vimana-framework

Questo progetto è ora ospitato qui: https://github.com/s4dhulabs/vimana-framework...

T3SF

T3SF Framework di simulazione di esercizi tecnici tabletop Indice Informazioni Preparazione TODO CHANGELOG Contributing Informazioni T3SF è un framework che offre una struttura modulare per l'orchestrazione di eventi basati su una lista principale di scenari MSEL insieme a un insieme di regole...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo è un honeypot open source per database nosql che automatizza il processo di rilevamento degli attaccanti e di registrazione degli incidenti di attacco. I motori di simulazione sono distribuiti utilizzando il framework twisted. Attualment...

Pentest-Tools-Framework

Pentest Tools Framework exploits, Scanner, Password. Dettagli...

AlertResponder

AlertResponder NOTA: Questo repository è obsoleto. Il nuovo repository si trova qui: https://github.com/m-mizutani/deepalert AlertResponder è un framework serverless per la risposta automatica degli alert di sicurezza. Panoramica AlertResponder riceve un alert, ovvero un evento di interesse dal...

anteater

Anteater - CI/CD Gate Check Framework Description Anteater is an open framework to prevent the unwanted merging of nominated strings, filenames, binaries, depreciated functions, staging enviroment code / credentials etc. Anything that can be specified with regular expression syntax, can be sniffe...

pyattck

Benvenuto nella documentazione di pyattck root@kitploit: . ... | \ \ \ / / / \ | | | / || |/ / | | | \ / / / ^ \ ---| |-------| |----| ,----'| ' / | / \ / / /\ \ | | | | | | | Versione attuale: 7.1.1...

RiskAssessmentFramework

Das OWASP Risk Assessment Framework Codacy Badge !GSOC...

apparatus

ASTo - Apparatus Software Tool Archivhinweis - Nach Abschluss meines Forschungsstudiums wurde das Repository archiviert. ASTo hat einen bedeutenden Einfluss auf meine Forschung gehabt. Ich möchte allen meinen Dank aussprechen, die dazu beigetragen haben, es besser zu machen. Dies ist jedoch nicht...

Spring Framework - Path Traversal

Spring Framework MVC applications deployed as WAR or with embedded Servlet containers that do not reject suspicious URI sequences and serve static resources with Spring resource handling contain a path traversal vulnerability, letting attackers access unauthorized files, exploit requires...

Twisted - Open Redirect & XSS

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The Twisted web framework's redirectTo function is vulnerable to reflected XSS if an attacker can control the redirect URL. This template tests for an open redirect and XSS vulnerability in the URL parameter...

Symfony Profiler - Remote Access via Injected Arguments

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

WordPress Titan Framework plugin <= 1.12.1 - Cross-Site Scripting

The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues. id: CVE-2021-24435 info: name: WordPress Titan Framework plugin =...

Astro - Unauthorized Third-Party Image Access

Astro 5.13.2 and 4.16.18 contains an information disclosure vulnerability caused by improper validation of protocol-relative URLs in the image optimization endpoint, letting attackers serve images from unauthorized third-party domains, exploit requires on-demand rendering deployment. id:...

ZK Framework - Information Disclosure

ZK Framework 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 is susceptible to information disclosure. An attacker can access sensitive information via a crafted POST request to the component AuUploader and thereby possibly obtain additional sensitive information, modify data, and/or execute...

Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect

The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...

Dash Framework - Cross-site Scripting

Dash framework versions before 2.15.0 are vulnerable to Cross-site Scripting XSS via href attribute in anchor tags. This template tests for javascript:alert payload injection. id: CVE-2024-21485 info: name: Dash Framework - Cross-site Scripting author: Lee Changhyuneeche severity: medium...

CVE-2023-36899

CVE-2023-36899 Ambiente di riproduzione e strumenti per la vulnerabilità CVE-2023-36899, relativa al bypass dell'autenticazione di sessione senza cookie in ASP.NET Framework. Cookieless DuoDrop: bypass dell'autenticazione IIS e privesc del pool di applicazioni in ASP.NET Framework CVE-2023-36899...

Dr0p1t-Framework

Derzeit nicht gewartet Warten Sie auf die nächste Version Dr0p1t-Framework Haben Sie schon einmal von Trojan-Droppern gehört? Kurz gesagt, ein Dropper ist eine Art Malware, die andere Malware herunterlädt. Dr0p1t gibt Ihnen die Möglichkeit, einen unsichtbaren Dropper zu erstellen, der die meisten...

AhMyth-Android-RAT

AhMyth Android Rat Versione Beta Si compone di due parti: Lato server: applicazione desktop basata sul framework electron pannello di controllo Lato client: applicazione Android backdoor Per Iniziare Hai due opzioni per installarlo 1 Dal codice sorgente Prerequisiti: Electron per avviare l'app Ja...