cve-2021-45043

cve-2021-45043 HD-Network रियल-टाइम मॉनिटरिंग सिस्टम 2.0 /language/lang sLanguage पैरामीटर के माध्यम से ../ डायरेक्टरी ट्रैवर्सल के जरिए /etc/shadow पढ़ने की अनुमति देता है। प्रारंभिक पोस्ट https://cyberguy0xd1.medium.com/my-cve-2021-45043-lfi-write-up-441dad30dd7f burp के माध्यम से दोहन GET...

acltoolkit

acltoolkit acltoolkit é um canivete suíço de abuso de ACL. Ele implementa múltiplos abusos de ACL. Índice acltoolkit Índice Instalação Uso Comandos get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Instalação pip install acltoolkit-ad ou git clone...

bofhound

THIS REPO IS NO LONGER ACTIVE ⛔🚧 This repo is no longer maintained. To submit an issue, pull request, or obtain the lastest version, reference https://github.com/coffeegist/bofhound 🚧⛔ | / / / | /| | | | / \ | | | | | \ | | | \ | | | | | | | | | | || | | | | | | | | | | | | | .--. | | | | | | | |...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

ACLight

ACLight Uma ferramenta para descoberta avançada de Contas Privilegiadas - incluindo Shadow Admins. ACLight2 é a versão melhorada da ferramenta. Pesquisa sobre Shadow Admins A ferramenta versão 1 foi publicada como parte da pesquisa "Shadow Admins" - mais detalhes sobre "Shadow Admins" estão no po...

Adaz

Adaz: Laboratório de Caça ao Active Directory no Azure Este projeto permite que você crie facilmente laboratórios do Active Directory no Azure com estações de trabalho ingressadas no domínio, Windows Event Forwarding, Kibana e Sysmon usando Terraform/Ansible. Ele expõe um arquivo de configuração ...

CVE-2026-107657

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-104722

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSDMenusIXCSV::import function in all versions up to, and including, 6.1.2 This makes it possible for authenticate...

libreofficeExploit1

Manual básico de geração de um exploit Nesta entrada veremos como utilizar uma falha simples de um programa para conseguir abrir uma porta dos fundos no sistema que utilize esse programa. A falha em questão é definida no CVE-2018-16858 pertencente à suíte de escritório LibreOffice. Essa falha...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

CVE-2019-1002101-Helpers

kubectlcpCVE-2019-1002101 CVE-2019-1002101 के लिए PoC सहायक स्क्रिप्ट्स और Dockerfile विस्तृत जानकारी के लिए, https://www.twistlock.com/labs-blog/disclosing-directory-traversal-vulnerability-kubernetes-copy-cve-2019-1002101/ और...

urlbrute

URLBrute Ferramenta para brute-force de diretórios/DNS em sites Modos Disponíveis Brute-force de diretório/arquivo Brute-force de DNS Instalação Compilando a partir do código fonte Instalar dependências go get Compilar executável go build Se quiser instalar na pasta $GOPATH/bin go install Usando ...

SharpSpray

SharpSpray Este projeto é um port em C do meu script PowerSpray.ps1. O SharpSpray é um conjunto de código simples para realizar um ataque de password spraying contra todos os utilizadores de um domínio usando LDAP e é compatível com o Cobalt Strike...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 का शोषण, Apache 2.4.49 में एक डायरेक्टरी ट्रैवर्सल।...

tanuki

Tanuki AI कोडिंग एजेंट्स के लिए Linux Active Directory ट्राइएज। प्रोटोकॉल-प्रथम, शून्य शोर। Quick Start • Dual-Engine Architecture • Live Lab Validation • Demo Video • Decision Ladder • Before & After • Tooling & Usage • Agent Setup • Lineage & Credits Quick Start 1-Line Universal Install Tanuki...

CVE-2024-40348

CVE-2024-40348 CVE-2024-40348 Bazaar v1.4.3 और उससे पहले के संस्करणों के लिए POC। लक्ष्य से /etc/passwd पढ़ने का प्रयास करेगा। विवरण यह CVE-2024-40348: Bazaar v1.4.3 के लिए बल्क स्कैनिंग और शोषण उपकरण है, जो अनधिकृत हमलावरों को डायरेक्टरी ट्रैवर्सल निष्पादित करने की अनुमति देता है। यह भेद्यता 4rd...

CVE-2025-6218-WinRAR-Directory-Traversal-RCE

CVE-2025-6218-WinRAR-Directory-Traversal-RCE CVE-2025-6218, WinRAR में एक डायरेक्टरी ट्रैवर्सल भेद्यता है, जो किसी उपयोगकर्ता द्वारा विशेष रूप से तैयार की गई .rar आर्काइव को निकालने पर हमलावर को फ़ाइलों को इच्छित निष्कर्षण निर्देशिका के बाहर रखने की अनुमति देती है। इस दोष का शोषण करके, एक हमलावर...

knowsmore

Knows More KnowsMore officially supports Python 3.8+. Main features Import NTLM Hashes from .ntds output txt file generated by CrackMapExec or secretsdump.py Import NTLM Hashes from NTDS.dit and SYSTEM Import Cracked NTLM hashes from hashcat output file Import BloodHound ZIP or JSON file BloodHou...

SOC_287

SOC287 - चेकपॉइंट सिक्योरिटी गेटवे CVE-2024-24919 पर मनमाना फ़ाइल पठन अवलोकन यह रिपॉजिटरी चेक पॉइंट सिक्योरिटी गेटवे को प्रभावित करने वाली CVE-2024-24919 कमजोरी का विस्तृत वॉकथ्रू प्रस्तुत करती है। यह कमजोरी मनमाना फ़ाइल पठन की अनुमति देती है, संभावित रूप से /etc/passwd जैसी संवेदनशील सिस्टम...

CVE-2026-104722

The Listdom: AI-powered Business Directory with Classifieds Ads Listings WordPress plugin is vulnerable to arbitrary file deletion in versions up to and including 6.1.2 . The root cause is insufficient file path validation within the LSD_Menus_IX_CSV::import function, specifically involving the i...