mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of Contract DE-NA0003525 with NTESS, the U.S. Government retains certain rights in this software MOSE is a post-exploitation tool that helps security professionals leverage...

CVE-2020-14947

CVE-2020-14947 The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947...

rawsec-cybersecurity-inventory

Rawsec's Cybersecurity Inventory Name| Link ---|--- Website| link Documentation| link Git repository| link Git repository mirror| link Merge Requests| link Issues| link Wiki| link Chat| link For contribution, development, usage or questions check the documentation. Sponsors Please contact me or...

metlo

Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...

pharmacy-sqli-CVE-2026-7392

Pharmacy Sales and Inventory System 1.0 - CVE-2026-7392 SQL Injection SourceCodester Pharmacy Sales and Inventory System V1.0 pure PHP/MySQL version CVE : CVE-2026-7392 Endpoint : /ajax.php?action=deletesupplier id parameter Type : SQL Injection CWE-89 CVSS 3.1 : 6.3 Medium Author : oretnom23...

fleet-cve-scanner

fleet-cve-scanner An open-source, single-script CVE scanner for RMM-managed fleets. Pure PowerShell 7, no agents, no appliances, no license fees. It answers one question for every piece of software on every endpoint you manage: is the installed version known to be vulnerable, and how urgent is it...

frogy2.0

Orbis - 攻撃対象領域インテリジェンス 全スペクトル攻撃対象領域インテリジェンス Orbis は、組織全体のインターネットに面した攻撃対象領域（サブドメイン、開放ポート、Webアプリケーション、クラウドインフラ、TLS証明書、電子メールのセキュリティ状態、公開されたシークレット、ログインパネルなど）を自動的にマッピングし、発見されたすべての資産をスコアリングおよびランク付けすることで、何に最初に焦点を当てるべきかを正確に把握できます。 機能 ドメインのリストを渡すだけで、残りは自動で実行します。 ドメインのリストを渡すだけで、残りは自動で実行します。 google.com →...

bopscrk

bopscrk Generate smart and powerful wordlists for targeted attacks Explore the docs » View Demo · Report Bug · Request Feature Table of contents 1. About the Project What's new Built with 2. Getting started Installation Run interactive mode 3. Usage How it works Tips Advanced usage Lyricpass 4...

PowerHuntShares

PowerHuntShares v2 PowerHuntShares is PowerShell tool designed to help cybersecurity teams and penetration testers better identify, understand, attack, and remediate SMB shares in the Active Directory environments they protect. Every hacker has a story about abusing SMB shares, but it’s an attack...

SCOPE

SCOPE: Security Cloud Ops Purple Engagement SCOPEは、決定論的なPythonインベントリと制約付きAIエージェントを使用して、AWS Purple Teamワークフローを実行します。AWSリソースの監査、攻撃パスの検証、レビューのみのエクスプロイトプレイブックの生成、コントロールの作成、Splunk調査のガイドを行います。 仕組み Claude Code、Antigravity CLI、Gemini CLI、またはCodex CLIからSCOPEを実行します： /scope:audit --all フェーズ| 出力 ---|--- 監査|...

ClientInspectorV2

Introduction to ClientInspector v2 Are you in control? - or are some of your core infrastructure processes like patching, antivirus, bitlocker enablement drifting? Or would you like to do advanced inventory , where you can lookup your warranty state against Lenovo or Dell warranty, then keep...

rawsec-cybersecurity-inventory

Rawsec의 사이버 보안 인벤토리 이름| 링크 ---|--- 웹사이트| 링크 문서| 링크 Git 저장소| 링크 Git 저장소 미러| 링크 병합 요청| 링크 이슈| 링크 위키| 링크 채팅| 링크 기여, 개발, 사용 또는 질문은 문서를 확인하세요. 후원자 이 프로젝트를 후원하려면 저 또는 Porchetta Industries에 연락주세요. 공식 Discord 채널 Rawsec의 CyberSecurity Inventory는 Porchetta Industries Discord 서버에 다른 많은 오픈소스 보안 도구와 함께 채널을 운영...

ADB-Toolkit

!made-with-bashhttps://img.shields.io/badge/-Made%20with%20Bash-1f425f.svg?logo=image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABgAAAAYCAYAAADgdz34AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyZpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlk...

cloudquery

클라우드 운영, 혼란 없는 그 자체 CloudQuery는 플랫폼 팀을 위해 구축된 클라우드 자산 인벤토리입니다. 클라우드 인프라 메타데이터를 데이터 웨어하우스에 동기화하여 인사이트와 자동화를 지원합니다. AWS, Azure, GCP 및 Wiz, Finout, GitHub 등 70개 이상의 클라우드 및 SaaS 소스 전반에서 데이터를 통합하고 컨텍스트를 제공합니다. 설치 brew install cloudquery/tap/cloudquery Linux 및 Windows용 설치 가이드와 CloudQuery로 첫 번째 동기화를 완료하...

poc-cve-xss-encoded-wp-inventory-manager-plugin

Update - 5/10/2023 The CVE-2023-2123 ID was reserved and the PoC was published in the WPScan website: https://wpscan.com/vulnerability/44448888-cd5d-482e-859e-123e442ce5c1 Details Title: Unauthenticated Reflected Cross-Site Scripting in WP Inventory Manager Plugin for WordPress CMS Date: 2023-04-...

metlo

Metlo API Security あなたのAPIを保護します。 MetloはオープンソースのAPIセキュリティプラットフォームです Metloは、15分以内にセットアップできるオープンソースのAPIセキュリティツールで、エンドポイントを一覧化し、悪意のあるアクターを検出し、悪意のあるトラフィックをリアルタイムでブロックします。 API攻撃をリアルタイムに検出します。 悪意のあるアクターを自動的にブロックします。 すべてのAPIエンドポイントと機密データのインベントリを作成します。 APIを本番環境に投入する前にプロアクティブにテストします。 無料で始めましょう！...

CVE-2023-46449

CVE-2023-46449 Incorrect Access Control VIDEO POC LINK https://www.youtube.com/watch?v=H5QnsOKjs3s Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via...

CVEs

CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22890.md CVE-2024-22909 : Online-Exam-System - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22909.md...

wordpress-upgrade-check

wordpress-upgrade-check Read-only check of the WordPress core version of every site on a server , with the fix table for CVE-2026-87902 critical, unauthenticated; fixed in WordPress 7.1.2 on 2026-09-22 and backported to every branch down to 4.7. For web agencies and admins who look after many...

CVE-2024-53476

CVE-2024-53476 説明 SimplCommerceはチェックアウトロジックに競合状態の脆弱性が存在し、同時チェックアウトリクエストにより複数のユーザーが在庫以上の商品を購入できる脆弱性です。 検出方法 攻撃者は、在庫が限られている（在庫=1）商品を、2つのアカウントを使用してほぼ同時に購入しようとすることでこの脆弱性を検出できます。両方のアカウントが商品の購入に成功した場合、競合状態の存在が確認されます。これは、カスタムスクリプトやBurp SuiteのTurbo Intruderを使用して同時チェックアウトリクエストを送信することで実行できます。 テスト対象...