exrex

EXREX Irregular methods for regular expressions. Exrex is a command line tool and python module that generates all - or random - matching strings to a given regular expression and more. It's pure python, without external dependencies. There are regular expressions with infinite matching strings...

CVE-2023-46017-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46017-Code-Projects血库1.0 SQL注入漏洞 漏洞利用作者：ersinerenler 厂商主页 https://code-projects.org/blood-bank-in-php-with-source-code 软件链接 https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip 概述...

httpstat

httpstat httpstat visualizes curl1 statistics in a way of beauty and clarity. It is a single file🌟 Python script that has no dependency👏 and is compatible with Python 3🍻. Features Beautiful terminal output — timing breakdown of DNS, TCP, TLS, server processing, and content transfer Structured JSO...

cybersecurity-projects

研究全景 研究领域...

dump

Dump 本仓库包含已死亡/未完成的项目、小脚本或那些不值得单独建仓的东西。 目录 git-gat：用于发现私有git仓库的后利用脚本 Infinity（已停更）：查找任意Facebook用户的电话号码 json2paths：将JSON键转换为路径，用于发现隐藏端点 jsonpy：高效的JSON回调漏洞扫描器 reverse-domain：查找与给定域名托管在同一服务器上的域名 reverse-whois：查找具有给定whois信息的域名 uro：从URL列表中删除重复/无趣的URL tweetad（已停更）：一个用于从Twitter转储推广话题标签的小脚本...

reconmap

Reconmap Pentesting Management, Automation and Reporting Platform Reconmap is an open source vulnerability assessment and penetration testing platform designed to support security professionals throughout the entire engagement lifecycle. It enables penetration testers and InfoSec teams to...

CVE-2023-46019-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46019-Code-Projects-Blood-Bank-1.0-反射型クロスサイトスクリプティング脆弱性 エクスプロイト作者: ersinerenler ベンダーホームページ https://code-projects.org/blood-bank-in-php-with-source-code ソフトウェアリンク https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip 概要 Code-Projects Blood Bank V1.0 は、abs.php...

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-反射型跨站脚本漏洞 漏洞利用作者：ersinerenler 厂商主页 https://code-projects.org/blood-bank-in-php-with-source-code 软件链接 https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip 概述 Code-Projects Blood Bank V1.0 存在一个严重的安全漏洞，即通过 abs.php 文件中的 'search'...

Cybersecurity-Projects

网络安全项目 🐉 70个网络安全项目、认证路线图与资源 由 CertGames 支持实现...

vexhub

VEX Hub es un repositorio centralizado que recopila y gestiona documentos de Vulnerability Exploitability eXchange VEX de diversos proyectos de software de código abierto. Sirve como un recurso integral de información sobre vulnerabilidades, ayudando a los usuarios y a las herramientas de segurid...

scorecard

OpenSSF Scorecard...

CVE-2021-30005-POC

CVE-2021-30005-POC CVE-2021-30005 的 PoC 详情 该漏洞在于，PyCharm 在首次打开项目时会自动激活项目中发现的虚拟环境。这允许攻击者创建一个包含恶意虚拟环境的仓库，该虚拟环境在激活脚本（例如 venv/bin/activate）中包含任意命令，当在 PyCharm 中下载并打开该仓库时，这些命令会被执行。 注入的命令可以在此处找到。 复现步骤 克隆仓库： root@kitploit: git clone https://github.com/atorralba/CVE-2021-30005-POC 然后在一个存在漏洞的 PyCharm...

TekDefense

TekDefense TekDefense 的开放开发项目 所有项目均采用 MIT 许可证模型，这基本上意味着，你可以随意使用这些项目中的任何一个，但如果因使用或修改这些项目而发生任何损失或损害，请不要让我承担责任。 请访问 www.TekDefense.com 获取有关 InfoSec 主题的文章和教学视频 在 Twitter 上关注 @TekDefense。 邮箱：[email protected] 谢谢， -Ian...

Code-Projects School Fees Payment System 1.0 - SQL Injection

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

WP Projects Portfolio <= 3.0 - Cross-Site Scripting

WP Projects Portfolio with Client Testimonials WordPress plugin = 3.0 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13114...

CVE-2026-19478-PoC

CVE-2026-19478 PoC GitLab GraphQL 层中的未认证远程代码注入 ，允许攻击者通过单个精心构造的查询修改或删除公共项目和用户数据 。无需认证，无需用户交互，无需特殊权限。 | ---|--- 严重性| 9.4 严重 — AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H CWE| CWE-94（对代码生成的控制不当 / 代码注入） 影响版本| GitLab CE/EE = 18.2, 18.11.11 · 19.0.8 · 19.1.6 · 19.2.4 修复版本| 18.11.11, 19.0.8, 19.1.6, 19.2.4 披露时间...

prithvi

Prithvi A Report Generation Tool for Security Assessment Usage This project of ours could be used for report generation and its very easy to use. It includes following features 1. We can add Owasp Types and recommendation with details. 2. We can add Multiple Projects and work on it separately. 3...

CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability

CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability 漏洞作者：ersinerenler 厂商主页 https://code-projects.org/blood-bank-in-php-with-source-code 软件链接 https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip 概述 Code-Projects Blood Bank V1.0...

creepy-plugins

creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...

CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability 漏洞利用作者：ersinerenler 厂商主页 https://code-projects.org/blood-bank-in-php-with-source-code 软件链接 https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip 概述 Code-Projects Blood Bank V1.0...