11 matches found
leviathan
Leviathan 是一款大规模审计工具包，具备广泛的服务发现、暴力破解、SQL 注入检测和运行自定义漏洞利用的能力。它整合了 masscan、ncrack、dsss 等开源工具，并允许您灵活组合使用。 本项目的主要目标是审计尽可能多的系统，范围覆盖全国或广泛的 IP 段。 主要特性 服务发现 ：通过 Shodan、Censys 发现特定国家或 IP 段内的 FTP、SSH、Telnet、RDP、MYSQL 服务。也可以使用集成的 masscan 工具手动发现 IP 段上的运行服务。 简短演示：https://asciinema.org/a/617bsxl1y84bav9f5bcwllx...
BlackHat-Europe-2022
BlackHat-Europe-2022 パターンが CVE-1337-Days に類似するバイナリからバグを選択 概要 静的コードレビューは、脆弱性の亜種や悪用プリミティブを発見する効果的な方法ですが、静的解析にとって最も困難な2つのタスクは、膨大な種類のバグから効果的なコードパターンを抽出することと、多数の異なるモジュールからコードパターンを効率的に検索することです。特にWindowsのようなクローズドソースソフトウェアでは顕著です。...
Opera for Android has received Google Play’s Independent Security Review badge. Here’s what this means for your security
Security Opera for Android has received Google Play’s Independent Security Review badge. Here’s what this means for your security Share January 30th, 2025 Hey Opera users! You might have seen that Opera for Android has achieved a new security-focused milestone: If you search for Opera for Android...
Chinese Hackers Used ScanBox Framework in Recent Cyber Espionage Attacks
A months-long cyber espionage campaign undertaken by a Chinese nation-state group targeted several entities with reconnaissance malware so as to glean information about its victims and meet its strategic goals. "The targets of this recent campaign spanned Australia, Malaysia, and Europe, as well ...
UPDATE: Leviathan Framework v0.1.2!
PenTestIT RSS Feed I seem to have missed about two updates made to the this mass audit toolkit. My last post about the Leviathan Framework can be found here. We now have the latest - Leviathan Framework v0.1.2! What is Leviathan Framework? Leviathan is a mass audit toolkit which has wide range...
Wide Range Mass Audit Toolkit: Leviathan
Leviathan is a mass audit toolkit which has wide range service discovery, brute force, SQL injection detection and running custom exploit capabilities. It consists open source tools such masscan, ncrack, dsss and gives you the flexibility of using them with a combination. The main goal of this...
Researchers Finds Malicious Tor Exit Node Adding Malware to Binaries
A security researcher has identified a Tor exit node that was actively patching binaries users download, adding malware to the files dynamically. The discovery, experts say, highlights the danger of trusting files downloaded from unknown sources and the potential for attackers to abuse the trust...
Debian DSA-2135-1 : xpdf - several vulnerabilities
Joel Voss of Leviathan Security Group discovered two vulnerabilities in xpdf rendering engine, which may lead to the execution of arbitrary code if a malformed PDF file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
DSA-2135-1 xpdf - several vulnerabilities
Bulletin has no description...
Debian DSA-2119-1 : poppler - several vulnerabilities
Joel Voss of Leviathan Security Group discovered two vulnerabilities in the Poppler PDF rendering library, which may lead to the execution of arbitrary code if a malformed PDF file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...