BFScan

BFScan 用于对 APK / XAPK / APKM / DEX / JAR / WAR 应用进行初始处理的工具。 在源代码和资源中搜索类似 URI、路径或密钥的字符串 根据配置文件、类和方法注解生成原始 HTTP 请求和 OpenAPI 规范 支持的客户端库 Square Retrofit Ktorfit Feign 支持的服务端库 Spring Web Annotations Spring SimpleUrlHandlerMapping Spring BeanNameUrlHandlerMapping JAX-RS, Jakarta RESTful Web Services JA...

firmware-workshop

动手实践固件提取、探索与仿真 欢迎加入我们这场 Unblob（灵活的固件提取工具）的动手演示。 在本次研讨会环节中，我们将从一台电动汽车充电器中提取固件，深入 研究该固件，并最终对其进行仿真，以便实时与其中的 服务进行交互。Unblob 既适用于硬件版本，也适用于可下载版本 的固件，因此我们有丰富的目标环境。无需任何经验， 本环节适合各种技能水平，我们期待与大家现场 相见。 我们的目标 我们的目标是一台来自 Phoenix Contact 的电动汽车充电站控制器。你可以在此处找到更多详细信息。 CHARX control modular，交流充电控制器，搭载嵌入式 Linux 系统，IE...

adiskreader-secretsdump

🚩 Patrocinadores Si te gusta este proyecto, considera comprar licencias de OctoPwn, nuestra suite completa de pentesting que se ejecuta en tu navegador! Para notificaciones sobre nuevas compilaciones/lanzamientos y otra información, únete a nuestro Discord adiskreader-secretsdump Extrae secretos ...

CVE-2026-63310

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation. Mitigation Upgrade the nltk...

Moderate: Red Hat Security Advisory: tar security, bug fix, and enhancement update

An update for tar is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

tar: tar: Hidden file injection via crafted archives

A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files...

AutoIt-Ripper

AutoIt-Ripper 这是什么 这是一个简短的 Python 脚本，可以从 PE 可执行文件中提取“已编译”的 AutoIt 脚本。 参考资料 这个脚本很大程度上 基于 3 个资源，如果你想更深入地了解 AutoIt 相关内容，一定要去看看它们： http://files.planet-dl.org/Cw2k/MyAutToExe/index.html GitHub 镜像 I GitHub 镜像 II https://github.com/sujuhu/autoit...

Icedid-file-decryptor

IcedID 解密器 用于静态解密与 IcedID 感染相关的 license.dat 文件的脚本。 该脚本还可解密已脱壳 IcedID 样本中的 .data 节。 说明： 脚本会自动检测输入的是 PE 文件还是 license.dat 文件。 如果提供的是 PE，脚本会假定该文件已先行脱壳。 如果解密成功，原始转储将写入 output.bin 同时，将执行快速字符串搜索，并将检测到的字符串写入文件。 如果提供的是已脱壳的 PE，C2 地址将显示在屏幕上。 license.dat 文件示例...

CVE-2026-77189 Charitable <= 1.8.12.1 - Authenticated (Contributor+) SQL Injection via 'order' Shortcode Attribute

The Charitable – Donation & Fundraising Platform Donation Forms, Recurring Donations & Fundraising Campaigns plugin for WordPress is vulnerable to generic SQL Injection via 'order' Shortcode Attribute in all versions up to, and including, 1.8.12.1 due to insufficient escaping on the user supplied...

CVE-2026-75921

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.9 via the uploadtemplatekit function. This is due to incorrect...

CVE-2026-17589

The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to generic SQL Injection via the 'productorder' parameter in all versions up to, and including, 5.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2026-75921 Master Addons for Elementor <= 3.1.9 - Incorrect Authorization to Authenticated (Editor+) Arbitrary File Upload via upload_template_kit AJAX ZIP Extraction

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.9 via the uploadtemplatekit function. This is due to incorrect...

CVE-2026-75921

The Master Addons for Elementor WordPress plugin is vulnerable to an authenticated arbitrary file upload in all versions up to and including 3.1.9 . The root cause lies in the upload_template_kit() AJAX handler, which incorrectly requires only the upload_files capability instead of the manage_opt...

VeeamDumper-BOF

Veeam Dumper BOF 一个用于 Veeam Backup and Replication 和 Veeam One 的凭据提取 BOF，由 @MWRCyberSec 的 Stephen Munro 和 Logan Kroeger 编写。该 BOF 需要在 Veeam One 或 Veeam Backup and Replication 服务器的 Admin beacon 中执行，并支持 Cobalt Strike 和 Outflank C2。 root@kitploit: tldr; The BOF uses sqlcmd.exe/psql.exe to extract...

windows-malware-behavioral-analysis

Análisis de comportamiento de malware con REMnux y FLARE-VM Una investigación práctica de malware para el equipo azul que demuestra cómo se pueden analizar ejecutables sospechosos de Windows de forma segura dentro de un laboratorio aislado mediante técnicas de análisis de comportamiento. En lugar...

CVE-2026-74251

Inyección SQL no autenticada a través del filtro de atributos en Phoca Cart Phoca Cart ≤ 6.1.6 — Un atacante no autenticado extrae la base de datos completa mediante inyección ciega basada en tiempo RESUMEN Los parámetros de matriz GET a atributo y s especificación en la página pública de artícul...

CVE-2026-81891

elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, checkExtractItems in php/elFinderVolumeDriver.class.php calls mimetypeInternalDetect without passing the result through mimeTypeNormalize. Because the .phtml, .phar, .php5, and .php3 extension...

CVE-2026-61639

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/db/restore.php calls ZipArchive::extractTo without validating entry names for ../ sequences. Admin uploads crafted zip with entry logos/../../endpoints/shell.php to write webshell to...

CVE-2026-81891

elFinder (open-source web file manager) is vulnerable to remote code execution prior to version 2.1.70 . The flaw resides in checkExtractItems() in php/elFinderVolumeDriver.class.php, which calls mimetypeInternalDetect() without passing the result through mimeTypeNormalize(). Because the .phtml, ...

CVE-2026-81891 elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, checkExtractItems in php/elFinderVolumeDriver.class.php calls mimetypeInternalDetect without passing the result through mimeTypeNormalize. Because the .phtml, .phar, .php5, and .php3 extension...