2017-11-17-Maldoc-Using-CVE-2017-0199

Dieses Repository hat keine README-Datei...

dangerzone

Dangerzone Nehmen Sie potenziell gefährliche PDFs, Office-Dokumente oder Bilder und konvertieren Sie sie in ein sicheres PDF. | ---|--- Dangerzone funktioniert folgendermaßen: Sie geben ihm ein Dokument, dem Sie nicht vertrauen z. B. einen E-Mail-Anhang. Innerhalb einer Sandbox konvertiert...

Static-Malware-Analysis-Follina-CVE-2022-30190

Static-Malware-Analysis-Follina-CVE-2022-30190 Analisi Statica del Malware Follina CVE-2022-30190 di Blue Team Labs Online Laboratorio : Blue Team Labs Online – Follina Challenge Tipo di Analisi : Analisi Statica Strumenti Utilizzati : VirusTotal, Windows File Explorer Introduzione Nel mio percor...

CVE-2026-21509

CVE-2026-21509 — تجاوز ميزة الأمان OLE في Microsoft Office بحث تحليلي من Sentinel AI Defense. تحليل دفاعي فقط — لا يُنشر هنا أي استغلال عامل أو PoC لثغرة يُستغلّ بنشاط في البرية. تجاوز لميزة الأمان في Microsoft Office يتيح لمستند مصمَّم بعناية تحميل مكونات COM التي من المفترض أن تمنعها إجراءات...

Macrome

Macrome Ein Excel-Makro-Dokument-Leser/Schreiber für Red-Teamer und Analysten. Blogbeiträge, die beschreiben, was dieses Tool eigentlich tut, finden sich hier und hier. Installation / Bauen Klonen oder laden Sie dieses Repository herunter, das Tool kann dann mit dotnet ausgeführt werden – zum...

IRFuzz

IRFuzz - Scanner semplice con regole Yara IRFuzz è un semplice scanner con regole Yara per archivi di documenti o qualsiasi file. Installazione 1. Prerequisiti Linux o OS X Yara: usa semplicemente il codice sorgente dell'ultima release, compila e installalo oppure installalo tramite pip install...

CVE-2019-11932-whatsApp-exploit

CVE-2019-11932-whatsap-exploit 必须将 system 和 gadget 的地址替换为通过信息泄露漏洞找到的实际地址。 替换 system 和 gadget 的地址后，运行代码生成恶意的 GIF 文件： 现在开始吧 root@mranonymousTZ:/root/Desktop/CVE-2019-11932-whatsap-exploit$ chmod +x build.py root@kitploit: root@mranonymousTZ:/root/Desktop/CVE-2019-11932-whatsap-exploit$ ./build.py...

prithvi

Prithvi A Report Generation Tool for Security Assessment Usage This project of ours could be used for report generation and its very easy to use. It includes following features 1. We can add Owasp Types and recommendation with details. 2. We can add Multiple Projects and work on it separately. 3...

FOCA

FOCA Identifizierung von Organisationen mittels gesammelter Archive FOCA ist ein Werkzeug, das hauptsächlich dazu dient, Metadaten und versteckte Informationen in den gescannten Dokumenten zu finden. Diese Dokumente können sich auf Webseiten befinden und mit FOCA heruntergeladen und analysiert...

CVE-2022-30190-follina

CVE-2022-30190-follina Solo un altro PoC per il nuovo MSDT-Exploit Per modificare il Doc, basta aprirlo con 7z, xarchiver, ... per cambiare il valore in word\rels\document.xml.rels con il tuo IP. L'exploit deve contenere almeno 3541 caratteri prima di window.location.href, e devono essere...

phishery

phishery Phishery is a Simple SSL Enabled HTTP server with the primary purpose of phishing credentials via Basic Authentication. Phishery also provides the ability easily to inject the URL into a .docx Word document. The power of phishery is best demonstrated by setting a Word document's template...

qs_old

QuickSand.io Per QuickSand Versione 2 scritta in Python con supporto all'analisi PDF, vedere quicksand.io. QuickSand Versione 1 Lite non è più in sviluppo attivo. QuickSand è un framework compatto in C per analizzare documenti sospetti di malware per 1 identificare exploit in flussi di diverse...

ligolo

Ligolo : Reverse Tunneling made easy for pentesters, by pentesters Table of Contents Introduction Use case Quick Demo Performance Usage Setup / Compiling How to use? TL;DR Options Features To Do Licensing Credits Introduction Ligolo is a simple and lightweight tool for establishing SOCKS5 or...

EvilFontTool

EvilFontTool Uno strumento di inganno basato sui font per red teaming, ricerca sulla sicurezza e qualsiasi altra cosa. EvilFontTool nasconde testo leggibile dalla macchina all'interno di un documento che mostra testo completamente diverso a un lettore umano. Lo fa usando Evil Fonts — font che...

collection-document

Descrizione del progetto Raccolta di articoli di sicurezza di qualità da ricostruire Some are inconvenient to release. Some forget update,can see me star. collection-document awesome 以前的链接中大多不是优质的 渗透测试部分不再更新 因精力有限，缓慢更新 Author: tom0li Blog: https://tom0li.github.io root@kitploit: - Project...

ShareDoc_cve-2015-5477

ShareDoc il documento che ho condiviso con altri aggiungi debug cve-2015-5477...

htattack

htattack.py Eine Exploit-Implementierung für RCE in RTF-Dokumenten CVE-2017-0199. Video auf Spanisch: https://www.youtube.com/watch?v=0lDvclMrymM Verwendung: root@kitploit: python htattack.py -u...

CVE-2026-56093

The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlike the regular search path. A visitor who can obtain or guess a valid Solr document id can retrieve documents through this lookup without the same access...

EUVD-2026-65352

The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlike the regular search path. A visitor who can obtain or guess a valid Solr document id can retrieve documents through this lookup without the same access...

CVE-2026-56093 Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlike the regular search path. A visitor who can obtain or guess a valid Solr document id can retrieve documents through this lookup without the same access...