ocd-mindmaps

bem-vindo ao mapa mental da Orange Cyberdefense Site : https://orange-cyberdefense.github.io/ocd-mindmaps/...

CVE-repository

OCD CVE-Repository Die in diesem CVE-Repository bereitgestellten Inhalte dienen ausschließlich zu Informationszwecken. Die hier dokumentierten Schwachstellen und zugehörigen Informationen werden „wie besehen“ bereitgestellt und unterliegen keinem Support. Durch die Nutzung dieses Repositorys...

bof

BOF BOF Boiboite Opener Framework ist ein Test-Framework für Feldprotokoll-Implementierungen und -Geräte. Es ist eine Python-3.6+-Bibliothek, die Mittel bereitstellt, um Frames der unterstützten Protokolle zu senden, zu empfangen, zu erstellen, zu parsen und zu manipulieren. Die Bibliothek bietet...

graphcat

graphcat.py Einfaches Skript zum Erstellen von Graphen und Diagrammen für hashcat und john potfile und ntds. Table of Content graphcat.py Table of Content Install Helper Usage Format Charts example Install root@kitploit: git clone https://github.com/Orange-Cyberdefense/graphcat cd graphcat pip...

ransomware_map

Orange Cyberdefense CERT - Mappa dell'Ecosistema Ransomware Ultima versione = 29 Gennaio 2026 - in arrivo Mappa che visualizza le relazioni e le timeline associate a oltre 300 gruppi ransomware, tra il 2015 e il 2026. Speriamo che sia utile! Team World Watch - CERT Globale Orange Cyberdefense Tut...

haiti

HAITI HA sh I denT ifI er Cos'è? Uno strumento CLI per identificare il tipo di hash di un dato hash. Caratteristiche Oltre 270 tipi di hash rilevati Riferimenti a Hashcat e John the Ripper Strumento CLI e libreria Hackable Riferimenti Homepage / Documentazione:...

rabid

RABID RA pid B ig I P D ecoder Cos'è Uno strumento CLI e una libreria che permettono di decodificare semplicemente tutti i tipi di cookie BigIP. Caratteristiche Supporta tutti e 4 i formati di cookie Strumento CLI e libreria Hackable Riferimenti Homepage / Documentazione:...

Badges, Bytes and Blackmail

Behind the scenes of law enforcement in cyber: what do we know about caught cybercriminals? What brought them in, where do they come from and what was their function in the crimescape? Introduction: One view on the scattered fight against cybercrime The growing sophistication and diversification ...

📄 Craft CMS Image Transform Pre-Authenticaton Remote Code Execution

This Metasploit module exploits an unauthenticated remote code execution vulnerability in Craft CMS versions 3.x, 4.x, and 5.x prior to 5.6.17 via the image transform endpoint. It injects a PHP Meterpreter payload into the Craft session, then triggers its execution by abusing the Yii behavior...

Facebook Ads Lead to Fake Websites Stealing Credit Card Information

Facebook users are the target of a scam e-commerce network that uses hundreds of fake websites to steal personal and financial data using brand impersonation and malvertising tricks. Recorded Future's Payment Fraud Intelligence team, which detected the campaign on April 17, 2024, has given it the...

Jorani Remote Code Execution Exploit

This Metasploit module exploits an unauthenticated remote code execution vulnerability in Jorani versions prior to 1.0.2. It abuses log poisoning and redirection bypass via header spoofing and then it uses path traversal to trigger the vulnerability. It has been tested on Jorani 1.0.0. This modul...

Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting

Exploit Title: Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting Date: 2020-04-16 Exploit Author: Dylan Garnaud & Benoit Malaboeuf - Pentesters from Orange Cyberdefense France Vendor Homepage:...

Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting Vulnerability

Exploit for java platform in category web applications Exploit Title: Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting Exploit Author: Dylan Garnaud & Benoit Malaboeuf - Pentesters from Orange Cyberdefense France Vendor Homepage:...

rConfig 3.9.4 - searchField Unauthenticated Root Remote Code Execution

rConfig 3.9.4 - searchField Unauthenticated Root Remote Code Execution Exploit Title: rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution Exploit Author: vikingfr Greetz : Orange Cyberdefense - team CSR-SO https://cyberdefense.orange.com Date: 2020-03-12 CVE-2019-19509 +...

Alfresco 5.2.4 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Alfresco 5.2.4 - Persistent Cross-Site Scripting Exploit Author: Romain LOISEL & Alexandre ZANNI https://pwn.by/noraj - Pentesters from Orange Cyberdefense France Vendor Homepage: https://www.alfresco.com/ Software Link:...

Alfresco 5.2.4 - Persistent Cross-Site Scripting

Exploit Title: Alfresco 5.2.4 - Persistent Cross-Site Scripting Date: 2020-03-02 Exploit Author: Romain LOISEL & Alexandre ZANNI https://pwn.by/noraj - Pentesters from Orange Cyberdefense France Vendor Homepage: https://www.alfresco.com/ Software Link: https://www.alfresco.com/ecm-software Versio...

Rabid - A CLI Tool And Library Allowing To Simply Decode All Kind Of BigIP Cookies

RA pid B ig I P D ecoder What it is A CLI tool and library allowing to simply decode all kind of BigIP cookies. Features Support all 4 cookie formats CLI tool & library Hackable References Homepage / Documentation: https://orange-cyberdefense.github.io/rabid/ Author Made by Alexandre ZANNI @noraj...

Wordpress Plugin Site Editor 1.1.1 - Local File Inclusion

Wordpress Plugin Site Editor 1.1.1 - Local File Inclusion Product: Site Editor Wordpress Plugin - https://wordpress.org/plugins/site-editor/ Vendor: Site Editor Tested version: 1.1.1 CVE ID: CVE-2018-7422 CVE description A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1...

Wordpress Site Editor 1.1.1 Plugin - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Product: Site Editor Wordpress Plugin - https://wordpress.org/plugins/site-editor/ Vendor: Site Editor Tested version: 1.1.1 CVE ID: CVE-2018-7422 CVE description A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for...

WordPress Site Editor 1.1.1 Local File Inclusion Vulnerability

Exploit for php platform in category web applications Product: Site Editor Wordpress Plugin - https://wordpress.org/plugins/site-editor/ Vendor: Site Editor Tested version: 1.1.1 CVE ID: CVE-2018-7422 CVE description A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for...