duckLogger

DuckLogger DuckLogger is an ESP32-S3–based USB Key Logger. It logs keystrokes in a text file, and provides wireless access to download logs through a built-in Wi-Fi access point. Recreating this project doesn't require any custom PCB. Hardware used here is less than $10 in total on places like...

PwnFox

PwnFox PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit. If you are a chrome user you can check https://github.com/nccgroup/autochrome. PwnFox Features Single click BurpProxy Containers Profiles PostMessage Logger Toolbox Security header remover Installation...

freedomfighting

Freedom Fighting scripts This repository contains scripts which may come in handy during your freedom fighting activities. It will be updated occasionally, when I find myself in need of something I can't find online. Everything here is distributed under the terms of the GPL v3 License...

BeeLogger

BeeLogger 版权所有 2017 BeeLogger 作者： Alisson Moretto - 4w4k3 Twitter: @4w4k3Official 本工具设计用于正当目的和渗透测试，请勿用于犯罪！ 仅在此处下载，请勿相信其他来源。 注意：BeeLogger 目前仅官方支持拉丁语系语言。 如何安装： 视频：https://www.youtube.com/watch?v=ifOGkOTS5zk 克隆： git clone https://github.com/4w4k3/BeeLogger.git 运行： cd BeeLogger sudo su chmod +x...

CVE-2020-11851

CVE-2020-11851 Vulnerabilidad de ejecución remota de código en ArcSight Logger a través de ArcSight Management Center https://nvd.nist.gov/vuln/detail/CVE-2020-11851 Resumen Ejecutivo Antecedentes de la vulnerabilidad ArcSight Logger es una solución integral de gestión de registros que facilita e...

cve-2022-22965

Ejemplo mínimo de CVE-2022-22965 Al momento de escribir esto, el enlace de parámetros de solicitud de spring-web WebDataBinder, por defecto, permite acceder al método getClass del objeto. Esto es un detalle de implementación interno y específico de la JVM en mi humilde opinión no debería estar...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

CVE-2025-10951

CVE-2025-10951 - checkmlloggertraversal.py Comprobador de prueba de existencia para CVE-2025-10951 / GHSA-8x9j-2p8r-7xc6 — un path traversal sin autenticación en geyang/ml-logger ≤ 0.10.36, que afecta a las funciones loghandler / streamhandler en mllogger/server.py. Para uso exclusivo contra...

CVE-2025-10952-ml-logger-AFR

CVE-2025-10952 — Lectura arbitraria de archivos en streamhandler de ml-logger Este repositorio proporciona un script Python independiente — CVE-2025-10952.py — que explota una vulnerabilidad de lectura arbitraria de archivos sin autenticación en streamhandler de ml-logger, encadenada con el...

CVE-2026-21011-Log4j-style-JNDI-Injection-in-Custom-Logger-Simulated-

CVE-2026-21011 – Inyección JNDI estilo Log4j en un logger personalizado Simulado Código del programa simulación en Java en Python log4jsim.py - Custom logger that evaluates $... patterns import subprocess, re def logmessage: Vulnerable: looks up JNDI-like syntax and executes pattern =...

LoggerPlusPlus

Logger++ Registro avanzado para Burp Suite Desarrollado por Corey Arthur Originalmente por Soroush Dalili Publicado como código abierto por NCC Group Plc - https://www.nccgroup.com/ Publicado bajo AGPL-3.0, consulte LICENSE para más información Descripción Logger++ es una extensión de registro...

cve-2021-44228--spring-hibernate

CVE-2021-44228 POC - Spring / Hibernate Este POC usa Spring / Hibernate, sin embargo un enfoque similar de rmi - deserialización podría usarse para desencadenar cualquier vulnerabilidad de deserialización TL;DR $ docker-compose up $ curl -X POST -H 'Content-Type: text/plain' localhost:8080...

alpr-dashboard-patches

ALPR Dashboard runtime patches Two drop-in patches for the algertc/alpr-dashboard Docker project. Both are deployable without modifying or rebuilding the upstream image. What's here logger-fix/ — async logger + cleanup throttle Replaces the built-in sync log transport full-file read + rewrite on...

Klever-Go: /log controls global node logging

An unauthenticated client can connect to GET /log, send an arbitrary logger profile as the first WebSocket message, and mutate the node's global logging configuration before receiving live logs from the process. I confirmed this against a local validator built from this repository: an...

The vulnerability of the TTX Logger component, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the TTX Logger component, a traffic analysis tool for computer networks developed by Wireshark, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause system failures...

Astra Linux – Vulnerability in Wireshark

The TTX logger file parser crashes in versions 4.6.0 to 4.6.7, allowing denial of service...

CVE-2026-87859

morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...

TencentOS Server 4: wireshark (TSSA-2026:0956)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0956 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Malicious code in katal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff7c110d8766d130db16799f1875e420bdaba20866624b593a209ace7a49d6a package.json declares a dependency whose value is a bare HTTPS URL https://repo.securityctrl.com/katal-logger instead of a registry version range. On...

MAL-2026-15513 Malicious code in katal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff7c110d8766d130db16799f1875e420bdaba20866624b593a209ace7a49d6a package.json declares a dependency whose value is a bare HTTPS URL https://repo.securityctrl.com/katal-logger instead of a registry version range. On...