bashacks

bashacks 무엇인가? bashacks는 프로그래머, 보안 분석가, 그리고 저수준 작업이 필요한 일반 사용자에게 유용할 수 있는 bash 함수 모음입니다. 사실 bashacks에는 정말 새로운 것은 없습니다. 모든 함수는 UNIX 계열 시스템의 기존 소프트웨어를 사용하여 작성되었습니다. 그러나 여러 명령이 필요한 작업을 더 짧은 명령으로 수행할 수 있게 해줍니다. 요구 사항 bash = 4 bc binutils coreutils curl file grep hexdump html2text perl sed wget xxd zi...

iOS18.6.2-Persistent-Automation-Exploit-in-Siri-Shortcuts-and-Apple-SWC

Siri 단축어 및 공유 웹 자격 증명에서의 부적절한 입력 검증 발견자: Joseph Goydish II 발견 날짜: 2025년 8월 20일 심각도: 높음 핵심 요약 이 보고서는 Apple의 Siri 단축어 및 공유 웹 자격 증명SWC 프레임워크에 영향을 미치는 높은 심각도의 취약점 체인을 설명합니다. 이 결함으로 인해 잘못된 형식의 페이로드가 백그라운드에서 조용히 실행되어 입력 검증, 샌드박싱 및 사용자 프롬프트를 우회할 수 있습니다. 이러한 워크플로는 재부팅 및 재실행 후에도 유지되며 적절한 권한 없이 민감한 시스템 데몬을...

BurpSuiteSharpenerEx

Burp Suite Sharpener この拡張機能は、Burp Suite にいくつかの UI および機能面での機能を追加して、より使いやすくします。 互換性の詳細については、「Burp Suite の互換性とエラー報告」セクションを参照してください。 / | | . \ | . | || '| . / .| ' |/ .| ' /|||||| | /.|||.|| || インストール GitHub がビルドした最新の jar ファイルを /releases/latest からダウンロードするか、Workflows の Artifacts からダウンロードします。...

fhex

Fhex - A Full-Featured HexEditor This project is born with the aim to develop a lightweight, but useful tool. The reason is that the existing hex editors have some different limitations e.g. too many dependencies, missing hex coloring features, etc.. This project is based on qhexedit2 , capstone...

Crimson-Cloak-ISH-wrapper-iOS-

Crimson-Cloak-ISH-wrapper-iOS 탈옥 없이 iSH iOS 앱의 기능을 극대화하는 래퍼입니다. 기능 http://127.0.0.1:8088에서 HTTP API + 내장 대시보드 ws://127.0.0.1:8089에서 WebSocket 실시간 스트리밍 SynChan 도구 Huginn, OmnINT, Daedalus, Argus, Neural, Ophelia, Hecate, MIDAS, SynChan, Crimson Cloud 자동 검색 도구별 바로가기 버튼 클립보드 동기화, 파일 감시, 네트워크 모니터, 연결...

CVE-2025-33053-Proof-Of-Concept

CVE-2025-33053 개념 증명 이 저장소는 Apache2를 사용하여 Ubuntu에 WebDAV 서버를 자동으로 배포 하고, 피싱, 레드 팀 운영 또는 측면 이동 시뮬레이션에 사용할 악성.url 바로 가기 파일을 생성하는 스크립트를 제공합니다. 📁 구성 setupwebdav.sh – Apache2 + WebDAV를 구성하는 Bash 스크립트. setupwebdav.py – 위 스크립트의 Python 버전. genurl.py – UNC/WebDAV 경로가 포함된 .url 바로 가기 파일을 생성하는 Python 스크립트...

CVE-2026-84600

CVE-2026-84600 Shortcuts Impact: A malicious shortcut may be able to send messages without user confirmation. Description: An authorization issue was addressed with improved state management. Products: iOS and iPadOS, macOS, tvOS, visionOS, watchOS Fixed In: iOS 27 and iPadOS 27 macOS Golden Gate...

CVE-2023-43357-CMSmadesimple-Stored-XSS---Shortcut

CMSmadesimple 저장형 XSS v2.2.18 작성자: Sergio 설명: CMSmadesimple v.2.2.18의 크로스 사이트 스크립팅XSS 취약점으로 인해 로컬 공격자가 My Preferences - Manage Shortcuts의 Title에 조작된 스크립트를 통해 임의 코드를 실행할 수 있습니다. 공격 벡터: 스크립팅 - "My Preferences - Manage Shortcuts"의 Title 항목의 입력값 검증샌티타이제이션 취약점으로 인해 사용자가 웹 페이지에 접근할 때 실행되는 JavaScript 코드...

CVE-2026-84600

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation...

CVE-2026-84600

An authorization issue in Apple operating systems allows a malicious shortcut to send messages without user confirmation. The root cause involves a flaw in state management , which has been addressed in the latest updates. This vulnerability impacts iOS 27 , iPadOS 27 , macOS Golden Gate 27 , tvO...

CVE-2026-84600

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation...

CVE-2026-84600

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation...

Astra Linux – Vulnerability in Firefox

Insufficient validation in the Drag and Drop API, combined with social engineering, may have allowed an attacker to trick end-users into creating shortcuts to local system files. This could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions earlier than 115...

PT-2026-91649

Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 tvOS versions prior to 27 visionOS versions prior to 27 watchOS versions prior to 27 Description An authorization issue exists due to improper state...

CVE-2026-49992: Cross-Site Request Forgery (CSRF)

Kimai is an open-source time tracking application. Versions prior to 2.58.0 contain authenticated cross-site request forgery issues in their default team creation shortcuts for projects, customers, and activities. These endpoints are exposed through GET routes and directly create or reuse a Team,...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: gnome-shell (UTSA-2026-032347)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032347 advisory. It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a lock...

CVE-2026-66298

Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart. Livebook's JS-view feature renders notebook-defined JavaScript inside a sandboxed,...

EUVD-2026-53602

Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart. Livebook's JS-view feature renders notebook-defined JavaScript inside a sandboxed,...

CVE-2026-66298

Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart. Livebook's JS-view feature renders notebook-defined JavaScript inside a sandboxed,...

CVE-2026-66298 JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts

Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart. Livebook's JS-view feature renders notebook-defined JavaScript inside a sandboxed,...