24090 matches found
climber
Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...
Moodle-CVE-2019-3810
Moodle CVE-2019-3810 Moodle 3.6.2, 3.5.4, 3.4.7, 3.1.16 XSS PoC for Privilege Escalation Student to Admin. ใใใฏใ็งใ้ๅปใซๅญฆ่กๆฉ้ขใงใฎใใใใฌใผใทใงใณใในใไธญใซ็บ่ฆใใใใฐใฎไธใคใงใใๅฝๆใใใฎๅ็ดใชใใฐไธใคใงๅฎ่ณช็ใซ็ฎก็่ ใขใฏใปในใ็ใฟใMoodleใๅฎๅ จใซๅถๅพกใใใใจใใงใใพใใใ git historyใใใใใใใใซใใใฎใใฐใฏMoodleใฎๆงใใผใธใงใณ๏ผ2003ๅนด๏ผใใๅญๅจใใ2019ๅนดใซไฟฎๆญฃใใใพใใใ ใฟใคใ ใฉใคใณ: 2018ๅนด12ๆ - Moodleใซใใฐใๅ ฑๅ...
CVE-2025-29017
CVE-2025-29017 - Internet Banking System 2.0.0 ้่ฟๅคดๅไธไผ ๅฎ็ฐ่ฟ็จไปฃ็ ๆง่ก ๆ่ฟฐ Code Astro Internet Banking System 2.0.0 ไธญๅญๅจไธไธช่ฟ็จไปฃ็ ๆง่ก๏ผRCE๏ผๆผๆด๏ผ่ฏฅๆผๆดๆบไบ pagesviewclient.php ไธญ profilepic ๅๆฐ็ๆไปถไธไผ ้ช่ฏไธไธฅๆ ผใๆปๅป่ ๅฏไปฅ้่ฟไฟฎๆนไธไผ ่ฏทๆฑ็ป่ฟๅฎๅ จๆฃๆฅ๏ผไป่ๅฎ็ฐไปปๆไปฃ็ ๆง่กใ ๅๅฝฑๅ็ปไปถ pagesviewclient.php ไธญ็ profilepic ๅๆฐ ไธไผ ๅ่ฝๅ ่ฎธๆง่กๆถๆ PHP ๆไปถ ๅฉ็จๆญฅ้ชค 1...
CVE-2021-38603
CVE-2021-38603 ใใญใใฃใผใซ็ทจ้ใใผใธใฎๅใฆใผใถใผใฎๆ ๅ ฑ๏ผใใฃใผใซใใซใไฟๅญๅใฏใญในใตใคใในใฏใชใใใฃใณใฐ๏ผStored XSS๏ผใฎ่ๅผฑๆงใๅญๅจใใพใใ http:///core/admin/profil.php ่ๅผฑๆงใฎใใใใฃใผใซใ: ๆ ๅ ฑ๏ผ ไธๅบฆๆฟๅ ฅใใใใจใใใฎ็นๅฎใฎใฆใผใถใผใไฝๆใใไปปๆใฎใใผใธ/่จไบใ้ฒ่ฆงใใใใจใงXSSใใใชใฌใผใใใๅฏ่ฝๆงใใใใพใใ...
inject-assembly
inject-assembly - Execute .NET in an Existing Process This tool is an alternative to traditional fork and run execution for Cobalt Strike. The loader can be injected into any process, including the current Beacon. Long-running assemblies will continue to run and send output back to the Beacon,...
CVE-2019-0986
Security Research for FUN ใในใฆ Microsoft Windows OS ใซ็ฆ็นใๅฝใฆใฆใใพใ CVE-2019-0986 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0986 ไธ่จใฎ่ๅผฑๆงใๅ ฑๅใใ้ใซ Microsoft ใธ้ไฟกใใ PoC ใงใใ ใใฎ PoC ใฏ "User Profile Service" ProfSvc.dll ใๆช็จใใพใใ ไปปๆใฎใใฃใฌใฏใใชใซ่จญๅฎใใใๆจฉ้ใซ้ขไฟใชใใใใฎใใฃใฌใฏใใชๅ ใฎใในใฆใฎใใกใคใซใๅ้คใใพใ...
