MIDA-Multitool

MIDA - Multitool Script Bash diseñado para enumeración del sistema, identificación de vulnerabilidades y escalada de privilegios. MIDA Multitool extrae funcionalidad de varios de mis scripts anteriores, concretamente SysEnum y RootHelper y, en cierto modo, es el sucesor de RootHelper, o al menos ...

linuxprivchecker

Linuxprivchecker.py Un Script de Verificación de Escalada de Privilegios en Linux Autor Original: Mike Czumak Tv3rn1x -- @SecuritySift Mantenedor Actual: Michael Contino @Sleventyeleven Este script está diseñado para ejecutarse localmente en un sistema Linux para enumerar información básica del...

Pentest-Command

Antecedentes del proyecto Durante el proceso de pruebas de penetración, utilizamos varios tipos de frameworks, por ejemplo: MSF、CS、Empire、Impacket, etc. El propósito principal de este proyecto es recopilar los comandos comúnmente utilizados en la etapa de post-explotación. Conocimientos básicos...

firmwalker

firmwalker A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .cr...

MAL-2026-6237 Malicious code in atlasora-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9776899942c749b493911ca4e33c3b4967308a816e167bd3ee90c95800632f92 Package declares a postinstall hook "postinstall": "node install.js" that runs install.js automatically on npm install. install.js imports https, fs,...

Lyrion Music Server 安全漏洞

Lyrion Music Server is an audio server software developed by the Lyrion organization. Version 9.2.0 of Lyrion Music Server contains a security vulnerability. This vulnerability stems from an arbitrary directory list vulnerability in the readdirectory function, which could lead to enumerating...

WWBN AVideo 授权问题漏洞

WWBN AVideo is a video platform building system developed by the WWBN team using PHP. Versions of WWBN AVideo prior to 29.0 contained an authorization vulnerability. This vulnerability stemmed from the absence of user login checks and administrator gatekeeping in the objects/mention.json.php file...

MAL-2026-4590 Malicious code in json-to-simple-graphql-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9998f4fd6abaaefcf6bd610ce0b558f0e1eb22c9d4dae07a111c27cc7f7322c The package contains a poc.js script that collects host reconnaissance data os.hostname, os.platform, output of whoami via childprocess and POSTs it ...

Malicious code in omnius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aceac0879b587bc711c3f156bf0de4bab90f3774816a6cbeb36a2cf9bb03e12 The package's postinstall lifecycle hook launches dist/postinstall-daemon.cjs, which combines childprocess.execSync, os.userInfo, filesystem probes,...

CVE-2026-28792 Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS

Tina is a headless content management system. Prior to 2.1.8 , the TinaCMS CLI dev server combines a permissive CORS configuration Access-Control-Allow-Origin: with the path traversal vulnerability previously reported to enable a browser-based drive-by attack. A remote attacker can enumerate the...

linux-privesc-audit-toolkit

Linux Privilege Escalation Automation Toolkit !Bannerscree...

EUVD-2018-11928

Malware in sbrugna...

EUVD-2018-11929

Malware in sbrugna...

EUVD-2018-0007

Malware in sbrugna...

CVE-2024-54004

Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects list Parameter, allowing attackers with Item/Configure permission to enumerate file names on the Jenkins controller file system...

CVE-2023-6032

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...

AdminerEvo Code Issue Vulnerability

AdminerEvo is an AdminerEvo open source database management tool in a single PHP file. A security vulnerability exists in AdminerEvo. A remote attacker could exploit the vulnerability to enumerate or access otherwise inaccessible systems...

CVE-2023-35860

A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php...

CVE-2023-35860

CVE-2023-35860 affects Modern Campus Omni CMS 2023.1. A directory traversal vulnerability allows remote, unauthenticated attackers to enumerate file system information via the dir parameter to listing.php or rss.php. The NVD entry and related sources describe the affected component and exposure, ...

CVE-2023-35860

A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php...