881 matches found
A-Red-Teamer-diaries
红队日记 我在多个受控环境/基础设施中进行的渗透测试/红队实验的公开笔记，涉及与渗透测试人员和红队成员在安全评估中使用的各种工具和技术。 项目进行中 贡献 欢迎通过 GitHub 拉取请求进行贡献。 感谢所有辛勤付出的人 目标 渗透测试/红队速查表，收集代码片段和命令，帮助渗透测试人员在参与测试时（节省时间/快速查找特定命令）。 理解如何执行攻击 记录笔记供将来参考 免责声明 仅用于教育目的，使用风险自负。 入侵杀伤链 网络映射 RunFinger.py 收集网络中域名和 Windows 机器信息bash bash$ cd /usr/share/Responder/tools bash$...
Awesome-RedTeam-Cheatsheet
红队技术 初始访问技术（即将推出） 代码执行技术（即将推出） 横向移动技术（即将推出） 规避技术（即将推出） 持久化技术（即将推出） 权限提升技术（即将推出） 凭据转储技术（即将推出） Pivoting 技术（即将推出） Windows 协议与术语 Windows 协议与术语指南（即将推出） 其他 OPSEC 指南 恶意软件开发 攻击 AD Azure Cloud（即将推出） 支持 你可以在这里支持我 🐱 : Active Directory 速查表 这份 AD 攻击速查表由 RistBS 制作，灵感来源于 Active-Directory-Exploitation-Cheat-Shee...
gimmeSH
gimmeSH ターミナルから離れたくないペネトレーションテスターのために。 一言で言うと gimmeSHは、Reverse Shell、File Transfer、Msfvenom用のカスタムチートシートをターミナル内で生成するツールです。必要なのは、プラットフォーム、自分のIPアドレス、ポート番号を指定するだけです。 インストール gitでスクリプトをダウンロードし、.bashrcにエイリアスを追加すれば、準備完了です。 実行 File Transfer Linux Web Shells...
Cheatsheet-God
diff UPDATE: Added my huge link of bookmarks / references ❤️ 你是否保存了上百万个书签？这些书签是否都包含独特的信息？还有为日后加星的 Github 仓库？ 好吧，这里把所有这类资源汇编到了一个名为 Cheatsheet-God 的仓库中。不再需要书签链接，不再需要打开浏览器。全都为你放在这里了。 这里是一个资源、脚本和易于上手的操作指南的集合。为了准备 OSCP 以及日常渗透测试，我一直在收集（并将继续收集）。想怎么用就怎么用！ 欢迎所有贡献！如果你觉得自己可以贡献并让这些文档更加完整，请尽管做！我会对你致以谢意。...
AWSome-Pentesting
AWSome 渗透测试速查表 欢迎提交 Pull requests : 本指南旨在帮助渗透测试人员深入了解 AWS 错误配置及利用它们的方法。 它由我的笔记整理而成，这些笔记汇集了无数小时的学习和来自各种来源的注释。 假设你已经拥有 AWS 密钥（这并不难找到，只需查看开发者的 GitHub ） 作者 - pop3ret...
CVE-2026-101032
navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim privileges...
CVE-2026-101032 navi through 2.24.0 OS Command Injection via Cheatsheet Variables
navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim privileges...
CVE-2026-101032 navi through 2.24.0 OS Command Injection via Cheatsheet Variables
navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim privileges...
CVE-2026-101032
The navi tool (versions through 2.24.0 ) is vulnerable to OS Command Injection due to a failure to properly escape cheatsheet variable values during shell command substitution. An attacker can achieve arbitrary command execution with victim privileges by injecting shell metacharacters through cra...
EUVD-2026-87945
navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim privileges...
CVE-2026-101032 navi through 2.24.0 OS Command Injection via Cheatsheet Variables
navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim privileges...
xss-payloads
xss cheatsheet - xss Portswiggerhttps://portswigge...
October 2025 Burp Cross Site Scripting Cheatsheet
This is Portswigger's really useful cross site scripting cheatsheet. Last updated in October of 2025...
monrdv.com Cross Site Scripting vulnerability OBB-3953001
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
holman-engineering.co.uk Cross Site Scripting vulnerability OBB-3947957
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
pcbelectronics.biz Cross Site Scripting vulnerability OBB-3947875
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
empyros.org Cross Site Scripting vulnerability OBB-3938014
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
oldiesrising.com Cross Site Scripting vulnerability OBB-3937252
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
aldaba.com Cross Site Scripting vulnerability OBB-3936290
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
mtech.am Open Redirect vulnerability OBB-3934967
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...