social_mapper
Social Mapper ์ด ๋๊ตฌ๋ ๋ ์ด์ ์ ๊ทน์ ์ผ๋ก ์ ์ง ๊ด๋ฆฌ๋์ง ์์ผ๋ฉฐ, ์ผ๋ถ ๋ถ๋ถ์ ์ฌ์ ํ ์๋ํ ์ ์์ต๋๋ค. ์ ๋ฐ์ดํธ๋ฅผ ์ํด Pull Request๋ฅผ ๋ฐ๊ฒ ์ต๋๋ค. ๊ฒฝ๊ณ : ํ์ด์ค๋ถ์ ์๋ฐฑ ๊ฑด์ ๊ฒ์ ํ ์ด๋ฅผ ๊ฐ์งํฉ๋๋ค. ์ผํ์ฉ ํ์ด์ค๋ถ ๊ณ์ ๋ง ์ฌ์ฉํ์ธ์. Jacob Wilkin Greenwolf์ด ๊ฐ๋ฐํ, ์๋ฉด ์ธ์์ ํตํด ํ๋กํ์ ์ฐ๊ด์ํค๋ ์์ ๋ฏธ๋์ด ๋งคํ ๋๊ตฌ์ ๋๋ค. Social Mapper๋ ๋๊ท๋ชจ๋ก ๋ค์ํ ์ฌ์ดํธ์์ ์๋ฉด ์ธ์์ ์ฌ์ฉํ์ฌ ์์ ๋ฏธ๋์ด ํ๋กํ์ ์ฐ๊ด์ํค๋ ์คํ ์์ค ์ธํ ๋ฆฌ์ ์ค ๋๊ตฌ์ ๋๋ค. ์๋ํ...
CVE-2020-12712
CVE-2020-12712: SOS JobScheduler ใซไฟๅญใใใใในใฏใผใใฎๅพฉๅท ใใฎใชใใธใใชๅ ใฎในใฏใชใใใไฝฟ็จใใใจใJobScheduler ใคใณในใฟใณในใฎ SFTP ่จญๅฎใใกใคใซใซไฟๅญใใใฆใใใในใฏใผใใๅพฉๅทใงใใพใใ ่ชฌๆ SOS JobScheduler ใฏใใฆใผใถใผใ Web ใคใณใฟใผใใงใผในใไปใใฆใกใณใใใณในในใฏใชใใใๅผใณๅบใใใใใซใใใชใขใผใใทในใใ ็ฎก็ใใผใซใงใใใใฎใใผใซใฏใSFTP ใไฝฟ็จใใฆใชใขใผใใทในใใ ใซใกใณใใใณในในใฏใชใใใ้ ็ฝฎใใพใใใฆใผใถใผใฏใใใใฎๆฅ็ถใฎใใญใใกใคใซใไฟๅญใงใใใใฎ้ใซ SFTP...
EUVD-2026-87248
A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped...
CVE-2026-91838
A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped...
geacon
Geacon Go๋ฅผ ์ฌ์ฉํ์ฌ CobaltStrike์ Beacon ๊ตฌํ ์ด ํ๋ก์ ํธ๋ ํ๋กํ ์ฝ ๋ถ์ ๋ฐ ๋ฆฌ๋ฒ์ค ์์ง๋์ด๋ง ํ์ต ๋ชฉ์ ์ผ๋ก๋ง ์ฌ์ฉ๋๋ฉฐ, ๋๊ตฐ๊ฐ์ ๊ถ๋ฆฌ๋ฅผ ์นจํดํ ๊ฒฝ์ฐ ํ๋ก์ ํธ๋ฅผ ์ญ์ ํ ์ ์๋๋ก ์ฐ๋ฝํด ์ฃผ์๊ธฐ ๋ฐ๋๋๋ค. ๋ง์ง๋ง์ผ๋ก, ๋ถ๋ฒ์ ์ผ๋ก ์ฌ์ฉํ์ง ๋ง์ญ์์ค ์ฌ์ฉ ๋ฐฉ๋ฒ 1. ํ์๋ฒ๋ฅผ ์ค์ ํ๊ณ HTTP ๋ฆฌ์ค๋๋ฅผ ์์ํ๋ฉด, ํ์๋ฒ๊ฐ .cobaltstrike.beaconkeys ํ์ผ์ ์์ฑํฉ๋๋ค. 2. Jetbrains Idea๋ก BeaconTool์ ์ปดํ์ผํ๊ณ , java -jar BeaconTool.jar ๋ช ๋ น์ด๋ฅผ...
