WebKit-NavigationAPI-SOP-Bypass

WebKit-NavigationAPI-SOP-Bypass WebKit Navigation API — クロスポート傍受による同一オリジンポリシー（SOP）バイパス（CVE-2026-20643） | ---|--- CVE| CVE-2026-20643 発見者| Thomas Espach（WebKit Bugzilla 306050） 対象コンポーネント| WebKit — WebCore::Navigation::innerDispatchNavigateEvent 影響を受けるバージョン| iOS 26.3.1 ビルド 23D8133（iPhone18,2） 分類|...

reverse-skill

reverse-skill 사이버보안 스킬 라우터 · 리버스 엔지니어링 스킬 라우팅 패키지 어두운 물살을 항해하고, 흐름에 거슬러 나아가세요. 소개 · 시작하기 · 사용법 · 빠른 경로 · 라우팅 · 운영 계약 · AI 부트스트랩 · 스폰서 · 기여 🌐 중국어 소개 AI 에이전트라면READMEAI.md로 이동하여 지침을 엄격히 따르세요. AI 에이전트Claude Code, Codex, Cursor, OpenCode 또는 기타 호환 클라이언트가 APK, 바이너리, 프론트엔드 JS 암호화, CTF 문제 또는 침투 테스트 대상을 만나...

ida_ifl

IFL - 対話型関数リスト ライセンス: CC-BY https://creativecommons.org/licenses/by/3.0/ 関数とその参照間をユーザーフレンドリーにナビゲートすることを目的とした小さなプラグインです。 さらに、例えばPE-sieveが生成したレポートをIDAにインポートすることもできます。対応形式： .tag形式（PE-sieve、Tiny Tracer、PE-bearが生成） .imports.txt形式（PE-sieveが生成） Python 2向けのレガシーバージョンは、ブランチpython2で入手できます Binary...

imago-forensics

imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...

ARC-Browser-Address-Bar-Spoofing-PoC

ARC 브라우저 주소 표시줄 스푸핑 - iOS/iPadOS CVE-2024-25733 ARC 브라우저 주소 표시줄 스푸핑 PoC - iOS/iPadOS 익스플로잇 PoC 개념 증명 function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort === 443; document.location = "https://google.com:" +...

wuzz

wuzz Interactive cli tool for HTTP inspection. Wuzz command line arguments are similar to cURL's arguments, so it can be used to inspect/modify requests copied from the browser's network inspector with the "copy as cURL" feature. Installation and usage GO $ go get github.com/asciimoo/wuzz $...

HexRaysCodeXplorer

| | | | | \ / \ | | \ \ / / | | | || | | | / / | / / | | \ V / | | | |/ \ / / //| | | / | | / \ / |/ / | ' | |/ | '/ \ '| | | | | / | |\ \ | | || \ /\ | | | / /^\ \ | | | | | | / | | |///| ,| , |// / , |/ / . /||/| | || / | | | |/ || RE 과정에서 더 나은 코드 탐색을 위한 Hex-Rays 디컴파일러 플러그인입니다. CodeXplorer는 C++...

RedGridLink

Red Grid Link Red Grid Link は提供終了しました 2026年9月27日に提供終了。v1.7.0 が最終リリースです。 Link は App Store での販売を終了し、Google Play では非公開化されました。新規サブスクリプションおよび買い切りの購入は提供されていません。 既存のインストール:...

reflector

reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...

findyara-ida

FindYara 이 IDA Python 플러그인을 사용하여 yara 규칙으로 바이너리를 스캔하세요. 모든 yara 규칙 일치 항목은 오프셋과 함께 나열되므로 빠르게 이동할 수 있습니다! 🍻 이 플러그인과 코드의 모든 공로는 David Berard@p0ly에게 있습니다 🍻 이 플러그인은 David의 훌륭한 findcrypt-yara 플러그인을 복사한 것입니다. 이 플러그인은 그의 것을 확장하여 모든 yara 규칙을 사용할 수 있도록 합니다. FindYara 사용하기 플러그인은 메뉴에서 Edit-Plugins-FindYara를 통...

CVE-2025-22131-PoC

CVE-2025-22131-PoC CVE-2025-22131 の PoC PhpSpreadsheet は純粋な PHP で書かれたライブラリであり、Excel や LibreOffice Calc などのさまざまなスプレッドシートファイル形式を読み書きするための一連のクラスを提供します。 phpspreadsheet のバージョン =2.2.0, =2.0.0, =3.0.0, sheetIndex === null $sheets = $this-spreadsheet-getAllSheets; else $sheets =...

study-turbolinks-link

JavaScript 사용법 https://github.com/turbolinks/turbolinksapi-reference Turbolinks.visit'/home/two' // default is advance. Turbolinks.visit'/home/two', action: 'advance' Turbolinks.visit'/home/two', action: 'replace'...

yaradbg-frontend

はじめに YaraDbgは、セキュリティアナリストがより少ない労力とより高い自信を持ってハンティングルールや検知ルールを作成できるようにする、無料のWebベースのYaraデバッガです。YaraDbgを使用すると、特定のファイルに対して一部のYaraルールが一致した、または一致しなかった理由について、徹底的な根本原因分析（RCA）を実行できます。また、多数のYaraルールをより適切に維持管理するのにも役立ちます。 YaraDbgフロントエンドであるこのプロジェクトは、YaraDbg（https://yaradbg.dev...

CVE-2026-103922

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

EUVD-2026-90973

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

CVE-2026-103922

The Capacitor cross-platform native runtime (versions 6.0.0 up to 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1) contains a navigation guard vulnerability on Android and iOS . The guard validates the host and scheme of a target URL but fails to validate the path , allowing an attacker to navigate a frame...

CVE-2023-36884-Checker

CVE-2023-36884-Checker CVE-2023-36884 のハードニングを確認するスクリプト https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 目的 このスクリプトは、Microsoft のハードニング推奨事項が正しく適用されているかどうかを確認します。 Microsoft は https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 で次のように述べています: Add the following...

PT-2026-103954

Name of the Vulnerable Software and Affected Versions Capacitor versions prior to 6.2.2 Capacitor versions prior to 7.6.9 Capacitor versions prior to 8.3.5 Capacitor versions prior to 8.4.3 Capacitor versions prior to 8.5.1 Description The Android and iOS WebView navigation guard validates the ho...

Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2023_0476)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230476 advisory. Mozilla: libusrsctp library out of date CVE-2022-46871 Mozilla: Arbitrary file read from GTK drag and drop on Linux CVE-2023-23598 Mozilla: Memory safety...

Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2023_1407)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231407 advisory. Mozilla: Incorrect code generation during JIT compilation CVE-2023-25751 Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9...