The vulnerability of the Test IT testing system, related to insufficient validation of requests on the server side, allows a hacker to perform an SSRF attack.

The vulnerability of the Test IT testing management system is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

The vulnerability of the Test IT testing management system, related to the use of default login credentials, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Test IT testing management system is related to the use of default login credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Test IT testing system lies in the use of external control inputs for class selection, allowing a perpetrator to execute arbitrary commands.

The vulnerability of the Test IT testing system relates to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2022-42889

Application de test CVE-2022-42889 Ce dépôt contient une application simple utilisant Apache Commons Text 1.10 qui est vulnérable à CVE-2022-42889. Exécution de l'application Remplacez la commande nc dans DemoApplication.java par l'adresse IP de votre hôte. Écoute avec netcat : $ nc -l -p 30000...

see

Environnement d'exécution en bac à sable :Source: https://github.com/F-Secure/see :Documentation: https://see.readthedocs.io :Téléchargement: https://pypi.python.org/pypi/python-see |travis badge| |docs badge| .. |travis badge| image:: https://travis-ci.org/F-Secure/see.svg?branch=master :target:...

faraday

Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

CVE-2023-33107

analyse https://keto0422.github.io/2026/02/11/cve-writeup/ vidéo de test https://github.com/user-attachments/assets/1e2d1757-2fff-4cf8-a48d-bb6e2d4f5994...

http-desync-guardian

Overview HTTP/1.1 went through a long evolution since 1991 to 2014: HTTP/0.9 – 1991 HTTP/1.0 – 1996 HTTP/1.1 RFC 2068 – 1997 RFC 2616 - 1999 RFC 7230 - 2014 This means there is a variety of servers and clients, which might have different views on request boundaries, creating opportunities for...

htcap

HTCAP htcap is a web application scanner able to crawl single page application SPA recursively by intercepting ajax calls and DOM changes. KEY FEATURES Recursive DOM crawling engine Discovers ajax/fetch/jsonp/websocket requests Supports cookies, proxy, custom headers, http auth and more Heuristic...

spb

spb Скрипты для проверки уязвимости Shortest Path Bridging используются для поиска CVE-2016-2783...

CVE-2024-23208-test

В этом репозитории нет README...

Agent-Security-Regression-Harness

OWASP Agent Security Regression Harness OWASP Agent Security Regression Harness — это открытый, вендоронезависимый тестовый стенд для запуска исполняемых сценариев регрессионной безопасности против агентных приложений и систем, интегрированных с MCP. Проект помогает разработчикам и специалистам п...

Fireaway

FireAway-Next Generation Firewall Bypass Tool v0.2 Fireaway is a tool for auditing, bypassing, and exfiltrating data against layer 7/AppID inspection rules on next generation firewalls, as well as other deep packet inspection defense mechanisms, such as data loss prevention DLP and application...

haptyc

Haptyc Cadre de génération de tests Qu'est-ce que Haptyc ? Haptyc est une bibliothèque Python conçue pour ajouter la prise en charge des positions de payload et des types d'attaque Sniper/Clusterbomb/Batteringram/Pitchfork dans Turbo Intruder. Bien que Haptyc atteigne assez bien ces objectifs, il...

haptyc

Haptyc Test Generation Framework What's Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express...

CVE-2022-25927-test

Ce depot n’a pas de fichier README...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

CVE2022-1388_TestAPI

CVE2022-1388TestAPI Тестовое API для проверки POC против CVE-2022-1388 Для запуска с хоста. pip install -r requirements.txt uvicorn main:app --reload Для запуска через Docker. make build make run...

test-certs-site

test-certs-site Introduction Ceci est un serveur web spécialement conçu pour héberger les pages de test requises par les Exigences de Base du forum CA/Browser. Elles contiennent l'exigence suivante : L'AC DOIT héberger des pages Web de test qui permettent aux fournisseurs de logiciels...