125 matches found
social-engineer-toolkit
The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...
MagicArch
MagicArch: 침투 테스트를 위한 자동화된 Arch Linux 설정 MagicBytes 제작 MagicArch는 Ansible로 구축된 종합적인 사후 설치 스크립트로, 기본 Arch Linux 설치를 침투 테스트 및 성능에 맞게 맞춤화된 완전한 Pentesting 배포판으로 변환하도록 설계되었습니다. 보안 평가, 사용자 정의 및 성능 최적화에 중점을 두어 MagicArch는 설정 프로세스를 간소화하고 침투 테스트 작업에 맞춤화된 환경을 보장합니다. 기능 Ansible 기반 자동화 : Ansible의 강력함을 활용하여...
metasploit_in_termux
Termux에서 Metasploit Framework 6 설치 방법 설치 전 최신 Termux를 사용하려면 다음을 준비하세요: Android 설정에서 Termux의 모든 데이터를 삭제 F-Droid에서 최신 Termux 버전을 제거 후 재설치 F-Droid의 버전, Play Store 버전은 구버전 그런 다음 Termux를 실행하여 초기화를 완료하고, 앱을 닫습니다 강제 종료, 스와이프로 종료하지 않음 다시 열고 아래 지침을 따릅니다. 자동 설치 source curl -fsSL https://kutt.it/msf 수동 설치 p...
dnscrypt-autoinstall
dnscrypt-autoinstall 이 프로젝트는 보관되었습니다. 마지막 댓글 108을 참조하십시오. 리눅스 기반 시스템에서 DNSCrypt를 설치하고 자동으로 구성하기 위한 스크립트입니다. 설명 DNSCrypt는 DNS 쿼리와 응답을 암호화하여 클라이언트와 DNS 확인자 간의 통신을 보호하는 프로토콜입니다. DNS 제공자로부터 받은 응답이 실제로 해당 제공자에 의해 전송되었으며 변조되지 않았음을 확인합니다. 이 스크립트는 DNSCrypt-proxy, libsodium 암호화 라이브러리 및 선택한 DNSCrypt 서비스 제공...
Malicious Package
Overview @vpmdhaj/search-setup is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between those...
CVE-2026-34733
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo installation script install/deleteSystemdPrivate.php contains a PHP operator precedence bug in its CLI-only access guard. The script is intended to run exclusively from the command line, but the guard condition...
CVE-2026-34733
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo installation script install/deleteSystemdPrivate.php contains a PHP operator precedence bug in its CLI-only access guard. The script is intended to run exclusively from the command line, but the guard condition...
Malicious code in tahoe-tap (npm)
Malicious package detected. Executes code during installation via preinstall script in package.json and has only one version published. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deec4b3e879632ae9819b52e88ae689725b1af688aecd541e498d2bac084f848 The package...
groupoffice 跨站脚本漏洞
GroupOffice is an open-source groupware and CRM developed by Intermesh. Versions of GroupOffice prior to 6.8.155, 25.0.88, and 26.0.10 contained a cross-site scripting vulnerability. This vulnerability stemmed from the POST field in the installation script install/license.php, where the field was...
Malicious code in thread-pipeline-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2d7de9849aa6d6194b8d6fdf574c6c56c3de7cb75ad338f2428fc7f1374e4280 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CVE-2026-24840 Dokploy uses hardcoded credentials in installation script, which could result in database access
Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, a hardcoded credential in the provided installation script located at https://dokploy.com/install.sh, line 154 uses a hardcoded password when creating the database container. This means that nearly all Dokpl...
EUVD-2014-9808
Malware in sbrugna...
EUVD-2005-2962
Malware in sbrugna...
EUVD-2020-14264
Malware in sbrugna...
EUVD-2006-5649
Malware in sbrugna...
EUVD-2005-0795
Malware in sbrugna...
EUVD-2013-7250
Malware in sbrugna...
EUVD-2001-1047
Malware in sbrugna...