60 matches found
coffeeMiner
CoffeeMiner 와이파이 네트워크에서 협력적 mitm 암호화폐 채굴 풀 경고: 이 프로젝트는 학술/연구 목적으로만 사용됩니다. 이 프로젝트에 대한 블로그 글은 여기에서 읽을 수 있습니다: http://arnaucode.com/blog/coffeeminer-hacking-wifi-cryptocurrency-miner.html 개념 선택된 모든 피해자에게 MITM 공격 수행 피해자가 요청한 모든 HTML 페이지에 js 스크립트 주입 주입된 js 스크립트에는 암호화폐 채굴기가 포함됨 LAN 네트워크에 연결된 모든 피해자 장치가...
CVE-2024-32002
PoC для CVE-2024-32002, скрипт, созданный на основе тестового примера разработчика: https://github.com/git/git/commit/97065761333fd62db1912d81b489db938d8c991ddiff-2ba261bbd9de8e881d700e696eebab0df581473ba50b671b2cbe4bbee5ca87b0 Данное программное обеспечение создано исключительно в целях...
CVE-2021-23017
CVE-2021-23017 CVE-2021-23017-PoC root@kitploit: python3 poc.py --target 172.1.16.100 --dnsserver 172.1.16.1 このソフトウェアは、学術研究および効果的な防御手法の開発を唯一の目的として作成されており、明示的に許可された場合を除き、システムへの攻撃に使用することを意図していません。プロジェクトメンテナは、本ソフトウェアの誤用に対する責任を負いません。責任を持って使用してください。...
CVE-2025-68645-PoC
CVE-2025-68645 개념 증명 학술 및 방어적 연구 고지 이 저장소는 학술적 분석, 방어적 연구, 취약점 검증 목적으로만 엄격히 개발된 개념 증명PoC을 포함하고 있습니다. 이 프로젝트의 목적은 통제되고 승인된 테스트 환경 내에서 CVE-2025-14847의 기술적 동작과 영향을 보안 연구자, 방어자, 공급업체가 이해할 수 있도록 돕는 것입니다. 승인 요건 이 개념 증명은 테스터가 소유한 시스템 또는 명시적 승인이 부여된 시스템에서만 실행되어야 합니다. 이 코드의 무단 사용은 현지 또는 국제 법률을 위반할 수 있습니다...
Zeek 8.0.3
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...
ysoserial
This is a proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. The tool, called ysoserial, is a collection of utilities and property-oriented programming "gadget chains" discovered in common Java libraries that can, under the right conditions, exploit Jav...
Zeek 7.0.9
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...
Tracking GPTs Third Party Service: Automation, Analysis, and Insights
ChatGPT has quickly advanced from simple natural language processing to tackling more sophisticated and specialized tasks. Drawing inspiration from the success of mobile app ecosystems, OpenAI allows developers to create applications that interact with third-party services, known as GPTs. GPTs ca...
Exploit for OS Command Injection in Paloaltonetworks Expedition
CVE-2024-9464: Palo Alto Expedition Authenticated Command Inje...
Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk
CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential...
Exploit for OS Command Injection in Ivanti Cloud_Services_Appliance
CVE-2024-8190: Ivanti Cloud Service Appliance Authenticated Co...
Exploit for Deserialization of Untrusted Data in Ivanti Endpoint_Manager
CVE-2024-29847 PoC for Ivanti Endpoint Manager AgentPortal Des...
Exploit for Improper Input Validation in Ivanti Endpoint_Manager
CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM...
Exploit for Deserialization of Untrusted Data in Ivanti Endpoint_Manager
CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM...
Exploit for SQL Injection in Progress Whatsup_Gold
CVE-2024-6670 PoC for Progress Software WhatsUp Gold HasErrors...
Exploit for Improper Privilege Management in Progress Whatsup_Gold
CVE-2024-5009 PoC for Progress WhatsUp Gold SetAdminPassword P...
Chinese Actor SecShow Conducts Massive DNS Probing on Global Scale
Cybersecurity researchers have shed more light on a Chinese actor codenamed SecShow that has been observed conducting Domain Name System DNS on a global scale since at least June 2023. The adversary, according to Infoblox security researchers Dr. Renée Burton and Dave Mitchell, operates from the...
Exploit for Authentication Bypass by Spoofing in Telerik Report_Server_2024
CVE-2024-4358 / CVE-2024-1800 Telerik Report Server deserializ...