Viper

Getting-Started · Documentation VIPER is a powerful and flexible red team platform. It integrates the core tools and functionalities required for adversary simulation and red team operations, assisting you in efficiently completing cybersecurity assessment tasks. User-Friendly Interface Provides ...

CVE-2019-18845

CVE-2019-18845 The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users including low integrity processes to read and write to arbitrary memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, by mapping \Device\PhysicalMemory into the calling proces...

ldsview

ldsview Offline search tool for LDAP directory dumps in LDIF format. Features Fast and memory efficient parsing of LDIF files Build ldapsearch commands to extract an LDIF from a directory Show directory structure UAC and directory time format translation Config Config options can be passed as CLI...

viper

Viper Frank4DD, 2000년 5월 Viper는 crypt로 암호화된 비밀번호를 위한 무차별 대입 UNIX 스타일 비밀번호 크래커입니다. Hale의 viper 1.4 Perl 프로그램에서 개발되었습니다. 더 강력한 크랙 프로그램이 존재하지만, 이 프로그램은 하드웨어 속도가 급격히 증가하는 상황에서 비밀번호의 안전성을 연구하는 데 사용됩니다. 기억이 맞다면, PDP-11에서 비밀번호 생성에 30초가 걸렸다는 글을 읽었습니다. 이제는 단일 시스템의 단일 CPU 코어에서 초당 230,000회 이상의 생성을 수행할 수 있어,...

Pentest-Everything

⚔️ Pentest Everything 重要 他のページのリンクは時間の経過とともに変更または移動される可能性があるため、このページをブックマークしてください。このページは常に同じままです。 この書籍について この書籍は、さまざまな攻撃的セキュリティ関連のトピックやプラットフォームに関する私のメモと記事のコレクションです。この書籍は、ほぼ毎日更新されており、今後も当面は継続する予定です。もしこの書籍の開発が停止した場合、このページに警告を残します。 この書籍は主にGitbookでの閲覧用に開発されています。フォークしたい場合は、GitHubにてフォークしてください。 GitBook...

viper

이 저장소는 아카이브되었으며 Viper 1.x의 개발이 중단되었습니다.Viper 2로 시작된 프로젝트의 전체 리팩터링이 진행 중입니다. Viper는 바이너리 분석 및 관리 프레임워크입니다. 기본 목표는 여러분이 수집한 악성코드 및 익스플로잇 샘플과 시간이 지남에 따라 생성하거나 발견한 스크립트 컬렉션을 쉽게 정리하여 일상적인 연구를 용이하게 하는 솔루션을 제공하는 것입니다. 시작하기! $ pip3 install viper-framework $ viper 자세한 정보 및 설치 방법은...

ph0neutria

ph0neutria ph0neutria 멀웨어 크롤러 v1.0.1 https://github.com/phage-nz/ph0neutria 참고: 이 프로젝트는 활발히 유지관리되지 않습니다. 소개 ph0neutria는 야생에서 직접 샘플을 수집하는 멀웨어 동물원 빌더입니다. 모든 것은 접근성과 관리 용이성을 위해 Viper에 저장됩니다. 이 프로젝트는 Ragpicker https://github.com/robbyFux/Ragpicker, 이전에는 "Malware Crawler"로 알려짐에서 영감을 받았습니다. 그러나...

ph0neutria

ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...

CVE-2026-48790 turso-cli persists Turso platform JWT with world-readable (0o644) file permissions

Turso CLI is the command line interface CLI to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to settings.json using Viper's default configPermissions of 0o644, leaving the credential file world-readable on standard Linux and macOS systems. Any othe...

CVE-2026-48790 turso-cli persists Turso platform JWT with world-readable (0o644) file permissions

Turso CLI is the command line interface CLI to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to settings.json using Viper's default configPermissions of 0o644, leaving the credential file world-readable on standard Linux and macOS systems. Any othe...

GHSA-MQQ6-462X-JXMM Go Restful API Boilerplate: Hardcoded JWT Secret "random" Allows Token Forgery

Vulnerability: CWE-798 — Hardcoded JWT Secret + Broken Mitigation Affected Component - github.com/dhax/go-base — Go REST API boilerplate go-chi/jwtauth/v5, Viper, PostgreSQL/Bun - 1,685 stars on GitHub Vulnerability Locations | File | Line | Role | |------|------|------| | dev.env | 10 |...

FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches

The U.S. Cybersecurity and Infrastructure Security Agency CISA has revealed that an unnamed federal civilian agency's Cisco Firepower device running Adaptive Security Appliance ASA software was compromised in September 2025 with a new malware called FIRESTARTER. FIRESTARTER, per CISA and the U.K....

SUSE-SU-2026:20904-1 Security update for cosign

This update for cosign fixes the following issues: Update to version 3.0.5: - CVE-2026-24122: Fixed improper validation of certificates that outlive expired CA certificates bsc1258542 - CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize receiver in MultiScalarMult can produce...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cosign (SUSE-SU-2026:0777-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0777-1 advisory. Update to version 3.0.5 jscSLE-23879. Security issues fixed: - CVE-2025-11065:...

SUSE-SU-2026:0777-1 Security update for cosign

This update for cosign fixes the following issues: Update to version 3.0.5 jscSLE-23879. Security issues fixed: - CVE-2025-11065: github.com/go-viper/mapstructure/v2: sensitive Information leak in logs bsc1250620. - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cau...

GHSA-86RF-68F4-2CPH Duplicate Advisory: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2464-8j7c-4cjm. This link is maintained to preserve external references. Original Description A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using...

AZL-75389 CVE-2025-11065 affecting package cert-manager for versions less than 1.12.15-6

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75573 CVE-2025-11065 affecting package skopeo for versions less than 1.14.2-14

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75416 CVE-2025-11065 affecting package docker-compose for versions less than 2.27.0-8

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75419 CVE-2025-11065 affecting package gh for versions less than 2.62.0-13

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...