sudo_inject

Linux Privilege Escalation by injecting process possessing sudo tokens Inject process that have valid sudo token and activate our own sudo token Introduction We all noticed that sometimes sudo doesn't ask us for a password because he remembers us. How does he remember us and how does he identifie...

token-reverser

Token Reverser 보안 토큰을 크랙하기 위한 단어 목록 생성기. 설치 $ git clone https://github.com/dariusztytko/token-reverser.git 사용 예시 1. 비밀번호 재설정 기능을 테스트 중입니다. 2. 재설정 비밀번호 토큰이 이메일로 전송되었습니다 예: 582431d4c7b57cb4a3570041ffeb7e10. 3. 이 토큰이 가입 시 입력한 데이터의 md5 해시라고 가정합니다. 4. 가입 시 다음 데이터를 입력했습니다: 이름: Foo 성: Bar 이메일:...

token-reverser

Token Reverser Words list generator to crack security tokens. Installation $ git clone https://github.com/dariusztytko/token-reverser.git Example use case 1. You are testing reset password function 2. Reset password token was sent to your email box e.g. 582431d4c7b57cb4a3570041ffeb7e10 3. You...

SkyWrapper

Overview SkyWrapper is an open-source project which analyzes behaviors of temporary tokens created in a given AWS account. The tool is aiming to find suspicious creation forms and uses of temporary tokens to detect malicious activity in the account. The tool analyzes the AWS account, and creating...

SEDATED

The SEDATED® Project Sensitive Enterprise Data Analyzer To Eliminate Disclosure focuses on preventing sensitive data such as user credentials and tokens from being pushed to Git. Table of Contents Purpose Setup Clone down SEDATED® Update .example files Customize /config/customconfigs.sh variables...

peirates

Peirates Peirates란 무엇인가? Kubernetes 침투 도구인 Peirates는 공격자가 권한을 상승시키고 Kubernetes 클러스터를 통해 피벗할 수 있게 해줍니다. 이 도구는 서비스 계정 토큰과 시크릿을 탈취 및 수집하고, 추가적인 코드 실행 권한을 획득하며, 클러스터의 제어권을 장악하기 위한 알려진 기법들을 자동화합니다. Peirates는 어디에서 실행하나요? Peirates는 Kubernetes에서 실행 중인 컨테이너 내부에서, 또는 컨테이너 외부의 Kubernetes 노드에서 실행합니다. Peirate...

jwt-cracker

jwt-cracker 간단한 HS256, HS384 및 HS512 JWT 토큰 무차별 대입 크래커. 취약한 비밀을 가진 JWT 토큰을 크랙하는 데만 효과적입니다. 권장사항 : 강력하고 긴 비밀 또는 RS256 토큰을 사용하세요. 설치 npm을 사용하여: npm install --global jwt-cracker 사용법 명령줄에서: jwt-cracker -t -a --max -d -f 여기서: token : 크랙할 전체 HS256-512 JWT 토큰 문자열 alphabet : 무차별 대입에 사용할 알파벳 기본값:...

CVE-2023-6289

CVE-2023-6289 Swift Performance Lite = 2.3.6.14 - Missing Authorization to Unauthenticated Settings Export Description The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the on functionality hooked via admininit functi...

CVE-2023-5070

CVE-2023-5070 Social Media Share Buttons & Social Sharing Icons = 2.8.5 - Information Exposure Description: The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.8.5 via the sfsisaveexport...

react2shell_analyzer

React2Shell Analyzer A powerful HTTP proxy analyzer for inspecting Next.js Server Actions traffic between your browser/PoC and Next.js server. GitHub Repository https://github.com/Benrich127N/react2shellanalyzer.git Features 🔍 Header Inspection : Logs all request and response headers 📦 Multipart...

sign-saboteur

SignSaboteur SignSaboteur는 서명된 토큰을 편집, 서명, 검증 및 공격하기 위한 Burp Suite 확장 프로그램입니다. 다양한 유형의 토큰을 지원합니다: Django TimestampSigner, ItsDangerous Signer, Express cookie-session 미들웨어, OAuth2 Proxy, Tornado의 서명된 쿠키, Ruby Rails 서명된 쿠키, Ruby Rails 암호화된 쿠키, Nimbus JOSE + JWT 및 알 수 없는 서명된 문자열Unknown signed...

TokenMan

Access and Refresh Token Suite. Token Man is a tool for supporting post-exploitation activities using AAD access and/or refresh tokens. Table of Contents Usage Commands Fetch Search Swap FOCI Application Client ID Map AZ OAuth Usage usage: tokenman.py -h fetch,search,swap,az,oauth ... Token Man -...

scavenger_scanner

CVE-2025-54313 IOC Scanner Cross-platform scanners for detecting Indicators of Compromise IOCs related to the eslint-config-prettier supply chain attack CVE-2025-54313. On July 18, 2025, several popular npm packages were compromised through a phishing attack. The attacker gained access to the...

CVE-2026-104906 MISP TAXII Object Viewer Stored XSS via Unescaped JSON Output

MISP contains a cross-site scripting XSS vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII objec...

CVE-2026-104906 MISP TAXII Object Viewer Stored XSS via Unescaped JSON Output

MISP contains a cross-site scripting XSS vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII objec...

SecureCivic

SecureCivic SecureCivic is a citizen-built, open source identity verification platform designed to enable the Social Security Administration SSA to adopt a modern, privacy-first verification system. It removes reliance on private data brokers and middlemen by enabling secure, real-time identity...

acp-framework-en

ACP — Agent Control Protocol Admission control for agent actions. Before any agent mutates system state, ACP answers four questions: Who is this agent? What are they authorized to do? Is this action policy-compliant? Can the outcome be traced to an accountable institution? Cryptographic identity ...

CVE-2026-104416

Ghost versions 4.39.0 through 6.64.0 are vulnerable to an information disclosure vulnerability within the Admin API . This flaw allows staff users with invite viewing permissions to access secret tokens for pending staff invites. By obtaining these tokens, an attacker can accept invites for highe...

EUVD-2026-91427

Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff users to view secret tokens of pending staff invites. Staff users with invite viewing permission can accept pending invites for higher-privileged roles to escalate their privileges...

LogMePwn

LogMePwn LogMePwn is a fully automated, multi-protocol, reliable, super-fast scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability. Tool Highlights Inherent support for automatic Canary Tokens generation using emails or webhooks. Multi-protocol support: HTTP, IMAP, SSH,...