6287 matches found
chronix
Chronix 침투 테스터와 레드팀 운영자를 위한 자체 호스팅 협업 워크스페이스입니다. 보안 엔지니어링 과정에서 노트, 명령어, 출력 및 운영 컨텍스트를 캡처합니다. 빠른 시작 설치 pipx install git+https://github.com/IceCubeSandwich/chronix 초기화 계정 및 세션 시크릿 생성 chronix init 실행 chronix 브라우저가 http://localhost:8000에서 열립니다. 초기화 중에 한 번만 표시되는 자격 증명을 안전하게 저장하세요. 기능 타임라인 로깅 : 출처, 대상,...
CVE-2022-22954
CVE-2022-22954 취약점 설명 Workspace ONE Access는 통합 애플리케이션 포털을 제공하며, 포털을 통해 기업의 모든 애플리케이션에 안전하게 접근할 수 있으며, 단일 로그인에 사용할 수 있습니다. CVE-2022-22954에서 공격자는 악의적인 요청을 구성하여 템플릿 인젝션을 일으키고, 임의 코드를 실행하여 서버를 제어할 수 있습니다. 참고 문서...
VMware-CVE-2022-22954
VMware CVE-2022-22954 Workspace ONE Access Freemarker 서버측 템플릿 인젝션 VMware CVE-2022-22954용 POC 이 한 줄 GET 요청을 사용하세요!! 이는 cat /etc/passwd를 실행합니다...
HiddenSteps
핵심 크레이트 — 구현 현황 이는 docs/design/02-system-architecture.md의 대상 모듈 맵에 대한 솔직한 현재 상태 보충 자료입니다. 실제로 구축된 것, 목mock이 아닌 실제 백엔드에 대해 검증된 것, 그리고 여전히 실제로 누락된 것을 설명합니다 — 계획된 것이 아니라요 계획은 docs/roadmap/01-implementation-roadmap.md에 있습니다. 저장소 루트에서 cargo build --workspace && cargo test --workspace && cargo clippy...
CVE-2022-22954-PoC
CVE-2022-22954 PoC VMware Workspace ONE Access 및 Identity Manager에서 SSTI를 통한 RCE. CVE-2022-22954 - PoC SSTI 사용법: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP, --...
GDir-Thief
GDir-Thief 레드 팀 도구로, Google People API를 통해 접근 가능한 대상 조직의 Google People Directory를 외부로 유출합니다. 사용 방법 새 Google Cloud Platform GCP 프로젝트 만들기 API 연결에 필요한 Google API 액세스 토큰을 얻는 단계: 1. 임시 Gmail/Google 계정을 만듭니다 2. 해당 계정으로 로그인합니다 3. Google Cloud Console로 이동합니다 4. "Google Cloud Platform" 옆에 있는 아래쪽 화살표를 클릭합니...
CVE-2022-22954_VMware_PoC
CVE-2022-22954 PoC - VMware Workspace ONE Access Freemarker 서버 측 템플릿 인젝션 VMware Workspace ONE Access 및 Identity Manager에서 매우 치명적인 것으로 분류된 취약점이 발견되었습니다. 영향을 받는 구성 요소는 Template Handler입니다. 참조: https://vuldb.com/?id.196644 사용법: python3 CVE-2022-22954.py example.com "cat /etc/passwd" 예시: 면책 조항 이 Pyth...
VMware Workspace ONE Access - Authentication Bypass
VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework. id: CVE-2022-22956...
Dashy <= 4.3.6 - Reflected XSS via Workspace
Dashy versions up to 4.3.6 contain a reflected cross-site scripting vulnerability in the workspace view. The url query parameter is passed directly to an iframe src attribute without scheme validation, allowing an attacker to inject javascript: URIs that execute arbitrary JavaScript in the contex...
CVE-2021-22054
CVE-2021-22054 SSRF 페이로드 생성 참조 https://blog.assetnote.io/2022/04/27/advisory-vmware-workspace-one-uem/ https://blog.assetnote.io/2022/04/27/vmware-workspace-one-uem-ssrf/ 예시 generate POC python3 ssrf.py --url https://target.com --url https://example.com --airwatch python3 ssrf.py --url...
CVE-2022-22972
CVE-2022-22972 CVE-2022-22972 の POC。VMware Workspace ONE、vIDM、および vRealize Automation 7.6 に影響します。 Technical Analysis 脆弱性の技術的な根本原因分析は、当社のブログでご覧いただけます: https://www.horizon3.ai/vmware-authentication-bypass-vulnerability-cve-2022-22972-technical-deep-dive Summary このスクリプトは、CVE-2022-22972 を使用して vRealiz...
VMWare_CVE-2022-22954
VMWareCVE-2022-22954 CVE-2022-22954은 VMware Workspace ONE Access 및 Identity Manager에서 서버 측 템플릿 주입 취약점입니다. Shodan 검색 결과 PoC 팔로우 Youtube Twitter Telegram LinkedIn...
GHSA-2CMG-V53W-8XFP Backstage: Improper repository path validation in a Scaffolder backend module
Impact An authenticated user who can execute an affected template and control its repository file location may cause generated content to be written outside the task workspace, within locations writable by the Backstage backend process. Patches Patched in...
CVE-2026-106560
Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...
CVE-2026-106560
The Backstage open framework for developer portals contains an improper repository path validation vulnerability in the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package. Specifically, a scaffolder backend module fails to properly validate repository paths, allowing an au...
EUVD-2026-94373
Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...
CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module
Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...
CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module
Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...
CVE-2026-103435
A flaw was found in claude-code. An attacker with write access to a shared workspace can achieve arbitrary file modification and privilege escalation by exploiting a time-of-check to time-of-use TOCTOU race condition. By replacing a project file with a symbolic link between the permission check a...