maalik

Maalik 네트워크 피벗 및 사후 침투 프레임워크. 기능 콘솔 기능 새 세션 발생 시 데스크톱 알림. 온라인 세션을 쉽게 종료. Maalik 클라이언트 Fhdawn을 쉽게 빌드. settings.ini 에서 설정값 구성 가능. 루트 셸. 멀티스레드, 여러 세션 획득 가능. Maalik은 사용하기 매우 쉽습니다. Fhdawn 기능 Fhdawn은 maalik 클라이언트입니다. 기능| 설명 ---|--- 은밀성| 백그라운드에서 실행되며, 숨겨진 평문 파일만 디스크에 기록합니다. 자동 관리자 권한 획득| Windows Defende...

unhook-bof

これは、DLLをリフレッシュしてフックを除去するためのBeacon Object Fileです。コードはCylanceのUniversal Unhooking研究に基づいています: https://blogs.blackberry.com/en/2017/02/universal-unhooking-blinding-security-software 使用方法: Cobalt Strike - Script Manager から unhook.cna を Cobalt Strike に読み込みます Beacon から 'unhook' を実行します ビルド方法: x86: Visual...

CVE-2020-5421

Spring 보안 취약점 CVE-2020-5421 재현 취약점 개요 CVE-2020-5421은 jsessionid 경로 매개변수를 통해 RFD 공격을 방어하는 보호를 우회할 수 있습니다. 이전의 RFD 방어는 CVE-2015-5211에 대응하여 추가되었습니다. RFD란 무엇인가 반사형 파일 다운로드 취약점RFD은 신뢰할 수 있는 도메인에서 파일을 가상으로 다운로드하게 하여 공격자가 피해자 컴퓨터에 대한 완전한 접근 권한을 얻을 수 있는 공격 기술입니다. 영향받는 버전 Spring Framework 5.2.0 - 5.2.8...

CVE_2020_0796_CNA

CVE-2020-0796-CNA danigargu가 제공한 POC를 수정하여 Windows 10 권한 상승 재현을 구현하였고, stephenfewer의 ReflectiveDLLInjection 프로젝트와 CobaltStrike 문서에서 제공한 인터페이스를 기반으로 AggressorScripts를 개발했습니다. 이 저장소는 Reflective DLL 인젝션 구현 및 테스트를 위한 정보 교환 목적으로만 제공되므로, Release 버전을 제공하지 않습니다. 직접 컴파일하시기 바랍니다 구체적인 안정성 테스트는 아직 진행되지 않았으며,...

doublepulsar-usermode-injector

DOUBLEPULSAR-usermode-injector 著者: Matt Hillman [email protected] - @sp1nl0ck 会社: Countercept @countercept ウェブサイト: https://countercept.com DOUBLEPULSARペイロードのユーザーモードシェルコードを利用して、任意のDLLを別のプロセスにリフレクティブにロードするユーティリティです。検知技術のテストやその他のセキュリティ研究を目的としています。 背景 Shadow...

ReflectiveDLLInjection

概要 リフレクティブDLLインジェクションは、リフレクティブプログラミングの概念を利用して、ホストプロセス内のメモリからライブラリのロードを実行するライブラリインジェクション技術です。このため、ライブラリは最小限のポータブル実行可能（PE）ファイルローダーを実装することで、自身のロードを担当します。そして、ホストシステムおよびプロセスとの最小限のやり取りで、どのようにロードされ、ホストとやり取りするかを制御できます。 インジェクションは、Windows NT4からWindows 8まで、該当する場合はx86、x64、ARM上で動作します。 概要...

KaynStrike

KaynStrike Cobalt Strike Beacon用のユーザー定義リフレクティブローダーで、スレッド開始アドレスを偽装し、エントリポイント実行後に自身を解放します。 スレッド開始アドレスの偽装 リフレクティブローダーのクリーンアップ 証明 使用方法 KaynStrike.cna アグレッサースクリプトをロードして、ステージレスビーコンをビルドするだけです（EXEとしてテスト済み）。 クレジット S4ntiagoP。リフレクティブローダーを解放するアイデアは彼のツイートから得た。 Austin Hudson（別名 SecIdiot）。リフレクティブローダーの設計とROPチェーン...

BokuLoader

BokuLoader : Cobalt Strike リフレクティブローダー Cobalt Strikeのエイベージョン機能を再現、統合、強化することを目的とした、概念実証（PoC）のユーザー定義リフレクティブローダー（UDRL）です。 貢献者: 貢献者| Twitter| 主な貢献 ---|---|--- Bobby Cooke| @0xBoku| プロジェクトの原作者およびメンテナー Santiago Pecin| @s4ntiagop| リフレクティブローダーの主要な拡張 Chris Spehn| @ConsciousHacker| Aggressorスクリプティング Joshua...

CVE-2026-82340

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System CAS listener. A network attacker able to reach TCP port 16017 may submit crafted serialized messages and potentially cause...

EUVD-2026-83310

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System CAS listener. A network attacker able to reach TCP port 16017 may submit crafted serialized messages and potentially cause...

CVE-2026-82340 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System CAS listener. A network attacker able to reach TCP port 16017 may submit crafted serialized messages and potentially cause...

CVE-2026-82340: Improper Control of Generation of Code

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System CAS listener. A network attacker able to reach TCP port 16017 may submit crafted serialized messages and potentially cause...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hibernate-validator (UTSA-2026-093593)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093593 advisory. In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access th...

CVE-2026-63264: Improper Neutralization of Input During Web Page Generation

Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping 5.9.3 - The Joomla extension JoomShopping is vulnerable to an reflected XSS vulnerability in the product frontend controller...

SAP NetWeaver AS Java 跨站脚本漏洞

SAP NetWeaver AS Java is a platform system developed by the German company SAP. SAP NetWeaver AS Java has a cross-site scripting vulnerability, which stems from reflective cross-site scripting and may allow malicious scripts to be executed...

VMware Spring HATEOAS 访问控制错误漏洞

VMware Spring HATEOAS is a REST API hypermedia development framework provided by the American company VMware. Vulnerabilities in access control exist in versions 1.5.0 to 1.5.6, 2.3.0 to 2.3.4, 2.4.0 to 2.4.1, 2.5.0 to 2.5.2, and 3.0.0 to 3.0.3 of VMware Spring HATEOAS. This vulnerability stems...

Lyrion Music Server 跨站脚本漏洞

Lyrion Music Server is an audio server software developed by the Lyrion organization. Version 9.2.0 of Lyrion Music Server contains a cross-site scripting vulnerability. This vulnerability stems from a reflective cross-site scripting vulnerability present in advanced search parameters, which may...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via reflective property binding in PropertyUtils.createObjectFromProperties. An attacker can modify security-sensitive object properties by supplying crafted...

WordPress plugin rognone 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

WordPress plugin WP Job Portal 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...