swarm

swarm v0.6.0 Английский | 中文. Swarm — это модульный инструмент распределённого пентеста с открытым исходным кодом. Он использует распределённые очереди задач для организации связи в системе «ведущий-ведомый» и MongoDB для хранения данных. Состоит из распределённой платформы и функциональных...

Cisco-CVE-2020-3452-shodan-scanner

Cisco-CVE-2020-3452-checker simple bash script of Cisco CVE-2020-3452 checker Requirement: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation Disclaimer: The script is for security analysis and research only, hence I would not be liable if it i...

CVE-2024-48914

이 게시물은 EQSTLab이 게시한 연구 문서입니다. 이 취약점을 발견해 주신Rajesh Sharma님께 감사드립니다. CVE-2024-48914 ★ CVE-2024-48914 임의 파일 읽기 및 DoS PoC ★ 설명 CVE-2024-48914 : vendure-ecommerce 임의 파일 읽기 및 DoS 취약점 설명: Vendure는 오픈소스 헤드리스 커머스 플랫폼입니다. 3.0.5 및 2.3.3 이전 버전에서 Vendure의 에셋 서버 플러그인에 존재하는 취약점으로 인해 공격자는 서버 파일 시스템을 탐색할 수 있는 요청을...

CVE-2018-6789

CVE-2018-6789 Environment Setup Install dependencies apt-get install gcc net-tools vim gdb python wget git make procps libpcre3-dev libdb-dev libxt-dev libxaw7-dev Download an old version of exim wget ftp://mirror.easyname.at/exim-ftp/exim/exim4/old/exim-4.89.tar.gz tar -xvzf ./exim-4.89.tar.gz c...

Kiteworks multiple vulnerabilities

RECOMMENDED PRACTICES Fixed in version 9.5.0 and 9.5.1. 2. DESCRIPTION Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative import function allowed an authenticated administrator to write files to arbitrary locations on the...

oxide_hive

Oxide Hive An exploit for the HiveNightmare/SeriousSAM vulnerability that allows you to read registry hives containing sensitive data without admin privileges. If that doesn't sound like privilege escalation I don't know what does. Usage After building the exploit with cargo build and retrieving...

SMB-Session-Spoofing

/ | / || \ / | / | / | \ --.| . . || |/ / \ --. \ --. | | --. \ |/| || \ --. / / / | |/ | ' \ --. \ ' \ / \ / | / \ '| // / | | || |/ / // / /\ \ \ | | | | | // / | | | | || / | /| |// / ||//|/|| || /| ./ / /|| || | | || 환영합니다! 이 유틸리티는 Visual Studio 2019또는 최신 버전로 컴파일할 수 있습니다. 이...

CVE-2024-48705

개요 최근 Wavlink AC1200모델: WL-WN532A3에 대한 보안 연구 중 "/cgi-bin/adm.cgi" 엔드포인트에서 인증 후 명령 주입Post-Authentication Command Injection 취약점이 식별되었습니다. 이 취약점으로 인해 라우터의 자격 증명을 손상시킨 악의적인 공격자가 임의의 셸 명령을 실행할 수 있습니다. 현재 이 취약점에 대한 CVE 번호 할당이 대기 중입니다. 펌웨어 추출 Wavlink AC1200 라우터를 수령한 후, 로드된 펌웨어는 'M32A3V1410230602'로...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

Richsploit

Richsploit Richsploit: RichFaces용 익스플로잇 툴킷. 개요 Richsploit은 RichFaces를 사용하는 JSF 엔드포인트를 익스플로잇하는 데 사용할 수 있습니다. 3.1.0 이상의 모든 버전이 취약합니다. usage: Richsploit -e,--exploit 0: CVE-2013-2165 1: CVE-2015-0279 2: CVE-2018-12532 3: CVE-2018-12533 4: CVE-2018-14667 -p,--payload The file containing serialized...

CLEANSTART-2025-NH78236 In the Zstandard command-line utility prior to v1

Security vulnerability affects the zstd package. In the Zstandard command-line utility prior to v1...

CLEANSTART-2026-XD17499 Arbitrary command execution is possible in Git before 2

Security vulnerability affects the git package. Arbitrary command execution is possible in Git before 2...

Security Bulletin: Multiple Vulnerabilities in IBM DevOps Build.

Summary Multiple vulnerabilities were addressed in IBM DevOps Build 7.2.0.0 Vulnerability Details CVEID:CVE-2026-49432 DESCRIPTION: Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. A remote unauthenticated peer that can reach an exposed STOMP...

THM-Tempest

TryHackMe — Tempest SOC Level 1 Pathway | Incident Response Investigation Overview Full incident response investigation of a compromised Windows machine. The attacker gained initial access via a malicious Word document exploiting CVE-2022-30190 Follina, established persistence, tunneled through t...

CVE-2021-21315-PoC

CVE-2021-21315-systeminformation 이것은 CVE-2021-21315에 대한 개념 증명Proof of Concept입니다. 이 취약점은 Node.JS용 System Information Librarynpm 패키지 "systeminformation"에 영향을 미칩니다. npmjs.com/systeminformation "si.inetLatency, si.inetChecksite, si.services, si.processLoad에 전달되는 서비스 파라미터를 반드시 확인하거나 정리하세요. 문자열만 허용하고...

Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.

Summary IBM Rational Build Forge 8.1.0.0 addresses multiple vulnerabilites Vulnerability Details CVEID:CVE-2026-2391 DESCRIPTION: Summary The arrayLimit option in qs does not enforce limits for comma-separated values when comma: true is enabled, allowing attackers to cause denial-of-service via...

CVE-2026-103473

Deno versions 2.7.0 through 2.9.7 on Windows contain a command injection vulnerability in node:childprocess where shell arguments are escaped for the wrong shell type. Attackers can inject OS commands by passing untrusted arguments with the shell option, allowing arbitrary command execution with...

catphish

CATPHISH Генерируйте похожие домены для фишинговых атак. Проверяйте просроченные домены и их статус категоризации, чтобы обойти прокси-категоризацию. Белые домены идеально подходят для ваших C2-серверов. Отлично подходит для Red Team. Installation bundle install Current Algorithms...

Complete-google-dorks

Complete-google-sql-dorks news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-" ext:pwd inurl:servi...

rayder

Rayder Легковесный инструмент для оркестровки и организации рабочих процессов в командной строке О проекте • Установка • Использование • Конфигурация рабочего процесса • Параллельное выполнение • Рабочие процессы О проекте Rayder — это инструмент командной строки, предназначенный для упрощения...