100 matches found
troll-a
Troll-A Troll-A ใฏใWARC๏ผWeb ARChive๏ผใใกใคใซใใใในใฏใผใใAPI ใญใผใใใผใฏใณใชใฉใฎใทใผใฏใฌใใใๆฝๅบใใใใใฎใณใใณใใฉใคใณใใผใซใงใใTroll-A ใฏใWeb ใขใผใซใคใใใใทใผใฏใฌใใใ่ฆใคใใใใใฎ ไฝฟใใใใ ใๅ ๆฌ็ ใใใค ้ซ้ ใชใฝใชใฅใผใทใงใณใงใใ ๆฉ่ฝ ใใญใใณใซ: HTTP/HTTPS ็ต็ฑใฎใใใใฏใผใฏใตใผใใผใAmazon S3 ใชใใธใงใฏใในใใฌใผใธใตใผใในใใญใผใซใซใใกใคใซใทในใใ ใใพใใฏ STDIN ใใ็ดๆฅ Web ใขใผใซใคใใๅๅพใงใใพใใ ๅง็ธฎ: GZipใBZip2ใXZใใพใใฏ ZStd ใงๅง็ธฎใใใ We...
JSScanner
JSScanner ใใฎในใฏใชใใใซ้ขใใ่จไบใฏใใกใใง่ฆใคใใใใพใ https://securityjunky.com/scanning-js-files-for-endpoint-and-secrets/ ๅฟ ่ฆใชใใผใซใใคใณในใใผใซใใใซใฏใไปฅไธใไฝฟ็จใใฆใใ ใใ bash install.sh alive.txt ใใในใใใใใใกใคใณใซๅคๆดใใฆใใ ใใใใใฉใผใใใใฏไปฅไธใฎ้ใใงใ http://example.com https://example2.com ใใผใซใๅฎ่กใใใซใฏใไปฅไธใไฝฟ็จใใฆใใ ใใ jsscanner pathtoalive.txt ไพ. jsscann...
sccmsqlclient
sccmsqlclient ไธ็จไบ SCCM ๆฐๆฎๅบๆข็ดขไธๅฉ็จ็ MSSQL ๅฎขๆท็ซฏใ ไพฆๅฏๆฅ่ฏข ๅจๅ็ฎกๅฎขๆท็ซฏไธ่ฟ่ก PowerShell ่ๆฌ ๆๅๆบๅฏ ๅฎ่ฃ PIPX $ pipx install git+https://github.com/synacktiv/sccmsqlclient/ PIP ๆจๅฏไปฅ้่ฟๅ ้ไปๅบๅนถๅฎ่ฃ ไพ่ต้กนๆฅๅฎ่ฃ ใ $ git clone https://github.com/synacktiv/sccmsqlclient $ cd sccmsqlclient $ python3 -m venv .venv && source .venv/bin/activa...
gitbleed_tools
GitBleed Tools - ใใฉใผใชใณใฐใใใGitใชใใธใใชใใใใผใฟใๆฝๅบใใใใใฎใใผใซ ๆฆ่ฆ ใใฎใชใใธใใชใซใฏใใฏใญใผใณใจใใฉใผใชใณใฐใใใGitใชใใธใใช้ใฎๅทฎๅใใใฆใณใญใผใใใฆๅๆใใใใใฎใทใงใซในใฏใชใใใๅซใพใใฆใใพใใGitใฎๅไฝใซ้ขใใๆ นๆฌ็ใช็ใฎ่ฉณ็ดฐใซใคใใฆใฏใใใญใฐ่จไบใใ่ฆงใใ ใใใ ใใใใฎในใฏใชใใใฎๆฉ่ฝ...
cve-2018-1002105
่ฟไฟฎๆน่ช https://gravitational.com/blog/kubernetes-websocket-upgrade-security-vulnerability/ใๆๆๅๅณๅฝไบGravitational็ๅ่ฏไบบไปฌใ ๅๅงPoCไปฃ็ ่ขซไฟฎๆนไธบไธไป ๆฃๆฅๆผๆด๏ผ่ไธๅฎ้ ่ฟ่กๅฝไปค๏ผๅจ็ฌฌไธไธชๅฝๅ็ฉบ้ด็็ฌฌไธไธชๅฎนๅจไธญใๅจๆฌไพไธญ๏ผๅฎไผๅจๅคงๅคๆฐ้็พค็้ป่ฎคๅฝๅ็ฉบ้ดไธญ็็ฌฌไธไธชpod/ๅฎนๅจๅ ๆง่กcurl -s google.comใ็ฑๆญค๏ผๅพๅฎนๆๅถไฝไธไธชๅฎ้ ๅทฅๅ ทๆฅๆๅๅฏ้ฅใไปฃ็ ใๅคๆณๆฐๆฎ็ญใ CVE-2018-1002105...
