54 matches found
OWASP-mth3l3m3nt-framework
OWASP Mth3l3m3nt Framework A slightly major forgive pun upgrade is on going. This is to bring in things like: Easier coding standard Support for PHP 8 More robust features Fix bug requests sent in. This tool is released under GNU Affero General Public License v3. Modules Packed in so far are:...
Moriarty-Project
Moriarty Project Remastered V4.1.2. ใใญใฅใกใณใใใผใธ https://azizkpln.github.io/moriartyproject/ ๆฆ่ฆ Moriarty Project ใฏใๅผทๅใชWebใใผในใฎ้ป่ฉฑ็ชๅท่ชฟๆปใใผใซใงใใ6ใคใฎๆฉ่ฝใใใใใในใฆใฎๆฉ่ฝใพใใฏๅฅฝใใชๆฉ่ฝใ้ธๆใงใใพใใ่ฉณ็ดฐใซใคใใฆใฏใใใญใฅใกใณใใใผใธใใ่ฆงใใ ใใใ ็ถๆณ ใฝใผใทใฃใซใกใใฃใขใฎในใฟใใฏๅ้กใไฟฎๆญฃใใพใใใ ็พๅจใฎๆฉ่ฝ ๆๅฎใใใ้ป่ฉฑ็ชๅทใฎๆๆ่ ใ่ฆใคใใใใจใใพใใ ๆๅฎใใใ้ป่ฉฑ็ชๅทใฎในใใ ใชในใฏ็ถๆณใ่ฆใคใใใใจใใพใใ...
SysmonConfigPusher2
SysmonConfigPusher v2 Windows ์๋ํฌ์ธํธ์์ Sysmon ๊ตฌ์ฑ์ ๊ด๋ฆฌํ๋ ์น ๊ธฐ๋ฐ ๋๊ตฌ โ ์์ด์ ํธ๋ฆฌ์คWMI/SMB ๋ฐ ์์ด์ ํธ ๊ธฐ๋ฐ ๋ฐฐํฌ๋ฅผ ๋ชจ๋ ์ง์ํฉ๋๋ค. ๊ธฐ๋ฅ ๊ธฐ๋ฅ| ์ค๋ช ---|--- ์์ด์ ํธ๋ฆฌ์ค ๋ฐฐํฌ| WMI ๋ฐ SMB๋ฅผ ํตํด Sysmon ๋ฐ์ด๋๋ฆฌ์ ๊ตฌ์ฑ์ ํธ์ํฉ๋๋ค ์์ด์ ํธ ์ง์| ํด๋ผ์ฐ๋ VM ๋ฐ DMZ ์๋ฒ์ฉ ๊ฒฝ๋ ์์ด์ ํธ Docker ์ง์| ์์ด์ ํธ ์ ์ฉ ๋ฐฐํฌ๋ฅผ ์ํด Linux/Docker์์ ์คํ ์น ์ธํฐํ์ด์ค| ์ค์๊ฐ ๋ฐฐํฌ ์งํ๋ฅ ์ ์ ๊ณตํ๋ ์ต์ React UI ์ด๋ฒคํธ ๋ก๊ทธ ๋ทฐ์ด| ์...
trufflehog-explorer
TruffleHog Explorer ๐ต๏ธโโ๏ธ TruffleHog Explorer์ ์ค์ ๊ฒ์ ํ์ํฉ๋๋ค. TruffleHog๋ฅผ ์ฌ์ฉํ์ฌ ์ถ์ถ๋ ๋ฐ์ดํฐ๋ฅผ ์๊ฐํํ๊ณ ๋ถ์ํ ์ ์๋ ์ฌ์ฉ์ ์นํ์ ์ธ ์น ๊ธฐ๋ฐ ๋๊ตฌ์ ๋๋ค. TruffleHog๋ ๊ฐ์ฅ ๊ฐ๋ ฅํ ๋น๋ฐ ์ฐพ๊ธฐ, ๋ถ๋ฅ, ๊ฒ์ฆ ๋ฐ ๋ถ์ ์คํ ์์ค ๋๊ตฌ ์ค ํ๋์ ๋๋ค. ์ฌ๊ธฐ์ ๋น๋ฐsecret์ด๋ ๊ธฐ๊ณ๊ฐ ๋ค๋ฅธ ๊ธฐ๊ณ์ ์ธ์ฆํ๊ธฐ ์ํด ์ฌ์ฉํ๋ ์๊ฒฉ ์ฆ๋ช ์ ์๋ฏธํฉ๋๋ค. ์ฌ๊ธฐ์๋ API ํค, ๋ฐ์ดํฐ๋ฒ ์ด์ค ๋น๋ฐ๋ฒํธ, ๊ฐ์ธ ์ํธํ ํค ๋ฑ์ด ํฌํจ๋ฉ๋๋ค. ๊ฐ์ ๋ UI/UX, ๊ฐ๋ ฅํ ํํฐ๋ง ์ต์ ๋ฐ...
