147 matches found
hacks
/\ /\ \ /\ \ /\ /\ \ /:// /::\ \ /::\ \ /:/ / /::\ \ /::/\ /:::\ /:/:\ /::-"\ /::\ /::/ / /::/ / :\ // ;:;-",-" ::// /:/ / /:/ / :\ |:| | ::/ / // // // || // 一些随机脚本。只是想学学酷孩子们的样子。将所有脚本放在 /usr/local/bin 下，开始随意折腾。 一行设置命令 这会将本仓库克隆，然后将所有脚本移动到 /usr/local/bin。 $ git clone...
hacker-scripts
Hacker Scripts 根据 真实故事 改编: xxx: 是这样的，我们的构建工程师离职去了另外一家公司，这货基本算是生活在终端里。 你知道么，这人热爱Vim，用Dot作图，甚至用MarkDown来写维基帖子...，如果有什么事情要花上他超过90秒，他一定会整个脚本来让这件事变得“自动化”。 xxx: 我们现在坐在他的工位上，看着他留下来的这些，呃，“遗产”？ xxx: 我觉得你们会喜欢这些的 xxx: smack-my-bitch-up.sh拍老婆马屁脚本 -...
intelspy
Perform automated network reconnaissance scans to gather network intelligence. IntelSpy is a multi-threaded network intelligence tool which performs automated network services enumeration. It performs live hosts detection scans, port scans, services enumeration scans, web content scans,...
Narthex
Narthex Narthex（希腊语：Νάρθηξ, νάρθηκας）是一个模块化且极简的字典生成器，适用于Unix及类Unix操作系统，用C和Shell编写。它包含独立的Unix风格程序，用于创建个性化字典，可用于密码恢复和安全评估。这些程序遵循Unix哲学，利用Unix文本流相互协作。它采用GPL v3.0许可证。 我制作了一段视频来解释Narthex的用法： https://www.youtube.com/watch?v=U0UmCeLJSkk&t=938s （时间戳是刻意为之） 工具 nchance - 大小写转换工具，将结果追加到字典底部。 ninc -...
gitbleed_tools
GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...
HimitsuShell
README: English | 中文 | 日本語 | 한국어 HimitsuShell Scripts de shell invisibles incluso para el trazado del kernel. Convierte scripts de shell en binarios estáticos únicos con un intérprete embebido, ofuscación basada en LLVM y protecciones anti-depuración alternativa a shc. Grafo de Flujo de Bloques...
Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation
Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation 自动利用存在漏洞的 davfs2（CVE-2013-4362）的系统 这是干什么用的？ 只有两个 .sh 脚本，用于简化对存在漏洞版本的 davfs2 的利用 先决条件 内核必须至少没有加载 'fuse' 或 'coda' 模块之一（该 PoC 适用于默认未加载的 coda） 你必须是能够挂载远程 webdav 服务器的用户 通过 cat /etc/group | grep davfs2 检查 davfs2 使用 /etc/fstab...
CVE-2026-26718
描述 摘要 xxl-job-admin Web 应用程序中存在跨站请求伪造（CSRF）漏洞，攻击者可利用该漏洞对 Glue IDE Shell 脚本进行未经授权的修改。受影响的端点缺少正确的 CSRF 令牌验证，并通过宽松的请求映射接受任意 HTTP 方法。 受影响产品 xxl-job history.pushState'', '', '/'; document.forms0.submit;...
Check Point Security Management R82.20 Compromise Checks
These shell scripts check Check Point Security Management logs and temporary directories for indicators associated with CVE-2026-93616...
CVE-2026-74965
Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...
CVE-2026-26718
A Cross-Site Request Forgery CSRF vulnerability exists in the xxl-job-admin web application v.3.0.0 that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. The affected endpoint lacks proper CSRF token validation and accepts arbitrary HTTP methods via a permissive...
CVE-2026-26718: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF vulnerability exists in the xxl-job-admin web application v.3.0.0 that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. The affected endpoint lacks proper CSRF token validation and accepts arbitrary HTTP methods via a permissive...
CVE-2026-26718
A Cross-Site Request Forgery CSRF vulnerability exists in the xxl-job-admin web application v.3.0.0 that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. The affected endpoint lacks proper CSRF token validation and accepts arbitrary HTTP methods via a permissive...
PT-2026-60330
Name of the Vulnerable Software and Affected Versions xxl-job-admin version 3.0.0 Description A Cross-Site Request Forgery CSRF issue exists in the web application. This occurs because a specific endpoint lacks proper CSRF token validation and accepts arbitrary HTTP methods through a permissive...
EUVD-2026-43329
A POST request sent to a specific webserver endpoint can be used to write to arbitrary file locations. The endpoint accepts the filename parameter in the Content-Disposition header without verification. This can be used to cause a denial of service by overwriting system files, or...
CVE-2026-58454
JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a remote code execution vulnerability that allows authenticated attackers to execute arbitrary shell scripts by writing to the writable persistent JFFS2 storage path and triggering execution through the authenticated HTT...
dracut project dracut 命令注入漏洞
Dracut is an event-driven initramfs generation tool developed by Dracutdevs. Dracut has a vulnerability related to operating system command injection. This vulnerability arises when remote attackers provide custom DHCP options, which are improperly processed and written into temporary shell...
PT-2026-39742
Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine affected versions not specified Description An issue in the RADIUS feature allows an unauthenticated remote attacker to cause a denial of service DoS condition. This occurs due to improper handling of specific...
