CVE-2024-4577

CVE-2024-4577 CVE-2024-4577의 수정된 미니멀 PoC 이 취약점에 대한 일부 PoC를 테스트해 보았는데, 그중 몇몇이 제대로 작동하지 않았습니다. 그래서 취약 여부를 확인할 수 있는 비침습적이고 미니멀한 자체 PoC를 만들어 수정했습니다. 사용 방법: python3 CVE-2024-4577.py URL 예시: python3 CVE-2024-4577.py http://127.0.0.1/ php-cgi 경로를 지정하지 말고 기본 URL만 입력하세요...

CVE-2025-53770-Checker

CVE-2025-53770-Checker 온프레미스 SharePoint 서버가 CVE-2025-53770에 취약한지 확인합니다 SharePoint Server의 CVE-2025-53770 취약점에 대한 비침습적 탐지기 개발: Division81 Grupo Oruss의 윤리적 해커 팀 기술 설명 CVE-2025-53770 은 온프레미스 SharePoint의 ViewState 관리자에서 .NET 역직렬화의 치명적인 결함으로, 인증 없이 RCE를 허용합니다 :contentReferenceoaicite:1index=1. 익스플로잇은...

CVE-2022-22965

CVE-2022-22965 Spring Framework RCE CVE-2022-22965 Nmap NSE 검사기 비침습적 이 스크립트는 CVE-2022-22965 Spring Framework 5.2.x / 5.3.x RCE의 존재를 확인하며, GET 요청을 통해 페이로드 "/?class.module.classLoader.definedPackages%5B0%5D=0"를 사용하여 400 응답 코드를 탐지합니다 비침습적 다음에서 영감을 받았습니다: @Twitter 스레드...

regreSSHion-Checker

OpenSSHセキュリティ監査ツール（regreSSHion および 2026年の脆弱性） リモートSSHサーバーが重大なOpenSSHエクスプロイトに対して脆弱かどうかを確認するために設計された、軽量で非侵襲なPythonツールです。SSHバナーを取得・解析して脆弱なバージョンを検出し、OS固有のセキュリティバックポート（特にUbuntu Noble 24.04向け）を考慮します。 🛡️ サポートされている脆弱性チェック 1. CVE-2024-6387（regreSSHion） ：OpenSSHにおける重大なリモートコード実行（RCE）シグナルハンドラのレースコンディション。...

CVE-2025-55182-scanner

🔍 CVE-2025-55182-scanner - 취약점을 쉽게 탐지하세요 Download CVE-2025-55182-scanner 🚀 시작하기 환영합니다! 이 가이드는 CVE-2025-55182-scanner를 다운로드하고 실행하는 데 도움을 줍니다. 이 도구는 애플리케이션에서 노출된 React Server Components 엔드포인트를 비침습적으로 식별합니다. 🔧 시스템 요구 사항 시작하기 전에 다음 사항이 갖추어져 있는지 확인하세요: 운영 체제: Windows 10 이상, macOS 또는 Linux 배포판. 디스크 공간:...

Exploit for CVE-2026-64638

CVE-2026-64638 — Nuclei Detection Template Template Nuclei...

A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications

Authorization violations under valid Web sessions are difficult to identify and handle in real time from traffic because they depend strongly on business semantics and exhibit few distinctive protocol-level features. This paper proposes a non-intrusive traffic analysis framework for authorization...

AirPlay RTSP Device Discovery Scanner

The AirPlay RTSP Device Discovery Scanner is a Metasploit auxiliary module designed to safely identify Apple AirPlay-compatible devices by sending a legitimate RTSP OPTIONS request to the default AirPlay service port 7000/TCP. The module performs non-intrusive service fingerprinting only and does...

WordPress Slider‑Future 1.0.5 Exposure Scanner

This Metasploit auxiliary module is designed to detect exposure of the WordPress Slider‑Future plugin REST endpoint at /wp-json/slider-future/v1/upload-image/. The module performs a non-intrusive HTTP request OPTIONS method to determine whether the endpoint is accessible. It does not upload files...

Exploit for Deserialization of Untrusted Data in Facebook React

$$\ $$\ $$$$$$$\ $$\ $$\ $$$$$$$$\ $$\ $...

Exploit for Deserialization of Untrusted Data in Facebook React

RSC Surface & Crash Detector This tool is a non-intrusive sec...

Leveraging Digital Twin-As-A-Service Towards Continuous and Automated Cybersecurity Certification

Traditional risk assessments rely on manual audits and system scans, often causing operational disruptions and leaving security gaps. To address these challenges, this work presents Security Digital Twin-as-a-Service SDT-aaS, a novel approach that leverages Digital Twin DT technology for automate...

Simplifying Azure Cloud Security with Snapshot-Based Scans

As organizations increasingly move to the cloud, securing these dynamic and transient environments has become a critical challenge for security teams. Cloud deployments are inherently more fluid than traditional infrastructure, with resources constantly being spun up, modified, or decommissioned...

The Rise of the Open Bug Bounty Project

Can you imagine launching a global bug bounty platform with almost 500,000 submissions and 13,000 researchers without consuming a cent from venture capitalists? If not, this success story is for you. The once skyrocketing bug bounty industry seems to be not in the best shape today. While prominen...

Watcher v1.5.8 - Web Security Testing Tool and Passive Vulnerability Scanner

Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...