secretsdump.py
secretsdump.py ๆ่ฟฐ ่ฟๆฏ impacket Python ๅบไธญ secretsdump.py ่ๆฌ็ไธไธชๅฎๅถ็ๆฌใๅฎๅ ่ฎธๅๆถไปๅคไธช Windows ็ณป็ปๆๅๆบๅฏไฟกๆฏ๏ผNTDS.ditใSAM ๅ .SYSTEM ๆณจๅ่กจ้ ็ฝฎๅๅ ๏ผใ่ฟไธชๅฎๅถ็ๆฌ้่ฟๆฅๅๅ ๅซ็ฎๆ ไธปๆบๅ่กจ็่พๅ ฅๆไปถ๏ผๅนถๆฏๆๅค็บฟ็จไปฅๅ ๅฟซๆไฝ้ๅบฆ๏ผไป่ๅฏนๅ็่ฟ่กไบๆน่ฟใ ็จๆณ ่ฟ่ก่ๆฌ็ๅบๆฌ่ฏญๆณๆฏ๏ผ python3 secretsdump.py domain/username:password -t THREADS -inputfile INPUTFILE options ไธป่ฆๅๆฐๅฆไธ๏ผ -t...
KeePwn
ใฌใใใใผใ ใKeePassใคใณในใฟใณในใ็บ่ฆใใใทใผใฏใฌใใใๆฝๅบใใใใใฎPythonในใฏใชใใใ ๆฉ่ฝ KeePass ็บ่ฆ SMB C$ๅ ฑๆใไปใใฆKeePassใคใณในใใผใซใใกใคใซใๆขใใ ่คๆฐใฎใฟใผใฒใใใฝใผใน๏ผIPใCIDRใใในใๅใใใกใคใซ๏ผใๅใไปใใใ KeePassใกใฟใใผใฟ๏ผใใผใธใงใณใๆ็ตใขใฏใปในๆๅป๏ผใ็ขบ่ชใใใ ImpacketใใผในใฎRPCใไปใใฆๅฎ่กไธญใฎKeePassใใญใปในใ็ขบ่ชใใใ ใใใซใใใฏใในใใ้ฟใใใใใฎใใซใในใฌใใๅฎ่ฃ ใ ๆค็ดข็ตๆใCSVใซใจใฏในใใผใใ KDBXใใผใฟใใผในใๆขใใ KeePass ใใฉใฐใคใณใฎๆช็จ SMB...
HTTPLoot
HTTPLoot ใตใคใใฎใฏใฉใคใขใณใๅใใณใผใใๅๆใซใฏใญใผใซใใใฉใผใ ๅ ฅๅใใจใฉใผ/ใใใใฐใใผใธใฎใใชใฌใผใใใใฆใๆฆๅฉๅใใๅๅพใใ่ชๅๅใใผใซใ ไฝฟใๆน ใใผใซใไฝฟ็จใใใซใฏใใชใใธใใชใฎReleasesใปใฏใทใงใณใใใใชใใซใใใใใใคใใชใๅ ฅๆใใฆใใ ใใใใฝใผในใณใผใใ่ชๅใงใใซใใใๅ ดๅใฏใGo 1.16ไปฅไธใๅฟ ่ฆใงใใgo buildใๅฎ่กใใใ ใใงไฝฟ็จๅฏ่ฝใชใใคใใชใๅบๅใใใพใใ ใใใซใใใคใใชใจไธ็ทใซ2ใคใฎJSONใใกใคใซ๏ผlootdb.json= / \ H T T P L O O T $ v0.1 / + HTTPLoot by RedHunt Labs ...
