onelinepy

onelinepy Python Obfuscator for FUD Python Code. Download & Run git clone https://github.com/spicesouls/onelinepy cd onelinepy chmod +x setup.sh ./setup.sh onelinepy Usage Guide | || | . | | -| | | | -| . | | |Python |||||||||| | |Obfuscator || || usage: oneline.py -h -m M -i I --script SCRIPT...

CVE-2024-0044

CVE-2024-0044/A-307532206 is a High severity vulnerability in the Android framework that allows attackers with adb access to run arbitrary code under the UID of arbitrary app. It was originally found by Tom Hebb from Meta Red Team X. You can found many articles on exploit this vulnerability on th...

awesome-pentest

Awesome Penetration Testing A collection of awesome penetration testing and offensive cybersecurity resources. Penetration testing is the practice of launching authorized, simulated attacks against computer systems and their physical infrastructure to expose potential security weaknesses and...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

SharpHide

SharpHide Just a nice persistence trick to confuse DFIR investigation. Uses NtSetValueKey native API to create a hidden null terminated registry key. This works by adding a null byte in front of the UNICODESTRING key valuename. More info about this technique can be found in the following...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 centos8 호환 버전 기반으로 수정됨 https://github.com/berdav/CVE-2021-4034/tree/main/dry-run 사용 방법 pwnkit-dry-run.c에서 system 함수를 수정하여 사용자 정의 실행 명령을 실행합니다 기본값은 r00t 사용자 추가, 비밀번호는 XHSZWCPU6Nvobe make로 컴파일 대상 머신에 업로드하여 실행...

hpack: Unbounded variable integer decoding can cause run-away computation on malformed input

ImpactUsers of the python-hyper/hpack library, most commonly used as downstream dependency of the python-hyper/h2 library an HTTP/2 client and server implementation. Unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blocking...

CVE-2024-0044-EXP

CVE-2024-0044-EXP CVE-2024-0044 Android 권한 상승을 이용하여 임의 대상 앱의 샌드박스 파일을 다운로드합니다. 사용법 ./CVE-2024-0044.sh 매개변수 로컬 APK 파일의 경로 대상 앱 패키지 이름 예제 ./CVE-2024-0044.sh /path/to/target.apk com.target.mobile 설명 1. 대상 기기는 Android 12/13이며, 개발자 모드를 활성화하고 ADB를 통해 연결되어 있어야 합니다. 2. 임의의 APK를 다운로드하려면 다음을 사용할 수 있습니다:...

CVE-2024-0044-EXP

CVE-2024-0044-EXP CVE-2024-0044를 활용하여 Android 12, 13 2024년 3월 보안 업데이트 이전 데이터 백업 사용법 ./CVE-2024-0044-EXP.sh 샘플 ./CVE-2024-0044-EXP.sh com.tencent.mm 설명 취약점 발견 https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html 취약점 검증...

CVE-2016-5195

CVE-2016-5195 CVE-2016-5195 dirty cow/dirtycow/dirtyc0w 안드로이드용 개념 증명 이 저장소는 ADB를 통해 연결된 취약한 안드로이드 기기에서 취약점을 시연합니다. SELinux를 비활성화하거나https://github.com/timwr/CVE-2016-5195/issues/9 참조 기기에 슈퍼유저를 설치하지 않습니다. $ make root ndk-build NDKPROJECTPATH=. APPBUILDSCRIPT=./Android.mk APPPLATFORM=android-16 make...

quick-lookup-ptrun

Quick Lookup Plugin for PowerToys Run This plugin for PowerToys Run allows you to quickly search for an IP address, domain name, hash or any other data points in a list of Cyber Security tools. It's perfect for security analysts, penetration testers, or anyone else who needs to quickly lookup...

ohmybackup

ohmybackup ohmybackup - Scan Victim's Backup Directories & Backup Files ohmybackup Scans backup folders on target sites. Searches archived files in the folders it finds. With the 2-file scanning system, it adds extensions and filenames in different ways, making it more likely to be found. 1 -...

CVE-2023-26256

CVE-2023-26256 -h 도움말 보기 -u 단일 URL 실행 -f 일괄 실행...

CVE-2026-103244

The ground-station application, in versions prior to 0.8.0 , is vulnerable to an authentication bypass within the setup.restore command. This flaw allows unauthenticated attackers to execute arbitrary SQL during the initial first-run setup mode. By invoking setup.restore via Socket.IO , an attack...

CVE-2026-103244 ground-station before 0.8.0 Authentication Bypass via setup.restore

ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to plant admin users and forged session...

timesketch

Timesketch Table of Contents 1. About Timesketch 2. Getting started 3. Community 4. Contributing About Timesketch Timesketch is an open-source tool for collaborative forensic timeline analysis. Using sketches you and your collaborators can easily organize your timelines and analyze them all at th...

CVE-2024-2876

CVE-2024-2876 - Email Subscribers by Icegram Express의 SQL 인젝션 취약점 개요 CVE-2024-2876는 WordPress용 "Email Subscribers by Icegram Express" 플러그인에서 발견된 치명적인 보안 취약점입니다. 이 취약점은 5.7.14 이하 버전에 영향을 미치며 90,000개 이상의 웹사이트에 심각한 위험을 초래합니다. 취약점 세부 정보 CVE-ID : CVE-2024-2876 CVSS 점수 : 9.8 치명적 영향을 받는 버전 : 5.7.14 이하 패...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, обнаруженная в функции createSessionInternal файла PackageInstallerService.java, представляет собой уязвимость высокой степени серьезности, затрагивающую Android версий 12 и 13. Эта уязвимость позволяет атакующему выполнить атаку "run-as any app", что приводит к...