147 matches found
hacks
/\ /\ \ /\ \ /\ /\ \ /:// /::\ \ /::\ \ /:/ / /::\ \ /::/\ /:::\ /:/:\ /::-"\ /::\ /::/ / /::/ / :\ // ;:;-",-" ::// /:/ / /:/ / :\ |:| | ::/ / // // // || // Some random scripts. Just trying to be like the cool kids. Place all the scripts under /usr/local/bin and hack...
hacker-scripts
English | 简体中文 Hacker Scripts Based on a true story : xxx: OK, so, our build engineer has left for another company. The dude was literally living inside the terminal. You know, that type of a guy who loves Vim, creates diagrams in Dot and writes wiki-posts in Markdown... If something - anything -...
intelspy
Perform automated network reconnaissance scans to gather network intelligence. IntelSpy is a multi-threaded network intelligence tool which performs automated network services enumeration. It performs live hosts detection scans, port scans, services enumeration scans, web content scans,...
Narthex
Narthex Narthex Greek: Νάρθηξ, νάρθηκας is a modular & minimal dictionary generator for Unix and Unix-like operating system written in C and Shell. It contains autonomous Unix-style programs for the creation of personalised dictionaries that can be used for password recovery & security assessment...
gitbleed_tools
GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...
HimitsuShell
翻訳版です。問題があればIssueでお知らせください。 README: English | 中文 | 日本語 | 한국어 HimitsuShell カーネルトレースからも見えないシェルスクリプト。 シェルスクリプトを、組み込みインタプリタ・LLVMベースの難読化・アンチデバッグ保護を備えた単一の静的バイナリに変換します（shcの代替）。 ブロックフローグラフ（Ghidra） 使い方 1. download docker image x8664linuxmusl curl -LO...
Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation
Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation 취약한 davfs2CVE-2013-4362를 사용하는 시스템을 자동으로 익스플로잇합니다. 무엇을 위한 것인가? 취약한 버전의 davfs2 익스플로잇을 단순화하는 두 개의 .sh 스크립트입니다. 사전 요구 사항 'fuse' 또는 'coda' 모듈 중 적어도 하나는 커널에 로드되어 있지 않아야 합니다 PoC는 기본적으로 로드되지 않는 coda로 동작합니다 원격 webdav 서버를 마운트할 수 있는 사용자여야 합니다 cat...
CVE-2026-26718
설명 요약 xxl-job-admin 웹 애플리케이션에는 공격자가 Glue IDE 셸 스크립트를 무단으로 수정할 수 있게 하는 CSRF사이트 간 요청 위조 취약점이 존재합니다. 영향을 받는 엔드포인트는 적절한 CSRF 토큰 검증이 없으며, 관대한 요청 매핑을 통해 임의의 HTTP 메서드를 허용합니다. 영향을 받는 제품 xxl-job history.pushState'', '', '/'; docu...
Check Point Security Management R82.20 Compromise Checks
These shell scripts check Check Point Security Management logs and temporary directories for indicators associated with CVE-2026-93616...
CVE-2026-74965
Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...
CVE-2026-26718
A Cross-Site Request Forgery CSRF vulnerability exists in the xxl-job-admin web application v.3.0.0 that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. The affected endpoint lacks proper CSRF token validation and accepts arbitrary HTTP methods via a permissive...
CVE-2026-26718: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF vulnerability exists in the xxl-job-admin web application v.3.0.0 that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. The affected endpoint lacks proper CSRF token validation and accepts arbitrary HTTP methods via a permissive...
CVE-2026-26718
A Cross-Site Request Forgery CSRF vulnerability exists in the xxl-job-admin web application v.3.0.0 that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. The affected endpoint lacks proper CSRF token validation and accepts arbitrary HTTP methods via a permissive...
PT-2026-60330
Name of the Vulnerable Software and Affected Versions xxl-job-admin version 3.0.0 Description A Cross-Site Request Forgery CSRF issue exists in the web application. This occurs because a specific endpoint lacks proper CSRF token validation and accepts arbitrary HTTP methods through a permissive...
EUVD-2026-43329
A POST request sent to a specific webserver endpoint can be used to write to arbitrary file locations. The endpoint accepts the filename parameter in the Content-Disposition header without verification. This can be used to cause a denial of service by overwriting system files, or...
CVE-2026-58454
JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a remote code execution vulnerability that allows authenticated attackers to execute arbitrary shell scripts by writing to the writable persistent JFFS2 storage path and triggering execution through the authenticated HTT...
dracut project dracut 命令注入漏洞
Dracut is an event-driven initramfs generation tool developed by Dracutdevs. Dracut has a vulnerability related to operating system command injection. This vulnerability arises when remote attackers provide custom DHCP options, which are improperly processed and written into temporary shell...
PT-2026-39742
Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine affected versions not specified Description An issue in the RADIUS feature allows an unauthenticated remote attacker to cause a denial of service DoS condition. This occurs due to improper handling of specific...
