KapeFiles

KAPE Files コミュニティが作成した KAPE 用のターゲットとモジュール KAPE をダウンロード · バグを報告 · 機能をリクエスト KapeFiles KAPE概要 KAPE は、効率的で高度に構成可能なトリアージプログラムであり、基本的にあらゆるデバイスやストレージの場所を対象に、法医学的に有用なアーティファクトを発見し、数分以内に解析します。KAPE は こちら からダウンロードできます。 詳細なドキュメントについては、こちら を参照してください!! このURLは常に最新のドキュメントです。 KAPEライセンス 注: 商用アプリケーションでの KAPE...

CVE-2024-55347

CVE 披露：CVE-2024-55347 CVE-2024-55347 公开披露 🚀 日期： 10-02-2025 摘要 Kroll Artifact Parser And Extractor KAPE v1.3.0.2 中存在一个二进制植入漏洞，攻击者可通过将恶意构造的二进制文件放置到特定目录中提升权限并执行任意代码。该漏洞可能导致未经授权的系统访问以及敏感数据的潜在泄露。 受影响产品 供应商： Kape by Eric Zimmerman 产品： kape.exe 版本： 1.3.0.2 漏洞描述 KAPE 产品团队、其开发者以及 CVE Mitre 已被告知 Kroll...

CVE-2024-26330

An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it...

CVE-2024-26330

An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it...

CVE-2024-26330

An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it...

CVE-2024-26330

An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it...

CVE-2024-26330

CVE-2024-26330 affects Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials stay in memory while the process remains open and can be retrieved by dumping and parsing the process memory. This is the root issue described across Red Hat and NVD entries, with practic...

Bullied by Bugcrowd over Kape CyberGhost disclosure

TL;DR The CyberGhost VPN client suffers from an elevation of privilege vulnerability and is filed under CVE-2023-30237. A specially crafted JSON payload sent to the CyberGhost RPC service can lead to command line injection when the OpenVPN process is launched, leading to full system compromise. T...

Israeli firm Kape Technologies buys ExpressVPN raising privacy concerns

By Waqas Kape Technologies is an Israeli cybersecurity firm that has bought ExpressVPN for $936 million. However, its users are now flipping out. This is a post from HackRead.com Read the original post: Israeli firm Kape Technologies buys ExpressVPN raising privacy concerns...

CSIRT-Collect - PowerShell Script To Collect Memory And (Triage) Disk Forensics

A PowerShell script to collect memory and triage disk forensics for incident response investigations. The script leverages a network share, from which it will access and copy the required executables and subsequently upload the acquired evidence to the same share post-collection. Permission...