polyshell

PolyShell: 一个 Bash/Batch/PowerShell 多语言脚本 这是什么 PolyShell 是一个在 Bash、Windows Batch 和 PowerShell 中同时有效的脚本（即一个多语言脚本）。 这使得 PolyShell 成为渗透测试的有用模板，因为它可以在大多数系统上执行，而无需针对特定目标的 payload。 PolyShell 还专门设计为可通过使用 USB Rubby Ducky、MalDuino 或类似设备的输入注入进行交付。 如何使用 作为独立脚本 1. 复制/重命名脚本，使其具有正确的文件扩展名（.sh、.bat 或 .ps1）。 2. 使...

Magento-Polyshell-RCE

Magento-Polys...

Magento Polyshell — The Latest Magento Threat (APSB25-94)

...

WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites

Cybersecurity researchers have discovered a new payment skimmer that uses WebRTC data channels as a means to receive payloads and exfiltrate data, effectively bypassing security controls. "Instead of the usual HTTP requests or image beacons, this malware uses WebRTC data channels to load its...

Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account Takeover

Sansec is warning of a critical security flaw in Magento's REST API that could allow unauthenticated attackers to upload arbitrary executables and achieve code execution and account takeover. The vulnerability has been codenamed PolyShell by Sansec owing to the fact that the attack hinges on...