CVE-2022-1051
CVE-2022-1051 WPQA 5.2 - Subscriber+ ๆจฉ้ใงใใญใใฃใผใซใใฃใผใซใใไปใใๆ ผ็ดๅใฏใญในใตใคใในใฏใชใใใฃใณใฐ ่ชฌๆ Discy ใใใณ Himer ใใผใใฎใณใณใใใชใณใใฉใฐใคใณใจใใฆไฝฟ็จใใใใใฎใใฉใฐใคใณใฏใใใญใใฃใผใซใใผใธใงๅบๅใใ้ใซใๅธๅบ็บๆใ้ป่ฉฑ็ชๅทใใใญใใฃใผใซ่ช่จผๆ ๅ ฑใฎๅใใฃใผใซใใใตใใฟใคใบใใใณใจในใฑใผใใใชใใใใ่ช่จผๆธใฟใฎไปปๆใฎใฆใผใถใผใใฏใญในใตใคใในใฏใชใใใฃใณใฐๆปๆใๅฎ่กใงใใพใใ ๆฆๅฟตๅฎ่จผ ใใญใใฃใผใซใ็ทจ้ใใใจในใฑใผใใใใฆใใชใใใฃใผใซใใฎใใใใใซๆฌกใฎใใคใญใผใใ่ฟฝๅ ใใฆใใ ใใใ...
CitrixADC-CVE-2020-8300
Citrix ADC NITRO APIใไฝฟ็จใใฆใCVE-2020-8300ใซๅฏพใใฆ่ๅผฑใชCitrix ADC SAMLใขใฏใทใงใณใพใใฏSAML iDPใใญใใกใคใซ่จญๅฎใๆคๅบใใ ไฝฟ็จไพ & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" ใใใ่ชฐใใฎๅฝนใซ็ซใคใชใใๆฌกใฎๆฉ่ฝใ่ฟฝๅ ใใฆใใใซ้็บใใพใ๏ผ SAMLใขใฏใทใงใณใจSAML iDPใใญใใกใคใซใฎใใคใณใใฃใณใฐใ็นๅฎใใไฝฟ็จใใใฆใใใใฉใใใใฉใใงไฝฟ็จใใใฆใใใใ็ขบ่ช...
CVE-2024-24386
VitalPBX - CVE-2024-24386 ่ๅผฑๆงใฎใฟใคใใซ: ใณใใณใใคใณใธใงใฏใทใงใณ ไฝๆ่ : Erick Duarte ๅฏพ่ฑกใใผใธใงใณ: 3.2.5-2 ใใฎ่ๅผฑๆงใฏใTask Manager ใขใธใฅใผใซใ Cron Profile ใจ็ตใฟๅใใใฆไฝฟ็จใใ้ใซ็บ็ใใพใใใใฎ่ๅผฑๆงใๆช็จใใใซใฏใOS ๅ ใฎ็นๅฎใฎใใฉใซใใซในใฏใชใใใ้ ็ฝฎใใๅฟ ่ฆใใใใพใใใใฎใใฉใซใใฏ "/var/lib/vitalpbx/scripts" ใงใใ ใใใงใ่ๅณๆฌไฝใง Burp ใไฝฟใฃใฆไฝใใตใผใใผใซ้ไฟกใใใฆใใใใๅๆใๅงใใพใใใใใฎใใใซใๆฏๅๅฎ่กใใใ Cron Profile...
profilehound
root@kitploit: / \ / / / / / / / / / // / / / // / / / // / / / / / / / / / / / // / / / / / / // / // / / / / // / // // // ///// ///,// //,/ ProfileHound ProfileHound ใฏใๆจฉ้ๆๆ ผๅพใฎใใผใซใงใใใใใกใคใณใฆใผใถใผใใญใใกใคใซใใใทใณไธใง็นๅฎใใใใจใงใใฌใใใใผใใณใฐใฎ็ฎๆจ้ๆใๆฏๆดใใพใใBloodHound ใฎ OpenGraph ๅฝขๅผใๅฉ็จใใฆใHasUserProfile...
