DetExploit

此 README 为英文版本。 如需查看日文版本，请参阅READMEJAPANESE.md。 信息 最后更新: 2019/10/04 您好，感谢您访问此仓库。 您可能注意到有一段时间没有提交记录……但开发工作仍在进行中！！！ 目前，我正在用 C++ 重写整个程序，以减小二进制文件大小并获得更多优势。 这是发布我们程序的重要步骤，请谅解……: 我已经准备了一些里程碑，您可以查看它们！！ 日程 1. 从 Python 迁移到 C++ 以减小二进制文件大小 2. 通过 GitHub Releases 发布二进制文件 3. 发布客户端/服务器的演示视频（目前正在制作中……） 4. 发布...

kali-docker

Docker oficial de Kali Linux Esta imagen Docker de Kali Linux proporciona una instalación base mínima de la última versión de la Distribución Rolling de Kali Linux. No hay herramientas añadidas a esta imagen, por lo que tendrás que instalarlas tú mismo. Para más detalles sobre los metapaquetes de...

destroylist

Destroylist: Lista Negra de Dominios de Phishing y Estafas !Last Commit...

vuln-list

vuln-list Recopila información de vulnerabilidades y guárdala automáticamente en un formato analizable Fuente Directorio| SO| Fuente| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux Errata| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine secdb|...

sockjs-dos-py

CVE-2020-7693: Meteor Se ha incluido una aplicación Meteor de demostración que ejecuta el sockjs vulnerable. Para probar el exploit en esta aplicación de demostración, instale Meteor desde https://www.meteor.com/install y luego: cd demo/ meteor Y luego apunte el objetivo del payload a...

PoC-AutoSync

🧠 PoC-AutoSync-Github Recopila automáticamente exploits públicos de Prueba de Concepto PoC desde poc-in-github.motikan2010.net y mantiene la base de datos actualizada mediante actualizaciones automáticas. Úsalo de forma responsable — solo con fines de investigación y defensa. Inspirado por...

evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: BRIEF OVERVIEW ::. Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration...

evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: 简要概述 ::. Evilgrade 是一个模块化框架，允许用户利用糟糕的升级实现，通过注入虚假更新来获利。 它附带预构建的二进制文件（代理）、用于快速渗透测试的默认配置，并拥有自己的 WebServer 和 DNSServer 模块。 易于设置新配置，并且在设置新二进制代理时具有自动配置功能。 什么时候应该使用 evilgrade？ 当攻击者能够进行主机名重定向（操纵受害者的 DNS...

CVE-2022-36446

CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 Ejecución Remota de Código Se requiere acceso al módulo "Software Package Updates" para desencadenar la vulnerabilidad. Los usuarios con acceso a este módulo pueden ejecutar comandos con privilegios de root en el sistema realizando una Inyección de...

Wallet-Transaction-Monitor

钱包交易监控器 该脚本监控一个比特币钱包地址，并在余额变动或产生新交易时通知用户。它实时提供转入和转出交易的更新，以及相应的金额和时间戳。此外，在Windows系统上发生新交易时，它还能播放声音通知。 更新日志 - 2023-07-10 增加了监控多个比特币钱包并自定义名称的功能 增加了将信息保存到文本文件的选项 未来几周内将推出更多功能 必要条件 Python 3.x requests 库：可通过运行 pip install requests 安装。 winsound 模块：Windows 系统默认自带该模块。 运行方法 确保系统已安装 Python 3.x。 pip install ...

chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion

Oracle GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server. id: CVE-2017-1000029 info: name: Oracle GlassFish Server Open Source Edition 3.0.1 - Local File...

qdPM 9.1 - Cross-site Scripting

qdPM V9.1 is vulnerable to Cross Site Scripting XSS via qdPM\install\modules\databaseconfig.php. id: CVE-2020-19515 info: name: qdPM 9.1 - Cross-site Scripting author: theamanrawat severity: medium description: | qdPM V9.1 is vulnerable to Cross Site Scripting XSS via...

Kaseya Virtual System Administrator - Open Redirect

Kaseya Virtual System Administrator 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 are susceptible to an open redirect vulnerability. An attacker can redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. id: CVE-2015-286...

ZEROF Web Server 2.0 - Cross-Site Scripting

ZEROF Web Server 2.0 allows /admin.back cross-site scripting. id: CVE-2022-25323 info: name: ZEROF Web Server 2.0 - Cross-Site Scripting author: pikpikcu severity: medium description: ZEROF Web Server 2.0 allows /admin.back cross-site scripting. impact: | Successful exploitation of this...

Puppet Server/PuppetDB - Sensitive Information Disclosure

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints, which may contain sensitive information when left exposed. id: CVE-2020-7943 info: name: Puppet Server/PuppetDB - Sensitive Information Disclosure author: c-sh0 severity: high...

Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection

Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...

Reprise License Manager 14.2 - Cross-Site Scripting

Reprise License Manager 14.2 contains a cross-site scripting vulnerability in the /goform/activateprocess "count" parameter via GET. id: CVE-2021-45422 info: name: Reprise License Manager 14.2 - Cross-Site Scripting author: edoardottt severity: medium description: | Reprise License Manager 14.2...

Symmetricom SyncServer Unauthenticated - Remote Command Execution

Microchip Technology Microsemi SyncServer S650 was discovered to contain a command injection vulnerability. id: CVE-2022-40022 info: name: Symmetricom SyncServer Unauthenticated - Remote Command Execution author: DhiyaneshDK,mielverkerken severity: critical description: | Microchip Technology...

UC Gateway Investment SiteEngine v5.0 - Open Redirect

Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter in a logout action. id: CVE-2008-7269 info: name: UC Gateway Investment SiteEngine v5.0 - Open...