venom

Venom C2 Venom C2 是一个无依赖的 Python3 命令与控制框架，专为红队持久化设计，无需安装额外包即可在系统上运行。它包含一个 Flask 团队服务器、一个 Electron 操作员图形界面，以及一个通过可配置 AES 加密 JSON 消息在 HTTP/HTTPS 上进行通信的单文件 Python 代理。你可以用它执行命令、管理文件、维持访问权限，以及从受控系统创建 SSH 反向隧道。 背景 在网络权限提升过程中，我们接触了许多运行着奇异发行版和架构的生产系统。我们试图建立持久化控制，但手头的工具和技术都不奏效。此外，部分目标系统运行着 EDR。...

yamaha-smaf-player

Yamaha SMAF Player C++ by Akustikrausch Andreas Wendorf 小型で依存関係のない Yamaha SMAF着信音 .mmf のプレイヤー です。C++ で書かれています。 2004年にあなたのSamsung、Sharp、Panasonicが デイドル・デイドル・ディー と鳴らしていたあのファイルを受け取り、クリーンなステレオ音声を出力します。電話機もファームウェアもサンプルROMも不要です。FMチップをソフトウェアで完全に再構築しています。...

log4shell-scanner

log4shell-scanner 一个零依赖的 Log4Shell 防御性扫描器 —— 查找易受攻击的 log4j-core jar，并在日志和配置中发现 JNDI 利用模式。 为什么做这个项目 在我于 CERT-In 轮岗期间，我从事威胁识别、遏制、修复和威胁狩猎工作 —— 这正是 Log4Shell（CVE-2021-44228）在 2021 年 12 月大规模爆发时所需的工作流程：在整个服务器群中找出每一个易受攻击的 log4j-core 工件，并在日志中搜索 $jndi:... 利用尝试。本扫描器将这一防御性工作流程重现为一个单一、可移植、仅使用标准库的 Python...

wp2shell-lab

mini-wp-rest 一个紧凑、无依赖的 WordPress REST API 小片段重新实现——仅够服务一个公开文章集合，并在一次往返中执行多个子请求。适合用于教学 WordPress 路由、WPQuery 和 $wpdb 如何协同工作，而无需引入整个核心。 端点...

[SECURITY] Fedora 42 Update: tree-sitter-0.25.2-8.fc42

Tree-sitter is a parser generator tool and an incremental parsing library. It can build a concrete syntax tree for a source file and efficiently update the syntax tree as the source file is edited. Tree-sitter aims to be: General enough to parse any programming language Fast enough to parse on...

Moderate: Red Hat Security Advisory: perl-App-cpanminus security update

An update for perl-App-cpanminus is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: perl-App-cpanminus security update

Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and extensible with plug-ins and friendly to shell scripting. When running, it requires only 10 MB of RAM. Security Fixes: perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution...

[SECURITY] Fedora 40 Update: perl-App-cpanminus-1.7047-4.fc40

Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and extensible with plug-ins and friendly to shell scripting. When running, it requires only 10 MB of RAM...

[SECURITY] Fedora 39 Update: perl-App-cpanminus-1.7047-2.fc39

Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and extensible with plug-ins and friendly to shell scripting. When running, it requires only 10 MB of RAM...

CVE-2024-34075

kurwov is a fast, dependency-free library for creating Markov Chains. An unsafe sanitization of dataset contents on the MarkovDatagetNext method used in Markovgenerate and Markovchoose allows a maliciously crafted string on the dataset to throw and stop the function from running properly. If a...

Design/Logic Flaw

Dot diver is a lightweight, powerful, and dependency-free TypeScript utility library that provides types and functions to work with object paths in dot notation. In versions prior to 1.0.2 there is a Prototype Pollution vulnerability in the setByPath function which can leads to remote code...

Packet-Sniffer - A pure-Python Network Packet Sniffing Tool

A simple pure-Python network packet sniffer. Packets are disassembled as they arrive at a given network interface controller and their information is displayed on the screen. This application maintains no dependencies on third-party modules and can be run by any Python 3.x interpreter. Installati...