EvilSelenium
EvilSelenium EvilSelenium์ Selenium์ ๋ฌด๊ธฐํํ์ฌ Chromium ๊ธฐ๋ฐ ๋ธ๋ผ์ฐ์ ๋ฅผ ์ ์ฉํ๋ ์๋ก์ด ํ๋ก์ ํธ์ ๋๋ค. ํ์ฌ ์ ๊ณต๋๋ ๊ธฐ๋ฅ์ ๋ค์๊ณผ ๊ฐ์ต๋๋ค: ์ ์ฅ๋ ์๊ฒฉ ์ฆ๋ช ํ์ทจ ์๋ ์์ฑ ์ด์ฉ ์ฟ ํค ํ์ทจ ์น์ฌ์ดํธ ์คํฌ๋ฆฐ์ท ์ดฌ์ Gmail/O365 ์ด๋ฉ์ผ ๋คํ WhatsApp ๋ฉ์์ง ๋คํ ํ์ผ ๋ค์ด๋ก๋ ๋ฐ ์ ์ถ GitHub์ SSH ํค ์ถ๊ฐ ๋๋ ๊ธฐ์กด ๊ธฐ๋ฅ์ ํ์ฅํ์ฌ ํ์์ ๋ง๊ฒ ์ฌ์ฉํ ์ ์์ต๋๋ค ์: ์ฌ์ฉ์์ GDrive/OneDrive์์ ํ์ผ ๋ค์ด๋ก๋. ์ฐธ๊ณ 1. ์ด ๋๊ตฌ๋ฅผ ์คํํ๋ฉด ์ฌ์ฉ์์...
CVE-2021-24545
CVE-2021-24545 WP HTML Author Bio alert/XSS/ ใใฎๅพใใใฎไฝๆ่ ใไฝๆใใๆ็จฟใ่กจ็คบใใฆXSSใใใชใฌใผใใพใใ ๅ็ปPOC: https://www.youtube.com/watch?v=fhzJZ5hSI-g...
auto-cve-2022-44268.sh
auto-cve-2022-44268 CVE-2022-44268 ImageMagickไปปๆใใกใคใซ่ชญใฟๅใใฎๆช็จใ่ชๅๅ Original finding: https://www.metabaseq.com/imagemagick-zero-days/ PoC Repository: https://github.com/duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC ่ชฌๆ ImageMagickใฏใprofileใใจใใใใญในใๆๅญๅใ ใใกใคใซๅใจใใฆ่งฃ้ใใใใฎๅ ๅฎนใ็ใฎใใญใใกใคใซใจใใฆ่ชญใฟ่พผใฟ...
ff-password-exporter
FF Password Exporter It can be difficult to export your passwords from Firefox. Since version 57 of Firefox Quantum existing password export addons no longer work. Mozilla provides no other official alternatives. FF Password Exporter makes it quick and easy to export all of your passwords from...
SourcePoint
SourcePoint SourcePoint์ Cobalt Strike C2๋ฅผ ์ํ ๋คํ์ฑ C2 ํ๋กํ ์์ฑ๊ธฐ๋ก, Go๋ก ์์ฑ๋์์ต๋๋ค. SourcePoint๋ฅผ ์ฌ์ฉํ๋ฉด ๊ณ ์ ํ C2 ํ๋กํ์ ์ฆ์์์ ์์ฑํ ์ ์์ด ์์ ์งํIoC๋ฅผ ์ค์ด๊ณ ์ด์์๊ฐ ์ต์ํ์ ๋ ธ๋ ฅ์ผ๋ก ๋ณต์กํ ํ๋กํ์ ๊ตฌ์ถํ ์ ์์ต๋๋ค. ์ด๋ ๋ฌธ์ ๋ฐ ํจ์น ๋ ธํธ๋ฅผ ๊ด๋ฒ์ํ๊ฒ ๊ฒํ ํ์ฌ ํต์ฌ ๊ธฐ๋ฅ๊ณผ ์์ ๊ฐ๋ฅํ ํน์ง์ ์๋ณํจ์ผ๋ก์จ ์ด๋ฃจ์ด์ก์ต๋๋ค. SourcePoint๋ C2 ํ๋์ ํ์งํ๊ธฐ ์ด๋ ต๊ฒ ๋ง๋๋ ๋ฌธ์ ๋ฅผ ํด๊ฒฐํ๊ธฐ ์ํด ์ค๊ณ๋์์ผ๋ฉฐ, ์ ์ฑ IoC์์ ์์ฌ์ค๋ฌ์ด...