injectify
Injectify ์น์ฌ์ดํธ์์ ๊ณ ๊ธ MiTM ๊ณต๊ฒฉ์ ์ฝ๊ฒ ์ํํ์ธ์. โจ ๊ฐ๋ฐ ์ง์: Patreon ๋๋ ์ผํ์ฑ Paypal ํ ์คํธํด๋ณด๊ธฐ | ์ค์น | ๋ฌธ์ | Trello | Discord ํผํด์ ํ๋ฉด ๋ณด๊ธฐ ๋ฒํผ ์ํธ์์ฉ ๋ฐ ํด๋ฆญ ๊ธฐ๋ฅ ์คํฌ๋กค ์๋ฐฉํฅ ๋๊ธฐํ ๋ฐ์ดํฐ ๊ธฐ๋ก ๋ฐ์ดํฐ ๊ธฐ๋ก ๋ฐ ์ ์ฅ์ ์ํ ๋ฐ์ดํฐ๋ฒ ์ด์ค API ์๋ก์ด ๋ชจ๋ API ๋ชจ๋์์ ์๋ฒ์ธก ์ฝ๋ ์คํ ๊ฐ๋ฅ Injectify๋ BeEF์ ์ ์ฌํ์์ค ์ฝ๋๋ ์์ ํ ๋ค๋ฅด์ง๋ง ์ต์ ์น ๊ธฐ๋ฐ MiTM ๋๊ตฌ์ ๋๋ค. ํฌ๋ก์ค ํ๋ซํผ ํด๋ผ์ด์ธํธ์น, ๋ฐ์คํฌํฑ, ๋ธ๋ผ์ฐ์ ํ์ฅ ํ๋ก๊ทธ๋จ...
BlackThrone
BlackThrone PHP BlackThrone ์คํฌ๋ฆฝํธ โ Burp Collaborator์ ์คํ ์์ค ๋์ BlackThrone์ ๋ฉ์ธ ์น์ฌ์ดํธ์์ ์น์์ผ๊ณผ HTTP ํธ๋ํฝ์ ํ์งํ๊ณ ์ผ๋ถ ์๋ฒ ํค๋ ๋ฐ ํด๋ผ์ด์ธํธ ์ ๋ณด๋ฅผ ์ ๊ณตํ๊ธฐ ์ํด ๋ง๋ค์ด์ก์ต๋๋ค. BlackThrone์ PHP๋ก ์น ์๋ฒ์์ ์คํ๋๋ ์น ๊ธฐ๋ฐ ๋๊ตฌ์ ๋๋ค. ๋ฐฉ๋ฌธ์์ IP, ๊ตญ๊ฐ, ํค๋ ๋ฑ์ ํ์งํฉ๋๋ค. Blind SSRF/XSS, CORS ๋ฑ์ ์ค์บํ๋ ๋ฐ ์ ์ฉํฉ๋๋ค. โ๊ต์ก ๋ชฉ์ ์ผ๋ก๋ง ์ฌ์ฉโํ์ธ์. ๋ณธ ๋๊ตฌ๋ฅผ ๋ถ๋ฒ์ ์ผ๋ก ์ฌ์ฉ์: ์ฟ ํค ํ์ด์ฌํนํ๋ ๊ฒ์...
EUVD-2020-7257
Malware in sbrugna...
EUVD-2022-29646
Malicious code in bioql PyPI...
EUVD-2024-55000
Malicious code in bioql PyPI...
EUVD-2024-45811
Malicious code in bioql PyPI...
EUVD-2024-45522
Malicious code in bioql PyPI...
EUVD-2024-29842
Malicious code in bioql PyPI...
IBM Controller ๅฎๅ จๆผๆด
IBM Controller is a Web-based financial consolidation tool from International Business Machines IBM. A security vulnerability exists in IBM Controller versions 11.0.0, 11.0.1, and 11.1.0 that stems from the potential disclosure of sensitive credentials...
CVE-2025-24026
iTop is an web based IT Service Management tool. Versions prior to 3.2.1 are vulnerable to regular expression denial of service ReDoS that may, under some circumstances, affect iTop server. Version 3.2.1 doesn't use the affected variable in the regular expression. As a workaround, if iTop...
CVE-2024-52601
iTop is an web based IT Service Management tool. Prior to versions 2.7.12, 3.1.3, and 3.2.1, anyone with an account having portal access can have read access to objects they're not allowed to see by querying an unprotected route. Versions 2.7.12, 3.1.3, and 3.2.1 contain a fix for the issue...
CVE-2025-24969 iTop portal user can see any other contact's picture
iTop is an web based IT Service Management tool. Prior to version 3.2.1, a portal user can see any other contacts picture by changing the picture ID in the URL. Version 3.2.1 contains a patch for the issue...
TruffleHog Explorer - A User-Friendly Web-Based Tool To Visualize And Analyze Data Extracted Using TruffleHog
Welcome to TruffleHog Explorer , a user-friendly web-based tool to visualize and analyze data extracted using TruffleHog. TruffleHog is one of the most powerful secrets discovery, classification, validation, and analysis open source tool. In this context, a secret refers to a credential a machine...
OpenText iManager ๅฎๅ จๆผๆด
OpenText iManager is a web-based management tool from OpenText Canada. A security vulnerability exists in OpenText iManager version 3.2.4.0000, which stems from a possible command injection vulnerability in iManager...
OpenText iManager ๅฎๅ จๆผๆด
OpenText iManager is a web-based management tool from OpenText Canada. A security vulnerability exists in OpenText iManager version 3.2.4.0000, which originates from a possible reflected cross-site scripting vulnerability in iManager...
OpenText iManager ๅฎๅ จๆผๆด
OpenText iManager is a web-based management tool from OpenText Canada. A security vulnerability exists in OpenText iManager version 3.2.6.0000, which stems from a possible cross-site scripting vulnerability in the iManager URL that accesses the component...