Aruba Instant Access Point (IAP) - Cross-Site Scripting

A remote cross-site scripting xss vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below;...

Advantech R-SeeNet - Cross-Site Scripting

Advantech R-SeeNet contains a cross-site scripting vulnerability in the devicegraphpage.php script via the graph parameter. A specially crafted URL by an attacker can lead to arbitrary JavaScript code execution. id: CVE-2021-21801 info: name: Advantech R-SeeNet - Cross-Site Scripting author: gy74...

WordPress Sunshine Photo Cart <2.9.15 - Cross-Site Scripting

WordPress Sunshine Photo Cart plugin before 2.9.15 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape a parameter before outputting it back in the page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affecte...

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteinquiry. id: CVE-2022-31978 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: critical description: | Online Fire Reporting System v1.0 is vulnerable to...

pacbot

Introducción Policy as Code Bot PacBot es una plataforma para la monitorización continua del cumplimiento normativo, la generación de informes de cumplimiento y la automatización de la seguridad en la nube. En PacBot, las políticas de seguridad y cumplimiento se implementan como código. Todos los...

Invoke-HiveDreams

Invoke-HiveDreams Una capacidad para identificar y remediar CVE-2021-36934 HiveNightmare...

cve-lite-cli

Most tools tell you what's wrong. CVE Lite CLI tells you what to run...

GPOZaurr

GPOZaurr Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them. GPOZaurr provides 360 degrees of information about Group Policies and their settings. Just a single command Invoke-GPOZaurr provides...

hammer

Overview Dow Jones Hammer is a multi-account cloud security tool for AWS. It identifies misconfigurations and insecure data exposures within most popular AWS resources, across all regions and accounts. It has near real-time reporting capabilities e.g. JIRA, Slack to provide quick feedback to...

Threat-Remediation-Scripts

Introduction Since 2021, I have developed a number of scripts to assist me with my investigations and remediation efforts. I figured, why not share them to the public, in hopes it helps you. How do these scripts work? The scripts I developed are intended to work with Crowdstrike Endpoint Detectio...

defending-code-reference-harness

Arnés de Referencia para Defensa de Código Una implementación de referencia para el descubrimiento y remediación autónomos de vulnerabilidades con Claude, basada en nuestros aprendizajes de asociarnos con equipos de seguridad en varias organizaciones desde el lanzamiento de Claude Mythos Preview...

cso-vibecheck

cso-vibecheck root@kitploit: ██████╗███████╗ ██████╗ ██╗ ██╗██╗██████╗ ███████╗ ██╔════╝██╔════╝██╔═══██╗ ██║ ██║██║██╔══██╗██╔════╝ ██║ ███████╗██║ ██║ ██║ ██║██║██████╔╝█████╗ ██║ ╚════██║██║ ██║ ╚██╗ ██╔╝██║██╔══██╗██╔══╝ ╚██████╗███████║╚██████╔╝ ╚████╔╝ ██║██████╔╝███████╗ ╚═════╝╚══════╝...

java-log4j-cve-2020-9488

java-log4j-cve-2020-9488 Demostración de CVE-2020-9488: Registro inseguro con Log4j y remediación...

CVE-2021-34473-scanner

CVE-2021-34473-scanner Scanner for CVE-2021-34473, ProxyShell, A Microsoft Exchange On-premise Vulnerability To test machines one by one, use scanner-CVE-2021-34473.bat: scanner-CVE-2021-34473.bat mail.exemple.fr To test multiple machines at once, use mass-scanner and add ip/FQDN to check, one by...

GoodHound

GoodHound root@kitploit: / / / / / / / / / / / / / / / // / / / / / / / / // / // / // / // / / // / // / / / / // / ///,// ///,// //,/ Attackers think in graphs, defenders think in actions, management think in charts. GoodHound operationalises Bloodhound by determining the busiest paths...

CVE-2021-36934

CVE-2021-36934 Uso Detección root@kitploit: .\Get-HiveNightmareStatus.ps1 Detección para herramientas de gestión que necesitan salida Verdadero/Falso root@kitploit: .\Get-HiveNightmareStatus.ps1 -PostureCheck Remediación root@kitploit: For initial SAM fixes and vss removal...

bugsy

Bugsy Bugsy es una herramienta de interfaz de línea de comandos CLI que proporciona corrección automática de vulnerabilidades de seguridad para tu código. Es la versión de edición comunitaria de Mobb, la primera herramienta automática de corrección de vulnerabilidades de seguridad independiente d...

vader

VADER: Un Benchmark Evaluado por Humanos para la Evaluación, Detección, Explicación y Remediación de Vulnerabilidades Repositorio oficial de GitHub:https://github.com/AfterQuery/vader Dataset de Hugging Face:https://huggingface.co/datasets/AfterQuery/vader VADER es un benchmark evaluado por human...

Follina-MSDT-Vulnerability-CVE-2022-30190-

Follina-MSDT-Vulnerability-CVE-2022-30190- Detección y remediación de la vulnerabilidad Follina MSDT CVE-2022-30190 Para obtener información detallada sobre Follina-MSDT-Vulnerability-CVE-2022-30190-, visita...

harbian-audit

harbian-audit审计与加固 简介 本项目是面向 Debian GNU/Linux、CentOS 8 和 Ubuntu 发行版的安全审计与加固工具。当前主要测试环境为 Debian GNU/Linux 9/10/11/12/13、CentOS 8 以及 Ubuntu 22，其他版本尚未经过充分测试。本项目主要面向服务器场景，暂未针对桌面环境实现对应检查项。 本项目基于 OVH-debian-cis 框架，并结合 Debian GNU/Linux 9 的一些特性进行了优化。同时参考了安全合规基线 STIG（STIG RedHatEnterpriseLinux7V2R5 及 STIG...