RsaCtfTool

RsaCtfTool 약한 공개키로부터 데이터를 복호화하고 개인키를 복구하는 RSA 다중 공격 도구입니다. 개요 이 도구는 약한 공개키로부터 데이터를 복호화하고 해당 개인키를 복구하도록 설계된 유틸리티입니다. RSA 암호 해독을 위한 다양한 공격 옵션을 제공합니다. RSA의 보안은 정수 인수분해의 복잡성에 의존합니다. 이 프로젝트는 여러 인수분해 알고리즘을 결합하여 복호화 기능을 향상시킵니다. 참고: 이 도구는 주로 교육 목적 으로 사용됩니다. 모든 키를 합리적인 시간 내에 깨뜨릴 수 있는 것은 아닙니다. 이 도구는 RSA 교과...

CVE-2020-15492

CVE-2020-15492 此漏洞由我本人发现并披露。本仓库将包含安全公告、漏洞利用代码以及存在漏洞的软件安装程序，供您实验此漏洞。 本仓库仅用于教育目的。 链接 安全公告 SYSS-2020-028 SySS 博客文章 Exploit-DB 上的漏洞利用 厂商通知 MITRE 条目 NVD 条目...

cve-2019-13720

cve-2019-13720 CVE-2019-13720 エクスプロイトツール 2019年11月05日: POC公開: https://www.youtube.com/watch?v=0HdRJImwYww 2019年11月06日: ツール公開。 [email protected]...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

CVE-2024-23334-PoC

CVE-2024-23334-PoC Python AioHTTP 库（版本 = 3.9.1）中路径遍历漏洞的概念验证 请确保找到一个有效的公开目录，例如 "/static/" 或 "/assets/" 找到后，进入 main.py 并将 /static/ 字符串替换为你找到的目录。...

CVE-2022-36804-ReverseShell

원본 프로젝트 https://github.com/BenHays142/CVE-2022-36804-PoC-Exploit CVE-2022-36804-PoC-Exploit CVE-2022-36804 BitBucket Critical Command Injection에 대한 다소 신뢰할 수 있는 PoC 익스플로잇입니다. 이 공격은 일반적으로 공개 저장소가 활성화되어 있어야 하지만, 세션 쿠키도 이 익스플로잇과 호환됩니다. 참고: 이 익스플로잇에는 자동 저장소 감지 기능이 포함되어 있어 직접 공개 저장소를 수동으로 찾고 싶지 않은 경우...

CVE-2020-1472

CVE-2020-1472 CVE-2020-1472 Fonti dell'exploit: https://github.com/dirkjanm/CVE-2020-1472 https://github.com/SecuraBV/CVE-2020-1472...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

jwt-key-confusion-poc

JWT Key Confusion PoC CVE-2015-9235 Scritto per le sfide Hack The Box - Under Construction e Secret Entrambi gli script inclusi eseguono un attacco di Key Confusion sui Java Web Token CVE-2015-9235. Per eseguire l'attacco è necessario che l'attaccante conosca la chiave pubblica che il server...

log4j-CVE-2021-44228-Public-IoCs

log4j log4shell CVE-2021-44228 Elenco pubblico di IoCs IoCs pubblici su log4j CVE-2021-44228 log4shell basati su Twitter e altri social network pull request accettate, rimuovo i duplicati automaticamente IP https://github.com/Sh0ckFR/log4j-CVE-2021-44228-Public-IoCs/raw/main/ips.txt Domini di...

CVE-2025-46701-o

CVE-2025-46701 Tomcat CVE, Identificato da gregk4sec PUBBLICO PoC è stato rilasciato il 4 giugno 2025...

richkit

Richkit Richkit is a python3 package that provides tools taking a domain name as input, and returns addtional information on that domain. It can be an analysis of the domain itself, looked up from data-bases, retrieved from other services, or some combination thereof. The purpose of richkit is to...

LazyMesh

LazyMesh Sistema di routing mesh che supporta l'uso di un proxy OpenDHT come backend, in modo che i nodi possano comunicare direttamente via internet. Molto presto pre-alpha, proof of concept, potrebbe non funzionare effettivamente, ecc. È pensato sia per casi d'uso hobbistici/HAM, sia per il più...

nccfsas

Introduzione Questo repository contiene informazioni rilasciate pubblicamente dal team Full Spectrum Attack Simulation FSAS di NCC Group...

KeyCloak - Information Exposure

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients like client secret without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this...

Zimbra Collaboration - Unrestricted File Upload

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting

PKP Open Journal Systems 2.4.8 to 3.3 contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary code via the X-Forwarded-Host Header. id: CVE-2022-24181 info: name: PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting author: lucasljm2001,ekrause severit...

Blinko <= 1.8.3 - User Information Leak

Blinko = 1.8.4 contains an information disclosure caused by a publicly accessible endpoint exposing user information including usernames, roles, and account creation dates, letting remote attackers access sensitive user data, exploit requires no special privileges. id: CVE-2026-23486 info: name:...

Emby Server - Authentication Bypass

Emby Server is a user-installable home media server which stores and organizes a user's media files of virtually any format and makes them available for viewing at home and abroad on a broad range of client devices. This vulnerability may allow administrative access to an Emby Server system,...

YMC Filter WordPress - Unauthenticated Post Disclosure

YMC Filter WordPress plugin 3.11.3 contains a broken access control vulnerability caused by improper authorization and lack of validation in a REST API endpoint, letting unauthenticated attackers retrieve private and non-public post content, exploit requires no authentication. id: CVE-2026-10823...