CVE-2017-18345-COM_JOOMANAGER-ARBITRARY-FILE-DOWNLOAD

COMJOOMANAGER 2.0 - 임의 파일 다운로드 플러그인 : COMJOOMANAGER, CMS: Joomla를 사용하여 대량으로 데이터베이스를 수집합니다. Python 2.x로 개발된 프로젝트입니다. 자세한 내용은 YouTube 동영상을 참조하세요. CVE: 2017-18345 Risk : 보안 위험 높음 0day.Today-ID: 29950 ExploitDB-id: 44252 0day db-id: 16348 CXSecurity-id: WLB-2018030054 CVSS v3.0 심각도 및 지표: 기본 점수: 9.8 심...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Raw bytes manipulation utility, able to apply well known and less well known transformations, quick binary search, network proxy interception and more. Install on Windows: Download the release zip here Remember to install/repair the VS...

shellcodetester

Shellcode Tester ShellcodeTester officially supports Python 3.8+. Main features Assembly ASM file 32 and 64 bits Assembly ASM file to Windows, Linux and MacOS Check badchars Output to several formats NASM Shell Other amazing features... Shellcode Tester - Getting stats shellcodetester -asm file.a...

gitjacker

gitjacker Gitjacker downloads git repositories and extracts their contents from sites where the .git directory has been mistakenly uploaded. It will still manage to recover a significant portion of a repository even where directory listings are disabled. For educational/penetration testing use...

mongoaudit

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install mongoaudit...

CVE-2017-8759-exploits

CVE-2017-8759-exploits CVE-2017-8759 익스플로잇의 두 가지 버전 예제 1 - 원격 위치에서 .Net dll을 다운로드하고 디스크에 저장하지 않고 로드 및 실행 예제 2 - 포함된 .Net dll을 로드하고 실행...

vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...

hoper

Hoper It shows all the hops that makes a url you specify to reach its endpoint. For example if you want to see the entire trip by email URL or like a URL shorten. Hoper returns you all URLs redirections. Installation $ gem install hoper Usage Type in your command line: $ hoper url Development Aft...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 Exploitation Tool, You can use this tool to check the vulnerability in your FortiGate SSL-VPN. This vulnerability affects the following versions: • FortiOS 6.0 - 6.0.0 to 6.0.4 • FortiOS 5.6 - 5.6.3 to 5.6.7 • FortiOS 5.4 - 5.4.6 to 5.4.12...

ghost

ghost ghost 는 서버/공격자에게 사용자의 명령줄 인터프리터cmd.exe에 대한 완전한 원격 액세스를 제공하는 가벼운 RAT입니다. 클라이언트/좀비가 알아채지 못하게 명령을 조용히 실행할 수 있습니다. 서버/공격자는 또한 클라이언트/좀비의 컴퓨터에서 파일을 다운로드하고 실행할 수 있는 권한을 부여받습니다. 이것 또한 조용하고 숨겨진 프로세스입니다. 대부분의 원격 액세스 트로이 목마와 마찬가지로, 이 다운로드 및 실행 기능은 바이러스와 기타 악성코드를 유포하는 데 도움이 됩니다. 이 악성코드는 zombie.exe 를...

mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. .. mimikatz 2....

auto_re

AutoRE Features 1. Auto-renaming dummy-named functions, which have one API call or jump to the imported API Before After 2. Assigning TAGS to functions accordingly to called API-indicators inside Sets tags as repeatable function comments and displays TAG tree in the separate view Some screenshots...

airflowscan

airflowscan Checklist and tools for increasing security of Apache Airflow. DISCLAIMER This project NOT AFFILIATED with the Apache Foundation and the Airflow project, and is not endorsed by them. Contents The purpose of this project is provide tools to increase security of Apache Airflow...

day04-nexus-4956

4일차 – Nexus Repository 3 경로 탐색 CVE-2024-4956 내용: 인증되지 않은 경로 탐색을 통해 조작된 URL로 누구나 임의의 파일을 다운로드할 수 있습니다. 취약점: Nexus Repo 3 버전 ≤ 3.68.0 에 영향을 미칩니다. 3.68.1 에서 수정되었습니다. 출처: Sonatype 권고 + NVD. 안전: 실습 환경은 로컬 전용입니다. 소유하지 않은 시스템을 대상으로 삼지 마세요. 설정 docker build -t day4-nexus-4956 . docker run -d -p 8081:8081...

VK-Scraper

VK Scraper vk-scraper는 VK 사용자/커뮤니티의 데이터를 스크래핑하고 다운로드하는 Python으로 작성된 명령줄 애플리케이션입니다. 책임감 있게 사용하세요. 작동 방식에 대한 더 나은 이해를 원한다면 문서를 참조하세요. 기능 사진 스크래핑 동영상 스크래핑 업로드 및 외부 모두 저장된 사진 스크래핑 스토리 스크래핑 설치 Arch GNU/Linux 안정 버전 vk-scraper: git clone https://aur.archlinux.org/vk-scraper.git vk-scraper git 버전...

shepard

SHEPARD BITS This is a persistance tool using Windows Background Intelligent Transfer Service BITS. Functionality File Download, File Exfiltration, File Download + Persistent Execution Usage Run shepard.exe as Administrator with the following command line arguments: -d : regular file download to ...

evilginx

Evilginx v.1.1.0 THIS VERSION IS OBSOLETE. PLEASE USE THE LATEST VERSION! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx is a man-in-the-middle attack framework used for phishing credentials and session cookies of any web service. It's core runs on Nginx HTTP server, which utilizes...

CVE-2022-45354

Download Monitor ; rel="ht...

bytecode-viewer

Bytecode Viewer Bytecode Viewer - a lightweight user-friendly Java/Android Bytecode Viewer, Decompiler & More. New Features Jump to Declaration Draggable tabs Patched CVE-2022-21675 Make sure to upgrade to v2.11.X Dark mode by default with multiple themes Translated into over 30 languages...