bof

BOF BOF Boiboite Opener Framework — это фреймворк для тестирования реализаций полевых протоколов и устройств. Это библиотека Python 3.6+, предоставляющая средства для отправки, приёма, создания, разбора и манипулирования кадрами поддерживаемых протоколов. В настоящее время библиотека предоставляе...

ransomware_map

Orange Cyberdefense CERT - Карта экосистемы программ-вымогателей Последняя версия = 29 январь 2026 - ожидается Карта, визуализирующая взаимосвязи и хронологию, связанные с более чем 300 группами программ-вымогателей, за период с 2015 по 2026 год. Надеемся, это поможет! Команда World Watch - Globa...

graphcat

graphcat.py Script simple pour générer des graphiques et diagrammes à partir des fichiers potfile hashcat et john et ntds. Table des matières graphcat.py Table des matières Installation Aide Utilisation Formats Exemple de graphiques Installation git clone...

ocd-mindmaps

Добро пожаловать в интеллект-карту Orange Cyberdefense Сайт : https://orange-cyberdefense.github.io/ocd-mindmaps/...

haiti

HAITI HA sh I denT ifI er Qu'est-ce que c'est ? Un outil CLI pour identifier le type de hachage d'un hachage donné. Fonctionnalités 270+ types de hachage détectés Références Hashcat et John the Ripper Outil CLI et bibliothèque Hackable Références Page d'accueil / Documentation :...

rabid

RABID RA pid B ig I P D ecoder Что это такое CLI инструмент и библиотека, позволяющие просто декодировать все виды куки BigIP. Возможности Поддержка всех 4 форматов куки CLI инструмент и библиотека Расширяемый Ссылки Домашняя страница / Документация: https://orange-cyberdefense.github.io/rabid/...

CVE-repository

Репозиторий CVE OCD Содержимое данного репозитория CVE предоставляется исключительно в информационных целях. Уязвимости и связанная информация, описанные здесь, предоставляются «как есть» и не подлежат какой-либо поддержке. Используя этот репозиторий, вы подтверждаете и соглашаетесь с тем, что...

Badges, Bytes and Blackmail

Behind the scenes of law enforcement in cyber: what do we know about caught cybercriminals? What brought them in, where do they come from and what was their function in the crimescape? Introduction: One view on the scattered fight against cybercrime The growing sophistication and diversification ...

📄 Craft CMS Image Transform Pre-Authenticaton Remote Code Execution

This Metasploit module exploits an unauthenticated remote code execution vulnerability in Craft CMS versions 3.x, 4.x, and 5.x prior to 5.6.17 via the image transform endpoint. It injects a PHP Meterpreter payload into the Craft session, then triggers its execution by abusing the Yii behavior...

Facebook Ads Lead to Fake Websites Stealing Credit Card Information

Facebook users are the target of a scam e-commerce network that uses hundreds of fake websites to steal personal and financial data using brand impersonation and malvertising tricks. Recorded Future's Payment Fraud Intelligence team, which detected the campaign on April 17, 2024, has given it the...

Jorani Remote Code Execution Exploit

This Metasploit module exploits an unauthenticated remote code execution vulnerability in Jorani versions prior to 1.0.2. It abuses log poisoning and redirection bypass via header spoofing and then it uses path traversal to trigger the vulnerability. It has been tested on Jorani 1.0.0. This modul...

Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting

Exploit Title: Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting Date: 2020-04-16 Exploit Author: Dylan Garnaud & Benoit Malaboeuf - Pentesters from Orange Cyberdefense France Vendor Homepage:...

Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting Vulnerability

Exploit for java platform in category web applications Exploit Title: Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting Exploit Author: Dylan Garnaud & Benoit Malaboeuf - Pentesters from Orange Cyberdefense France Vendor Homepage:...

rConfig 3.9.4 - searchField Unauthenticated Root Remote Code Execution

rConfig 3.9.4 - searchField Unauthenticated Root Remote Code Execution Exploit Title: rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution Exploit Author: vikingfr Greetz : Orange Cyberdefense - team CSR-SO https://cyberdefense.orange.com Date: 2020-03-12 CVE-2019-19509 +...

Alfresco 5.2.4 - Persistent Cross-Site Scripting

Exploit Title: Alfresco 5.2.4 - Persistent Cross-Site Scripting Date: 2020-03-02 Exploit Author: Romain LOISEL & Alexandre ZANNI https://pwn.by/noraj - Pentesters from Orange Cyberdefense France Vendor Homepage: https://www.alfresco.com/ Software Link: https://www.alfresco.com/ecm-software Versio...

Alfresco 5.2.4 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Alfresco 5.2.4 - Persistent Cross-Site Scripting Exploit Author: Romain LOISEL & Alexandre ZANNI https://pwn.by/noraj - Pentesters from Orange Cyberdefense France Vendor Homepage: https://www.alfresco.com/ Software Link:...

Rabid - A CLI Tool And Library Allowing To Simply Decode All Kind Of BigIP Cookies

RA pid B ig I P D ecoder What it is A CLI tool and library allowing to simply decode all kind of BigIP cookies. Features Support all 4 cookie formats CLI tool & library Hackable References Homepage / Documentation: https://orange-cyberdefense.github.io/rabid/ Author Made by Alexandre ZANNI @noraj...

Wordpress Plugin Site Editor 1.1.1 - Local File Inclusion

Wordpress Plugin Site Editor 1.1.1 - Local File Inclusion Product: Site Editor Wordpress Plugin - https://wordpress.org/plugins/site-editor/ Vendor: Site Editor Tested version: 1.1.1 CVE ID: CVE-2018-7422 CVE description A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1...

Wordpress Site Editor 1.1.1 Plugin - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Product: Site Editor Wordpress Plugin - https://wordpress.org/plugins/site-editor/ Vendor: Site Editor Tested version: 1.1.1 CVE ID: CVE-2018-7422 CVE description A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for...

WordPress Site Editor 1.1.1 Local File Inclusion Vulnerability

Exploit for php platform in category web applications Product: Site Editor Wordpress Plugin - https://wordpress.org/plugins/site-editor/ Vendor: Site Editor Tested version: 1.1.1 CVE ID: CVE-2018-7422 CVE description A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for...