dumpscan
ๆฌใใผใซใฎๅ ฌ้้็บใฏไธๆๅๆญขใใฆใใพใใใใใฉใคใใผใใงใฏๅผใ็ถใ้็บไธญใงใใ2024ๅนด็ฌฌ3ๅๅๆ/็ฌฌ4ๅๅๆใซๅคง่ฆๆจกใชใขใใใใผใใไบๅฎใใฆใใพใใ Dumpscan ใฏใใซใผใใซใใใณ Windows Minidump ๅฝขๅผใใใทใผใฏใฌใใใๆฝๅบใใใณใใณใใใใใใซ่จญ่จใใใใณใใณใใฉใคใณใใผใซใงใใใซใผใใซใใณใใฎ่งฃๆใฏ volatility3 ใซใใฃใฆๆไพใใใฆใใพใใ ๆฉ่ฝ x509 ๅ ฌ้้ตใใใณ็งๅฏ้ต PKCS 8/PKCS 1 ใฎ่งฃๆ SymCrypt ใฎ่งฃๆ ๅฏพๅฟๆง้ ไฝ SYMCRYPTRSAKEY - ้ตๆง้ ไฝใ็งๅฏ้ตใๆใคใใฉใใใๅคๅฎ...
jsluice
jsluice jsluice ๆฏไธไธช Go ๅ ๅๅฝไปค่กๅทฅๅ ท๏ผ็จไบไป JavaScript ๆบไปฃ็ ไธญๆๅ URLใ่ทฏๅพใๆบๅฏไปฅๅๅ ถไปๆ่ถฃ็ๆฐๆฎใ ๅฆๆไฝ ๆณ็ซๅณๆง่ก่ฟไบๆไฝ๏ผ่ฏทๆฅ็ๅฝไปค่กๅทฅๅ ทใ ๅฆๆไฝ ๆณๅฐ jsluice ็ๅ่ฝ้ๆๅฐไฝ ่ชๅทฑ็้กน็ฎไธญ๏ผ่ฏทๆฅ็็คบไพ๏ผๅนถ้ ่ฏปๅ ๆๆกฃใ ๅฎ่ฃ ่ฆๅฎ่ฃ ๅฝไปค่กๅทฅๅ ท๏ผ่ฏท่ฟ่ก๏ผ โถ go install github.com/BishopFox/jsluice/cmd/jsluice@latest ่ฆๅฐ่ฏฅๅ ๆทปๅ ๅฐไฝ ็้กน็ฎไธญ๏ผ่ฏท่ฟ่ก๏ผ โถ go get github.com/BishopFox/jsluice ๆๅ URL jsluice...
CVE-2025-68664-LangGrinch-PoC
!CWEhttps://img.shields.io/badge/CWE--502-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96-informational?style=for-the-badge&logo=owasp&logoColor=whit...
CVE-2026-46370 Fleet has observer-level enrollment secret extraction via ORDER BY oracle on labels host-listing endpoint
Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the labels host-listing endpoint GET /api/v1/fleet/labels/id/hosts allowed an authenticated user with the lowest-privilege Observer role to extract host enrollment secrets through a...
XXE vulnerability in ivy-report
ivy-report 1.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control workspace contents to have Jenkins parse a crafted Ivy report XML file that uses external entities for extraction of secrets from the Jenkins controller o...
GO-2026-5099 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction in github.com/argoproj/argo-cd...
Jenkins Assembla Plugin has an XXE vulnerability
Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity XXE attacks when parsing responses from the configured Assembla server. This allows attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkin...
CVE-2026-57303
Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity XXE attacks, allowing attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform server-side request forgery...
CVE-2026-57303: Server-Side Request Forgery (SSRF)
Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity XXE attacks, allowing attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform server-side request forgery...
opencode-apk-forge
APKForge - The Dark Version of OpenCode โโโโ โโโโ โโโ...
MAL-2026-5525 Malicious code in @solana-labs/web3.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b0523027116b3981b0f1dfe925f01d8956eb19817aae6ea7d0022d5357fba4 Package @solana-labs/web3.js impersonates the legitimate @solana/web3.js and re-exports it as cover while running a malicious postinstall node...
BIT-ARGO-CD-2026-42880 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing authorization and data-masking gap in Argo CD's ServerSideDiff endpoint that allows an attacker with read-only access to extract plaintext...