CVE-2019-11510_poc

CVE-2019-11510 PoC Python-Skript zur Ausnutzung von CVE-2019-11510 und zum Lesen der Datei '/etc/passwd' Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure Sicherheitslücke root@kitploit: USAGE: python3 CVE-2019-11510.py...

beef

=============================================================================== root@kitploit: Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

Secure-Desktop

Secure-Desktop Secure Desktop é uma ferramenta para Windows que abre programas em uma área segura onde keyloggers e Ferramentas de Administração Remota não podem acessar por meios convencionais. Keyloggers de software funcionam configurando um Windows hook que informa ao Windows que sempre que o...

experiments

Experimente Repository verschiedener Experimente / PoCs. debugging-secure-kernel: PoC zum Debugging des Windows 10 Secure Kernel mit gdb auf QEMU KVM dns: Experimente zu DNS / Certificate Transparency / Homoglyphen Attack Surface Reduction: Demystifizierung der Interna von Windows Attack Surface...

Oracle Secure Global Desktop Administration Console 4.4 - Cross-Site Scripting

Oracle Secure Global Desktop Administration Console 4.4 contains a reflected cross-site scripting vulnerability in helpwindow.jsp via all parameters, as demonstrated by the sgdadmin/faces/comsunwebui/help/helpwindow.jsp windowTitle parameter. id: CVE-2018-19439 info: name: Oracle Secure Global...

Cisco Secure Firewall ASA & FTD - Authentication Bypass

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should...

Pulse Secure Pulse Connect Secure - Cross-Site Scripting (Reflected)

Pulse Secure Pulse Connect Secure PCS 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3 contain a reflected cross-site scripting caused by insufficient sanitization on the Application Launcher page, letting attackers execute scripts in the context of the affected page, exploit requires victim to visit ...

Langflow <= 1.8.4 - Path Traversal to RCE via File Upload

The application contains a path traversal vulnerability caused by unsanitized 'filename' parameter in the 'POST /api/v2/files' multipart form data, letting attackers write files to arbitrary filesystem locations, exploit requires crafted request. id: CVE-2026-5027 info: name: Langflow = 1.8.4 -...

shim

shim, um bootloader UEFI de primeiro estágio shim é um aplicativo EFI trivial que, quando executado, tenta abrir e executar outro aplicativo. Ele inicialmente tenta fazer isso por meio das chamadas padrão da EFI LoadImage e StartImage. Se estas falharem porque o Secure Boot está habilitado e o...

cve-2025-0282-ivanti_rce_reproduction

CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA 网关栈缓冲区溢出远程代码执行漏洞 CVSS 9.0 — 严重 | 已遭主动利用的零日漏洞 | 2025年1月发现 概述 CVE-2025-0282 是 Ivanti Connect Secure ICS、Ivanti Policy Secure IPS 和 Ivanti ZTA 网关中 IFT/TLS 处理组件的一个栈缓冲区溢出漏洞 CWE-121 / CWE-787。该漏洞允许未经身份验证的远程攻击者在目标设备上以 root 权限实现任意代码执行 。 该漏洞于 202...

ironcurtain

IronCurtain 一个用于自主AI代理的安全运行时，其安全策略源自人类可读的章程。 当有人写"安全"时，你应该立即持怀疑态度。我们所说的安全是什么意思？ !WARNING 研究原型。 IronCurtain 是一个早期研究项目，探索如何使AI代理足够安全以真正有用。API、配置格式和架构可能会发生变化。欢迎贡献和反馈。 演示 代理被要求克隆一个仓库并推送更改。gitclone 和 gitpush 都被策略引擎升级，但自动审批器自动批准了它们——用户来自命令模式的可信输入（Ctrl-A）提供了明确的意图，因此无需手动 /approve。 问题...

pulsexploit

pulsexploit Automatisiertes Skript für den Pulse Secure SSL VPN Exploit CVE-2019-11510 unter Verwendung von Hosts aus der Shodan API. Sie benötigen ein Shodan-Konto, um dieses Skript zu nutzen. Klicken Sie hier, falls Sie noch kein Shodan-Konto haben. Installation 1. Installieren Sie die...

krustyloader-analysis

KrustyLoader विश्लेषण इस रिपॉज़िटरी में KrustyLoader पर किए गए विश्लेषण से संबंधित संसाधन हैं, जो इस ब्लॉग पोस्ट पर उपलब्ध है: https://www.synacktiv.com/publications/krustyloader-rust-malware-linked-to-ivanti-connectsecure-compromises. डाउनलोडर द्वारा अतिरिक्त पेलोड प्राप्त करने के लिए उपयोग किए...

aes256_passwd_store

aes256passwdstore يقوم هذا البرنامج النصي بتشفير أو فك تشفير كلمات المرور بشكل آمن على القرص داخل ملف قاعدة بيانات مخصص. كما يتضمن وظيفة لاسترداد كلمات المرور من ملف قاعدة بيانات تم إنشاؤه مسبقًا. يأخذ هذا البرنامج النصي كلمة مرور رئيسية من stdin/من الذاكرة، ويقوم بتجزئة كلمة المرور باستخدام...

dubiousdisk

dubious disk - das porygon-z, das gegen Secure Boot super effektiv ist! CVE-2022-30203, CVE-2023-21560, CVE-2023-28269, CVE-2023-28249, und mehr... Übermäßig permissiver Code in der Windows-Boot-Umgebung ermöglicht das Überschreiben von beliebigem Speicher und damit die Ausführung von beliebigem...

bunkerweb

Das Allgemein-Plugin stellt das zentrale Konfigurations-Framework für BunkerWeb bereit und ermöglicht es Ihnen, wesentliche Einstellungen zu definieren, die steuern, wie Ihre Webdienste geschützt und bereitgestellt werden. Dieses grundlegende Plugin verwaltet fundamentale Aspekte wie...

monty

Monty Ein minimaler, sicherer Python-Interpreter, geschrieben in Rust, für die Nutzung durch KI...

CVE-2025-22457

PoC для CVE-2025-22457 Уязвимость переполнения буфера стека без аутентификации, затрагивающая Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure и ZTA Gateways Обзор Это proof-of-concept эксплойт для демонстрации эксплуатации CVE-2025-22457. Полный технический анализ уязвимости и...

PSCF

OWASP 제품 보안 역량 프레임워크 PSCF https://prods.ec/ OWASP 제품 보안 역량 프레임워크PSCF는 소프트웨어 제품의 보안을 체계화하고 강화하기 위해 설계된 포괄적인 가이드입니다. 보안 역량을 식별, 구현 및 관리하기 위한 구조화된 접근 방식을 활용하여 PSCF는 제품 보안을 개선하고 규제 및 산업 표준을 준수하도록 하는 것을 목표로 합니다. 소개 보안은 소프트웨어 제품 품질의 중요한 측면입니다. OWASP PSCF는 다양한 규제 프레임워크와 산업 표준에 대한 메타 분석을 제공하여 제품 보안의 모범 사...

CVE-2024-21893.py

CVE-2024-21893 ist eine Server-Side-Request-Forgery-Schwachstelle in der SAML-Komponente von Ivanti Connect Secure 9.x, 22.x und Ivanti Policy Secure 9.x, 22.x und Ivanti Neurons for ZTA, die es einem Angreifer ermöglicht, ohne Authentifizierung auf bestimmte eingeschränkte Ressourcen zuzugreifen...