PXEThief

PXEThief PXEThief는 DEF CON 30 발표 Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925에서 논의된 공격 경로를 Microsoft Endpoint Configuration ManagerConfigMgr, 여전히 SCCM으로 널리 알려짐의 운영 체제 배포 기능에 대해 구현하는 도구 모음입니다. 이를 통해 구성된 Network Access...

sshuttle

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your client machine or router is Linux, FreeBSD, MacOS or Windows. You have access to a remote network via ssh. You don't necessarily have admin access on th...

sshuttle

sshuttle: где прозрачный прокси встречается с VPN и ssh Насколько мне известно, sshuttle — единственная программа, которая решает следующую распространённую задачу: Ваша клиентская машина или маршрутизатор работает под управлением Linux, FreeBSD, MacOS или Windows. У вас есть доступ к удалённой...

packetfence

PacketFence PacketFenceとは？ PacketFenceは、完全にサポートされ、信頼された、フリーかつオープンソースのネットワークアクセス制御（NAC）システムです。登録および修復のためのキャプティブポータル、有線・無線の集中管理、802.1Xサポート、問題のあるデバイスのレイヤー2分離、IDSソリューションや脆弱性スキャナーとの統合など、印象的な機能セットを誇ります。PacketFenceは、小規模から非常に大規模な異種混在ネットワークまで、ネットワークを効果的に保護するために使用できます。 ネットワーク上に誰がいるのか知りたいですか？...

CVE-2023-27163

CVE-2023-27163 の Request-Baskets における SSRF の概念実証 Proof of Concept このリポジトリには、request-baskets の バージョン 1.2.1 までで発見された Server-Side Request Forgery SSRF 脆弱性である CVE-2023-27163 の概念実証 PoC が含まれています。この脆弱性により、攻撃者は巧妙に細工された API リクエストを通じて /api/baskets/name コンポーネントを悪用し、ネットワークリソースや機密情報にアクセスできるようになります。 使用方法...

singularity

Singularity of Origin Последние обновления: НОВОЕ 2025-11-25 : В выпуске Chrome 142 добавлен Local Network Access LNA, который предотвращает техники атак с перепривязкой DNS, реализованные в Singularity. Ветка LNA-from-Non-Secure-Contexts Singularity of Origin реализует поддержку Trial for Local...

BloodHound-Tools

Что это такое? Набор инструментов, интегрирующихся с BloodHound. Bloodhound является фактическим стандартом, который как синие, так и красные команды безопасности используют для поиска путей бокового перемещения и повышения привилегий, которые могут быть использованы в корпоративной среде. Типичн...

Oracle WebLogic Server - Remote Code Execution

Oracle WebLogic Server Oracle Fusion Middleware component: WLS Core Components is susceptible to a remote code execution vulnerability. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 2.2.1.3.0 and 12.2.1.4.0. This easily exploitable vulnerability could allow unauthenticated...

BMC FootPrints 'feedUrl' - Server-Side Request Forgery

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery SSRF vulnerability in the /footprints/servicedesk/externalfeed/RSS endpoint. The 'feedUrl' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling...

UniFi Network Application - Path Traversal

UniFi Network Application contains a path traversal vulnerability allowing a network attacker to access and manipulate files on the underlying system, potentially leading to account access, exploit requires network access. id: CVE-2026-22557 info: name: UniFi Network Application - Path Traversal...

Gradio - Server-Side Request Forgery

A Server-Side Request Forgery SSRF vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the /queue/join endpoint and the saveurltocache function. The vulnerability arises when the path value, obtained from the user and expected to be a URL, is used to make an HTTP...

Memos 0.13.2 - Server-Side Request Forgery

SSRF vulnerabilities exist in the memos API service /o/get/httpmeta that allow unauthenticated and authenticated users to enumerate and read from the internal network. In addition, one SSRF vulnerability leads to a reflected XSS vulnerability, which may allow an attacker complete control over the...

Oracle WebLogic Server - Remote Code Execution

Oracle WebLogic Server 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 contains a remote code execution caused by unauthenticated access via T3, IIOP, letting attackers take over the server, exploit requires network access. id: CVE-2021-2135 info: name: Oracle WebLogic Server - Remote Code Execution author:...

Oracle Business Intelligence Publisher - XML External Entity Injection

Oracle Business Intelligence Publisher is vulnerable to an XML external entity injection attack. The supported versions affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. This easily exploitable vulnerability allows unauthenticated attackers with network access via HTTP to compromise BI Publishe...

LocalAI - Partial Local File Read

A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery SSRF and partial Local File Inclusion LFI. The endpoint supports both https-// and file-// schemes, where the latter can lead to LFI. However, the output is limited due to the...

CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC

CVE-2024-47533 - Cobbler XMLRPC 인증 우회 RCE 익스플로잇 ⚠️ 인증 우회를 통한 Cobbler의 치명적인 원격 코드 실행 🛠️ @dollarboysushil의 PoC 구현 💡 개요 Cobbler는 네트워크 설치 환경의 신속한 설정을 가능하게 하는 Linux 설치 서버로, 버전 3.0.0에서 3.2.3 미만 및 3.3.7 미만의 버전에 인증 취약점이 있습니다. utils.getsharedsecret 함수는 항상 -1을 반환하므로, 누구나 빈 사용자 이름''과 비밀번호 -1로 Cobbler XML-RPC...

fcn-

fcn free connect your private network from anywhere 1. fcn이란 무엇인가 fcnfree connect은 누구나 간편하게 원클릭으로 사설망에 접속할 수 있는 도구로, 고객 서버와 클라이언트로 구성됩니다. fcn은 fcn 공용망 데이터 서버와 데이터 암호화 기술을 사용하여 사용자 클라이언트를 고객 서버 사설망에 가상으로 접속시킵니다. fcn = fcnserver + fcnclient 참고: FCN V3.0 이전 버전은 서버 전환 시 BUG가 있으며, FCN이 최근 서버 IP를 전환하여...

EUVD-2026-38207

Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover...

WonderShell

WonderShell - CVE - 2021-44595 | CVE - 2021-44596 Discovered by Netanel Cohen와 Tomer Peled, BugSec의 보안 연구원. Description Wondershare Dr.Fone을 악용하는 POC 예제입니다. Dr.Fone은 Wondershare가 개발한 휴대폰 툴킷이며, RCE에 취약합니다. 네트워크 접근만으로도 SYSTEM 사용자 권한으로 원격 코드를 실행할 수 있습니다. 취약한 서비스: InstallAssistService.exe...

minipwner

MiniPwner Скрипт для настройки TP-Link MR3040 под управлением OpenWRT в простую, но мощную пентест-«закладку». Что такое «MiniPwner»? MiniPwner — это пентест-«закладка». Он разработан как небольшое, простое, но мощное устройство, которое можно незаметно подключить к сети и предоставить пентестеру...