7 matches found
mantra
ใ๐ใ About Mantra The tool in question was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages. It works by checking the source code of web pages and script files for strings that are identical or similar to API keys. These keys are often used for...
Clickjacking-Exploit-Detector
Clickjacking-Exploit-Detector ํด๋ฆญ์ฌํน ์ต์คํ๋ก์ ํ์ง๊ธฐ๋ ์นํ์ด์ง ์ค์บ ๊ธฐ์ ์ ์ฌ์ฉํ์ฌ ์ ์ฌ์ ์ธ ์ทจ์ฝ์ ์ ์๋ณํ๊ณ ํด๋น ์์์ ๋ํ ๋ถ์์ ์ ๊ณตํฉ๋๋ค. ๊ธฐ๋ฅ HTML ์ค์บ๋: ํด๋ฆญ์ฌํน์ ์ ์ฉ๋ ์ ์๋ HTML ์์ ๋ฐ iframe ์์๋ฅผ ํ์ธํฉ๋๋ค. ์ ์ฌ์ ํด๋ฆญ์ฌํน ๊ฒฝ๊ณ : ์ ์ฌ์ ์ธ ํด๋ฆญ์ฌํน ์ทจ์ฝ์ ์ ๋ํ ๋ณด๊ณ ์์ ์ ์์ ์ ๊ณตํฉ๋๋ค. frame-ancestors ํค๋ ๊ฐ์ง: ์น์ฌ์ดํธ์ Content-Security-Policy ํค๋๊ฐ ํด๋ฆญ์ฌํน์ผ๋ก๋ถํฐ ๋ณดํธํ๋์ง ํ์ธํฉ๋๋ค. UI ๋ฐฉํด ๊ฐ์ง: ์น์ฌ์ดํธ ์...
jsfinder
๊ธฐ๋ฅ | ์ค์น | ์ฌ์ฉ๋ฒ | ๋ฐ๋ชจ | ํ ์ผ| ์ฐ๋ฝ์ฒ jsFinder๋ Go๋ก ์์ฑ๋ ๋ช ๋ น์ค ๋๊ตฌ๋ก, ์น ํ์ด์ง๋ฅผ ์ค์บํ์ฌ HTML ์์ค ์ฝ๋์ ๋งํฌ๋ JavaScript ํ์ผ์ ์ฐพ์ต๋๋ค. JavaScript ํ์ผ์ ํฌํจํ ์ ์๋ ๋ชจ๋ ์์ฑ์: src, href, data-main ๋ฑ์ ๊ฒ์ํ๊ณ ํ์ผ์ URL์ ํ ์คํธ ํ์ผ๋ก ์ถ์ถํฉ๋๋ค. ์ด ๋๊ตฌ๋ ์ฌ์ฉํ๊ธฐ ๊ฐ๋จํ๊ฒ ์ค๊ณ๋์์ผ๋ฉฐ, ํ์ผ์์ URL์ ์ฝ๊ฑฐ๋ ํ์ค ์ ๋ ฅ์์ ์ฝ๋ ๊ฒ์ ์ง์ํฉ๋๋ค. jsFinder๋ ์น ์ ํ๋ฆฌ์ผ์ด์ ์์ ์ฌ์ฉ๋๋ JavaScript ํ์ผ์ ์ฐพ๊ณ ๋ถ์ํ...
CVE-2022-20785 ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 2022
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an...
CVE-2022-20785 ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 2022
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an...
ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: May 2022
On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an...
CVE-2008-5532
Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt...