34 matches found
hackerEnv
Raggiungimi su: hackerEnv...
CVE-2024-4577
CVE-2024-4577 पर्यावरण सेटअप फ़ाइल और PHP फ़ाइल --poc-- Invoke-WebRequest -Method POST -Headers @"Content-Type" = "application/x-www-form-urlencoded" -Body "" -Uri "http://localhost/test.php?%ADd+allowurlinclude%3D1+%ADd+autoprepend file%3Dphp://input"...
CVE-2024-22243-CVE-2024-22234
env de CVE-2024-22243&CVE-2024-22234 détail: https://www.cnblogs.com/9eek/p/18037571...
CVE-2024-23897
Einrichtung der Umgebung für CVE-2024-23897 1. Java installieren sudo apt update sudo apt install openjdk-11-jdk -y 2. Jenkins WAR-Datei herunterladen wget https://get.jenkins.io/war/2.441/jenkins.war 3. Standard-Java-Version ändern - Java 11 auswählen sudo update-alternatives --config java 4...
web-hacking-playground
Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...
AV-EDR-Lab-Environment-Setup
Configuração de Ambiente de Laboratório AV/EDR Inicialmente retirado do Discord da Maldev Academy e adicionados mais recursos. Notas do Notion : https://an0nud4y.notion.site/AV-EDR-Lab-Env-Setup-130bc870022d8071935cc682d3eb34b9?pvs=4 Um exemplo de coisas que podem ser usadas para emular certos...
PMD
Desenvolvimento Prático de Malware Exercício 1 - Configuração do Ambiente 1. Configure uma máquina virtual Windows dentro de um hipervisor. a. Certifique-se de tirar um snapshot da sua instalação base. 2. Baixe e instale o Visual Studio 2022 - https://visualstudio.microsoft.com/vs/ a. Selecione a...
Malicious code in cipherflow (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281ede3c5b3181c2df22a4b32a01453a51ac389a1dfe8bde69d53821cbaf20d4 cipherflow advertises itself as a zero-dependency pure-Python AES/DES library, but cipherflow/environ.py contains a multi-layer-obfuscated payload th...
RISC-V-In-Proactive-computer-Security-PCS
Exploring RISC-V in Proactive Computer Security PCS PUK pro...
RISC-V-In-Proactive-computer-Security-PCS-
Exploring RISC-V in Proactive Computer Security PCS PUK pro...
Exploit for Classic Buffer Overflow in Freefloat Freefloat_Ftp_Server
CVE-2025-5548 Security research and reprod...
Exploit for Path Traversal in Jenkins
CVE-2024-23897 환경 구축 1. Java 설치 sudo apt update sudo apt ins...
Creation of Temporary File With Insecure Permissions
Overview Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions in the getorcreatetmpdir function in fileutils.py. This enables an attacker who can write to /tmp to cause the execution of arbitrary .py files during environment setup. Remediation...
Exploit for CVE-2025-30208
CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Overvie...
Exploit for Path Traversal in Lfprojects Mlflow
MLflow CVE-2023-1177 - PoC & Reproduce Repo này chứa mã khai...
Exploit for CVE-2025-31486
CVE-2025-31486-PoC.py url !imagehttps://github.co...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
利用条件 + DefaultServlet 写入功能启用：需在 web.xml 中配置 readonly=false...
Exploit for CVE-2024-9926
wordpress-jetpack-broken-access-control-vulnerable-application...
CVE-2024-39934
Robotmk before 2.0.1 allows a local user to escalate privileges e.g., to SYSTEM if automated Python environment setup is enabled, because the "shared holotree usage" feature allows any user to edit any Python environment...