2210 matches found
reversemap
reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In interactive mode the program will prompt for user input...
CVE-2021-36747
CVE-2021-36747 Blackboard Learn hasta la versión 9.1 permite XSS por parte de un usuario autenticado a través del formulario Feedback to Learner. Descubierto: 11 de mayo de 2018 El equipo de seguridad de Blackboard ha sido notificado de este problema. Reconocieron la vulnerabilidad el 14 de mayo ...
CVE-2019-18634
CVE-2019-18634 Escribí este exploit para Linx Mint 19.1, por lo que probablemente no funcione en otras distribuciones. Si estás explotando un entorno real, te recomiendo usar la versión del exploit de Salem Rashid, que tiene los offsets adecuados para otras versiones de sudo. Este es solo un...
rainmap-lite
rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...
gftrace
gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...
link
link link is a command and control framework written in rust. Currently in beta. Table of Contents Introduction Features Feedback Build Process Acknowledgments Introduction...
msticpy
MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...
poastal
Poastal - the Email OSINT tool Poastal is an email OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information. ✨ Features Determine the name of the...
sgn
SGN 是一个用于进攻性安全目的的多态二进制编码器，例如生成静态无法检测的二进制载荷。它使用类似于 LFSR 的加法反馈循环来对给定的二进制指令进行编码。本项目是用 golang 对原始 Shikata ga nai 的重新实现，并带来了许多改进。 !WARNING 该项目最近已移植到 Rust。此移植保留了原始设计和行为，但使用纯 Rust 的 iced-x86 汇编器取代了 keystone 文本汇编器，因此没有任何原生库依赖 ——只需普通的 cargo build 即可构建。如需旧版 Go 版本，请查看 sgn-go 分支。 为什么？ 对于进攻性安全社区而言，shikata ga...
slsa
SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...
honggfuzz
Honggfuzz Un fuzzer evolutivo, impulsado por retroalimentación y orientado a la seguridad. Honggfuzz es un fuzzer de propósito general que utiliza cobertura de código basada en software y hardware para encontrar errores. Es multiproceso, multihilo y admite fuzzing persistente para una velocidad...
kAFL
kAFL Fuzzer de retroalimentación asistido por hardware para VMs x86 kAFL/Nyx es un fuzzer guiado rápido para la VM x86. Es ideal para cualquier cosa que se ejecute como invitado QEMU/KVM, en particular firmware x86, kernels y sistemas operativos completos. Nota: Todos los componentes se...
seekr
A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...
attack-stix-data
ATT&CK® STIX Data MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and ...
resmack-fuzz-test
Resmack 模糊测试 本项目探索了一个基于反馈的模糊测试工具，它使用： ptrace 进行插桩 通过目标进程指定的动态内存断点 进程快照/恢复 使用 /proc/pid/map、/proc/pid/clearrefs 和 /proc/pid/pagemap 使用 processvmwritev 性能计数器作为反馈机制 语料库管理 此处实现的成功代码和概念将被吸收到 resmack 中，使其成为一个完整的模糊测试工具 而不仅仅是基于语法的数据生成器。 特性/实验 参见博客文章 Resmack: Fuzzing Thoughts - Part 2 了解本项目所做工作的完整说明。 使用方法...
Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export
The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...
kbd-audio
kbd-audio This is a collection of command-line and GUI tools for capturing and analyzing audio data. Keytap The most interesting tool is called keytap - it can guess pressed keyboard keys only by analyzing the audio captured from the computer's microphone. Check this blog post for more details:...
CVE-2026-97515
The Linux kernel contains a vulnerability in the i3c master driver specifically affecting the NPCM845 hardware. When a target on the I3C bus holds SDA low, the controller reports a false Master Request (MR) in-band interrupt. The driver's attempt to restore the bus by emitting a STOP condition tr...
sploits
sploits | Código| Descripción ---|---|--- CVE-2018-4310| código| MediaRemote: Se abordó un problema de acceso con restricciones adicionales de sandbox CVE-2018-4991| código| Adobe Creative Cloud Desktop Application versiones 4.4.1.298 y anteriores tienen una vulnerabilidad explotable de validació...