This Python-based security assessment tool scans Oracle E-Business Suite EBS Payments deployments for indicators associated with CVE-2026-46817...
Strapi Content API Sanitization Bypass Detection Module Scanner
This Python script assesses exposure to CVE-2026-27886 in Strapi Content API endpoints by performing differential filter validation against where parameters. Detection compares baseline query behavior against controlledfilter predicates to determine whether unsanitized conditions reach backend...
Palo Alto GlobalProtect TLS Posture Scanner
This Metasploit auxiliary module is structured as a defensive assessment tool focused on TLS posture analysis and service identification for GlobalProtect deployments...
Craft CMS Authorization and Migration Endpoint Exposure Tool
This is an assessment utility designed to evaluate potential exposure related to authorization handling and migration endpoint accessibility in Craft CMS deployments...
📄 WebRemoteControl Unauthenticated Remote Filesystem Access
Proof of concept tool that demonstrates how WebRemoteControl suffers from unauthenticated remote filesystem access and potential remote code execution. ================================================================================================================================== | Title :...
UniFi Network Application Path Traversal Vulnerability Assessment Tool
This tool lets you safely detect whether a UniFi Network Application controller is vulnerable to CVE-2026-22557 without causing any disruption. CVE-2026-22557 is an unauthenticated path traversal vulnerability in the UniFi Network Application's guest captive portal that allows remote attackers to...
CIOP-PIB STER SQL注入漏洞
CIOP-PIB STER is a occupational safety and human factors risk assessment software system developed by the Polish company CIOP-PIB. Versions of CIOP-PIB STER prior to version 9.5 contained a SQL injection vulnerability. This vulnerability stemmed from improper handling of multiple search filter...
New tools and guidance: Announcing Zero Trust for AI
Over the past year, I have had conversations with security leaders across a variety of disciplines, and the energy around AI is undeniable. Organizations are moving fast, and security teams are rising to meet the moment. Time and again, the question comes back to the same thing: "We're adopting A...
📄 WordPress Slider‑Future 1.0.5 Arbitrary File Upload
This is a Metasploit module that demonstrates an unauthenticated file upload vulnerability in WordPress Slider‑Future plugin version 1.0.5. ============================================================================================================================================= | Title :...
CVE-2025-4686
CVE-2025-4686 concerns an SQL Injection in Kodmatic Computer Software’s Online Exam and Assessment product. The issue is described as improper neutralization of special elements used in SQL commands, enabling an injection that can impact confidentiality (low), integrity (low), and availability (h...
5 Types of Cybersecurity Assessment Tools Compared
Your organization’s assets are everywhere: on-premise servers, multi-cloud environments, remote endpoints, and countless applications. Trying to secure this sprawling digital footprint with siloed tools gives you a fragmented, incomplete picture of your risk. You might have one tool for cloud...
EUVD-2020-11907
Malware in sbrugna...
AutoPentester: An LLM Agent-Based Framework for Automated Pentesting
Penetration testing and vulnerability assessment are essential industry practices for safeguarding computer systems. As cyber threats grow in scale and complexity, the demand for pentesting has surged, surpassing the capacity of human professionals to meet it effectively. With advances in AI,...
CVE-2020-1011
An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1015...