ShareHound

ShareHound: BloodHound OpenGraph を使用したネットワーク共有の権限マッピング ネットワーク共有のアクセス権限を BloodHound OpenGraph にマッピングするためのツールです。 関連ブログ記事を読む: https://specterops.io/blog/2025/10/30/sharehound-an-opengraph-collector-for-network-shares/ 2つの実装 このリポジトリには ShareHound の2つの実装が含まれています。どちらも同じ目標（SMB共有のアクセス許可から BloodHound...

Dop2Mop

Dop2Mop BloodHound를 위한 개념 증명 OpenGraph 수집기로, DevOps에서 MLOps 인프라로 이어지는 공격 경로를 매핑합니다. Brett Hawkins@h4wkst3r의 Pipelines of Privilege: Attack Paths from DevOps to MLOps Infrastructure를 기반으로 합니다. 목차 감사의 말 개요 지원 플랫폼 매핑된 신뢰 경계 설치 선택적 종속성 빠른 시작 데모 데이터 생성 BloodHound로 수집 설정 설정 파일 자격 증명 검증 CLI 참조 명령 개요 전역 ...

BloodSOCer

BloodSOCer BloodSOCer は、複数のソース（Mitre ATT&CK、Sigma rules、Atomic Red Team）から脅威インテリジェンスデータを集約し、OpenGraph 形式で BloodHound に取り込むための JSON ファイルを生成する Python 自動化ツールです。BloodSOCer は、設定に API トークンが定義されている場合、ファイルを BloodHound にアップロードし、カスタムオブジェクトのアイコンを設定することもできます。セキュリティアナリストは、あらゆる角度からデータを可視化でき、すぐに使い始めるための Cypher...

ogi-transforms

OGI Transform Registry OGI를 위한 커뮤니티 변환transform 모음입니다. OGI는 오픈소스 OSINT 및 링크 분석 도구입니다. 작동 방식 transforms/ 아래의 각 디렉터리는 독립적으로 설치 가능한 변환입니다. OGI CLI와 Transform Hub UI는 index.json 각 병합 시 자동 생성됨을 읽어 사용 가능한 변환을 탐색합니다. 변환 설치 OGI 백엔드 프로젝트의 CLI를 사용하세요: root@kitploit: cd backend uv sync uv run ogi transform...

ogi

OpenGraph Intel OGI 오픈 소스 시각적 링크 분석 및 OSINT 프레임워크. 무료, 자체 호스팅 가능, 커뮤니티 주도. 기능 • 스크린샷 • 빠른 시작 • Docker • Transform Hub • 아키텍처 • 기여하기 주의: 이 프로젝트는 활발히 발전 중입니다. 견고한 핵심 기능과 테스트 범위를 갖추고 있으며, 각 릴리스마다 문서, 보안 강화, 기능 깊이를 계속 개선하고 있습니다. 기여, 버그 신고, 피드백을 환영합니다. 기능 시각적 그래프 조사 — 엔티티 드래그 앤 드롭, 대화형으로 연결 탐색 20개 이상의...

GitHound

GitHound 概要 GitHound は、GitHub 用の BloodHound OpenGraph コレクタであり、組織の構造と権限をナビゲート可能な攻撃経路グラフにマッピングするように設計されています。具体的には次のとおりです。 主要な GitHub エンティティをモデル化 GHOrganization : GitHub 組織のメタデータ GHUser : 組織内の個々のユーザーアカウント GHTeam : 共有アクセスのためにユーザーをグループ化するチーム GHRepository : 組織内のリポジトリ GHBranch : 各リポジトリの名前付きブランチ GHOrgRol...

AD-PathFinder

ADPathFinder ADPathFinder 是一款面向渗透测试人员和红队成员的攻击映射工具。它分析 SharpHound 数据，并将其与 OpenGraph 插件统一，以从低权限用户和计算机出发，揭示通往域管理员和域控制器等高价值目标的攻击路径。原生支持 MSSQLHound 和 ConfigManBearPig，将覆盖范围扩展至 AD、ADCS、SCCM 和 MSSQL。 博客： BloodHound CE 中的 OpenGraph 攻击路径映射 跳至： 快速开始 · 覆盖范围 · 工作原理 · 报告 · 配置 · 贡献者 Coverage 领域| 示例 ---|--- 核心...

BloodHound v9.7.0-rc1

BloodHound is a monolithic web application composed of an embedded React frontend with Sigma.js and a Go based REST API backend. It is deployed with a Postgresql application database and a Neo4j graph database, and is fed by the SharpHound and AzureHound data collectors. BloodHound leverages grap...

CVE-2026-31941

Chamilo LMS prior to versions 1.11.38 and 2.0.0-RC.3 is affected by a Server-Side Request Forgery (SSRF) in the Social Wall feature. The read_url_with_open_graph endpoint accepts a user-supplied URL via the social_wall_new_msg_main POST parameter and performs two server-side HTTP requests without...

CVE-2017-18882

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data...

CVE-2019-20880

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...

EUVD-2017-9972

Malware in sbrugna...

EUVD-2017-8262

Malware in sbrugna...

EUVD-2019-11417

Malware in sbrugna...

EUVD-2023-57647

Malicious code in bioql PyPI...

CVE-2023-5330

Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted request to the /api/v4/opengraph filling the cache and turning the server unavailable...

BIT-MATTERMOST-2023-5330

Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted request to the /api/v4/opengraph filling the cache and turning the server unavailable...

CVE-2023-48728

A cross-site scripting xss vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this...

Denial Of Service Attack

Mattermost is vulnerable to Denial of Service DoS. The vulnerability was due to the OpenGraph functionality in the server/channels/api4/openGraph.go file of the Mattermost server.This allows an attacker to exploit this by sending numerous requests to the /api/v4/opengraph endpoint, causing...

CVE-2023-5330

Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted request to the /api/v4/opengraph filling the cache and turning the server unavailable...