Enigma NMS < 65.0.0 - Authenticated OS Command Injection

An OS command injection vulnerability in the discoverandmanage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an authenticated attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ipaddress variable within an snmpbrowser action. id:...

Enigma

Enigma マルチプラットフォームペイロードドロッパー。 ビデオデモ クローン git clone https://github.com/UndeadSec/Enigma.git 実行 cd Enigma python enigma.py または python3 enigma3.py 免責事項 教育目的のみで使用すること Enigmaの使用は、エンドユーザーの完全な責任です。開発者は一切の責任を負わず、このプログラムによって引き起こされた誤用や損害についても責任を負いません。...

Enigm-Writeup

Hack The Box: Enigma - 全面渗透测试与报告 1. 执行摘要 Enigma 是 Hack The Box 上的一台中级 Linux 靶机。评估方法遵循标准渗透测试生命周期：侦察、枚举、通过凭据收集获得初始访问权限、本地枚举，以及通过服务层漏洞（OliveTin 中的 CVE-2026-27626 ）进行 root 权限提升。本报告详细介绍了逐步的向量分析、工具集、代码执行策略以及完全攻陷目标并获取管理控制权所需的修复指南。 2. 信息收集与侦察 2.1 网络端口扫描（Nmap） 评估从 TCP SYN 扫描开始，以识别目标主机上开放的端口和运行的服务。 nmap...

Enigma-

Enigma Ghidra 分析核心（SoftwareModeling + Utility）的 C++ 重新实现，去除了 Java/JVM 依赖。专为 AI 集成、性能和可嵌入性而构建。Enigma Engine 项目的一部分。 Enigma Engine Ghidra 分析核心的 C++ 重新实现——无 JVM，无 Java，完全掌控。 这是什么？ Ghidra 是 NSA 用 Java 构建的强大逆向工程框架。 Enigma 是用现代 C++ 对其分析核心 进行的从零重写，旨在实现： 可嵌入 — 作为库链接到任何项目中 AI 就绪 — 为 ML/AI 集成提供清晰的接口 快速 — 无...

Hack-The-Box-Enigma-Findings-Report

🛡️ Hack The Box - Enigma 発見事項レポート 📋 概要 このリポジトリには、Hack The Box マシン Enigma に対する包括的なペネトレーションテストレポートが含まれています。 🔍 主な発見事項 安全でない NFS 共有によるオンボーディング文書の露出 - 中程度の深刻度 暗号化されていないメールコンテンツを介した内部認証情報の開示 - 中程度の深刻度 従業員の IMAPS アカウント間でのパスワード再利用 - 高程度の深刻度 OpenSTAManager の認証済み OS コマンドインジェクション CVE-2025-69212 - 重大な深刻度 Web...

Enigma

Enigma Engine A native C++ reverse-engineering engine inspired by Ghidra's analysis pipeline. Enigma removes the JVM dependency and provides a standalone analysis core that can be embedded, extended, and integrated directly with native tools and AI systems. Current State Enigma is under active...

GPT-6 Astra Breaks an Old Enigma Message

This is pretty amazing: However, the most astonishing thing about this break is that the GPT­6 Astra did it entirely on its own. Carter Leffer only directed GPT­6 Astra to see if it could break any of the unbroken Enigma messages published on the Crypto Cellar Research web page. After analysing t...

CVE-2019-16062

NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database. It is possible for an attacker to expose unencrypted sensitive data...

CVE-2019-16064

NETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can allow an authenticated user to access files and directories stored outside of the web root folder. By exploiting this vulnerability, it is possible for an attacker to list operating-system directory...

CVE-2019-16068

A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious managefiles.cgi request. This can be triggered via XSS or an IFRAME tag included within the site...

CVE-2019-16065

A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows an attacker to execute SQL commands to expose and compromise the web server, expose database tables and values, and potentially execute system-based commands as the mysql user...

CVE-2019-16061

A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable permissions, allowing any low privileged user with access to the system to read sensitive data e.g., .htpasswd and create/modify/delete content e.g., under /var/www/html/docs with...

CVE-2019-16070

A number of stored Cross-site Scripting XSS vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through web application form inputs...

CVE-2019-16069

A number of stored Cross-site Scripting XSS vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through the SNMP protocol...

CVE-2019-16063

NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages. It is possible for an attacker to expose unencrypted sensitive data...

CVE-2019-16072

An OS command injection vulnerability in the discoverandmanage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ipaddress variable within an snmpbrowser action...

EUVD-2018-1824

Malware in sbrugna...

EUVD-2019-6923

Malware in sbrugna...

EUVD-2019-6925

Malware in sbrugna...

EUVD-2019-6927

Malware in sbrugna...