faraday-cli

Faraday on the terminal Use faraday directly from your favorite terminal faraday-cli is the official client that make automating your security workflows, easier. Before installing, we recommend creating and activating a Python virtual environment to avoid affecting your system Python packages. Fo...

kraken

Warning I have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement the server needs some work too. In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel...

c2-cloud

About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...

msploitego

msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...

msploitego

msploitego - Maltego用ペンテスティングスイート これはベータリリースです。不具合があればご報告ください。 新機能 新機能 Postgresクエリを介してMetasploitの複数のワークスペースをサポート ターゲットに対して多数の補助モジュールを実行するbashスクリプト。Metasploit DBを大幅に充実させます。 transform: Metasploitワークスペースの列挙 Niktoパーサー ファイルから ファイルからのEnum4linuxパーサー DNSスキャン バグ修正 nmapベースのtransformが偽陰性を返す問題 不正なパス...

Mortimer

Mortimer ネットワークフォレンジック系のデータとインテルを処理するためのスクリプト集で、主にpostgresデータベースに取り込みます。 NCC Group Plc によってオープンソースとして公開されています - http://www.nccgroup.com/ John Green（cirt at nccgroup dot com）向けに開発されました。 https://github.com/nccgroup/mortimer AGPLのもとで公開されています。詳細はLICENSEを参照してください。 broimport.py:...

PoC

PoC 存放概念验证漏洞利用程序和工具的代码仓库。 BMCRSCDRCE 针对 BMC Server Automation 的 RSCD 代理的未认证远程命令执行漏洞利用程序。该漏洞利用程序适用于受 CVE-2016-1542 影响（由 Nessus 检测）的服务器。 这现在是一个 Metasploit 模块，参见 exploits/multi/misc/bmcserverautomationrscdnshrce 该漏洞利用程序的开发过程是：让 Nessus 扫描一个 Python 脚本，该脚本记录数据包并将其/垃圾数据发送回...

AutoSploit

Dockerデプロイ手順 要約 docker-composeを使用する場合: git clone https://github.com/NullArray/AutoSploit.git cd Autosploit/Docker docker-compose run --rm autosploit Dockerのみを使用する場合: git clone https://github.com/NullArray/AutoSploit.git cd Autosploit/Docker...

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

postgres-bruteforcer

postgres-bruteforcer 关于 这个 Go 脚本从名为 creds.txt 的文件中读取用户名和密码列表，并针对 PostgreSQL 数据库进行测试。 该脚本接受 PostgreSQL 服务器的 IP 作为命令行参数，或接受包含 IP 的文本文件。 如果访问被授予，脚本会将此输出写入名为 pg-output.txt 的文件中。 如果 postgres 用户可用，这通常是一个超级用户，可以允许 RCE、LFI 或 SSRF。 如何安装 go install -v github.com/RandomRobbieBF/postgres-bruteforcer@latest...

DataEase_Postgresql_JDBC_Bypass-CVE-2025-49002

fofa语法：title="DataEase" poc: "POST /de2api/datasource/validate HTTP/1.1 Host: your-ip Accept-Encoding: gzip, deflate, br, zstd sec-ch-ua: ""Google Chrome"";v=""135"", ""Not-A.Brand"";v=""8"", ""Chromium"";v=""135"" User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like...

Rocky Linux 8.6 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_0148)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260148 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding...

Rocky Linux 8.8 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_0373)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260373 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding...

CentOS Linux 7 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1706700142)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1706700142 advisory. - In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a...

Rocky Linux 9.4 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1055)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261055 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.4. It addresses 3 CVEs: CVE-2024-10979, CVE-2024-10976,...

Rocky Linux 9.4 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_0565)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260565 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding...

Rocky Linux 9.2 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_1169)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261169 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-7348. Tenable has extracted the preceding...

Rocky Linux 9.2 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1059)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261059 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2024-10979, CVE-2024-10976,...

Rocky Linux 8.8 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0890)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260890 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 8.8. It addresses 9 CVEs: CVE-2023-39417, CVE-2023-5868,...

Rocky Linux 9.2 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_1176)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261176 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding...