107 matches found
LKWA
LKWA Lesser Known Web Attack Lab은 중급 펜테스터가 Object Injection, XSSI, PHAR 역직렬화, variables variable 등과 같은 잘 알려지지 않은 웹 공격을 테스트하고 연습할 수 있는 도구입니다. Write-up을 환영합니다. 제 walk-through는 여기에 있습니다. 설치 - 로컬 git clone https://github.com/weev3/LKWA 명령어로 클론한 후 웹 서버로 이동시키면 됩니다. XSSI 챌린지의 경우 apache2.conf 파일에서 Allow...
GPEWebDefender
GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...
Network-Analysis-Tools
Pcap 캡처 파일 분석 도구v.1 root@kitploit: !CONTACT! | Email: [email protected] | | Github: github/azizaltuntas | | Twitter: @esccopyright | 기능 root@kitploit: 1-Top 10 Visited Sites 2-Emails 3-All Request Urls 4-User-Agents List 5-String Grep Mode 6-Connection details 7-Ports Used 8-ALL Ip List...
dvwassl
SSL이 활성화된 Damn Vulnerable Web App SSL이 활성화된 Damn Vulnerable Web App을 실행합니다. 이유는? SSL을 통해 웹 공격 탐지를 테스트하고 싶을 수 있습니다. 이미지 빌드 root@kitploit: docker build -t dvwassl:latest . 컨테이너 실행 root@kitploit: docker run -d -p 443:443 dvwassl:latest 사용자 정의 SSL 인증서 및 키 이미지에는 미리 생성된 SSL 인증서와 키가 포함되어 있습니다. 직접 소유한 것을...
whale-sentinel-services
🐋 Whale Sentinel サービス 🔧 概要 Whale Sentinel サービス は、Whale Sentinel 脅威検出エコシステムの集中型バックエンドです。これらのマイクロサービスは、リアルタイムの脅威検出、エージェント調整、DGA 分析、Web 攻撃検査を実行し、接続されたアプリケーションに対して深いセキュリティ可観測性と能動的保護を実現します。 🧩 サービスとイメージ No.| サービス名| 言語| Docker イメージ| バージョン ---|---|---|---|--- 1| whale-sentinel-common-attack-detection| Go...
Arkhota
Arkhota, 안드로이드용 웹 브루트 포서 무엇인가요? Arkhota는 안드로이드 OS용 웹HTTP/S 브루트 포서입니다. 왜 필요한가요? 웹 브루트 포서는 명백한 이유로 항상 해커의 컴퓨터에 있습니다. 때로는 공격이 빠르거나 최소한의 장치 준비만으로 이루어져야 하는 경우가 있습니다. 또한 전화기는 노트북/컴퓨터보다 주목을 덜 받습니다. 이러한 상황을 위해 Arkhota가 있습니다. 다운로드 APK를 여기에서 다운로드할 수 있습니다. 사용법 설명은 APK의 위에서 아래로 객체 순서대로 나열되어 있습니다. 배너 배너, 버전 및...
payloads
ペイロード Git All the Payloads! Web攻撃ペイロードのコレクションです。プルリクエスト歓迎！ 使用方法 外部ペイロードをダウンロードし、圧縮されたペイロードファイルを解凍するには、./get.sh を実行してください。 ペイロードクレジット fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists - https://github.com/danielmiessler/SecLists xsuperbug - https://github.com/xsuperbug/payloads NickSanzot...
payloads
payloads Git All the Payloads! A collection of web attack payloads. Pull requests are welcome! Usage run ./get.sh to download external payloads and unzip any payload files that are compressed. Payload Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...
EUVD-2026-47386
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2026-62549
Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: UK Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS UK. While the vulnerability...
PT-2026-63052
Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A security flaw in the Oracle Agile PLM product of Oracle Supply Chain allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a...
PT-2026-50070
Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
-Web-Attack-Detection-Lab
!Kali Linuxhttps://img.shields.io/badge/KaliLinux-557C94?sty...
Cross-site Scripting (XSS)
Overview TinyMCE is a web-based JavaScript HTML WYSIWYG editor control. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the media plugin when handling crafted data-mce- attributes. An attacker can execute arbitrary scripts in the context of the user's browser by...
Context-Aware Web Attack Detection in Open-Source SIEM Systems Via MITRE ATT&CK-Enriched Behavioral Profiling
Security Information and Event Management SIEM systems aggregate log data from heterogeneous sources to detect coordinated attacks. Traditional rule-based correlation engines struggle to classify multi-step web application attacks because they examine each event without reference to the behaviour...
splunk-web-attack-detection
🔍 Web Application Attack Detection & Threat Hunting Using Splu...
CVE-2026-42368
A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can visit a webpage to trigger this vulnerability...
CVE-2026-28741
Mattermost CVE-2026-28741 concerns CSRF token validation bypass on an authentication endpoint, enabling an attacker to update a user’s authentication method via a CSRF attack when a user visits a malicious page. Affected versions are Mattermost 10.11.x ≤ 10.11.12, 11.5.x ≤ 11.5.0, 11.4.x ≤ 11.4.2...