tsharkVM

💡 Обновление: tshark-opensearch Более новое приложение tshark-opensearch теперь доступно. Вы можете найти его в репозитории https://github.com/h21-lab/apps-collection-info. 👉 Получить доступ Виртуальное устройство tshark ELK VM Этот проект создает виртуальную машину, которая может использоваться...

CVE-2019-9596-and-CVE-2019-9597

CVE-2019-9596 и CVE-2019-9597 Эксплойт CSRF для Darktrace https://www.peerlyst.com/posts/exploiting-two-zero-days-in-a-darktrace-appliance-cve-2019-9596-and-cve-2019-9597-gerwout-van-der-veen https://seclists.org/bugtraq/2019/May/54...

CVE-2007-3830

CVE-2007-3830 IBM Proventia Sensor Appliance — множественные уязвимости проверки входных данных Публикация на Exploit-db: https://www.exploit-db.com/exploits/30290/ Статья Exploit-db: https://www.exploit-db.com/docs/english/13081-having-fun-with-proventia-gx5108-&-gx5008-insecurities.pdf...

ibmsecurity

IBM 샘플 코드 이 저장소에는 각각의 REST API를 사용하여 IBM Security Appliances를 관리하는 Python 코드가 포함되어 있습니다. ISAM 어플라이언스용 코드가 가장 성숙합니다. ISDS 어플라이언스용 코드는 개발 중입니다. ISVG 어플라이언스용 코드는 완전히 새로 작성되었습니다10.0.1.0 이상에서만 테스트됨. 요구 사항 이 패키지에는 Python v3.9 이상이 필요합니다. 다음 Python 패키지가 필요합니다: 1. requests - REST API 호출용 2. PyYAML - 샘플 코드...

CVE_2024_20356

CVE-2024-20356 이것은 Cisco CIMC의 Command Injection 취약점인 CVE-2024-20356에 대한 개념 증명입니다. 작성자: Aaron, SherllyNeo에 의해 Rust로 포팅됨 전체 기술적 세부 사항은 https://labs.nettitude.com/blog/cve-2024-20356-jailbreaking-a-cisco-appliance-to-run-doom에서 확인할 수 있습니다. 설치 root@kitploit: cargo build --release && cp...

DraculaOS

Файл OVA на основе Kali Linux для OSINT-исследований и киберразведки. ЗАГРУЗКА Ссылку для скачивания OVA-файла DRACULA OS можно найти по следующей ссылке. Размер загружаемого OVA-файла DraculaOS составляет 8 ГБ. https://easyupload.io/o1y3jt...

Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software is vulnerable to local file inclusion due to directory traversal attacks that can read sensitive files on a targeted system because of a lack of proper input validation of URLs in HTTP requests processe...

ioc-scanner-CVE-2019-19781

CVE-2019-19781 침해 지표 스캐너 이 저장소는 CVE-2019-19781과 관련된 Citrix ADC 어플라이언스의 침해 탐지 유틸리티를 포함합니다. 유틸리티와 그 리소스는 FireEye Mandiant 조사 중 수집된 침해 지표를 인코딩합니다. 자세한 내용은 이 도구의 출시를 발표한 블로그 게시물을 참조하십시오. 요약하면 유틸리티는 다음을 수행합니다: 기존 침해를 식별하기 위해 최선을 다합니다. 다음은 수행하지 않습니다 : 항상 100% 침해를 식별하지는 않습니다. 장치가 악용에 취약한지 여부를 알려주지 않습니다...

CVE-2019-19781

CVE-2019-19781 Citrix ADC Удаленное выполнение кода Использование Python: python CVE-2019-19781.py http://192.168.3.244 0x01 Скачать NSVPX-ESX-13.0-47.22nc64.zip https://www.citrix.com/downloads/citrix-gateway/...

CVE-2023-1671-POC

Dork fofa title="Sophos Web Appliance" || app="Sophos-Web-Appliance" && title!="Sophos Web Appliance：错误请求" ZoomEye title:"Sophos Web Appliance"-title:"Sophos Web Appliance: Forbidden"-title:"Sophos Web Appliance: Bad Request" Shodan title:"Sophos Web Appliance" 사용법 root@kitploit: python...

nbox-pwnage

nbox-pwnage root@kitploit: Here comes the paintrain! . lol . lol . lol o o ==== OO|nn. || | nbox | oo oo oo 'oo OOOO-| oo\ | +--+--+--+--+--+--+--+--+--+-$1-+--+--+--+--+--+--+ 1. 자신만의 nbox 어플라이언스를 생성하세요: vagrant up 2. vagrant ssh로 어플라이언스에 SSH로 접속하세요. 3. cd /vagrant && ./checker.sh로 일부 nbox 취약점을...

Ivanti Cloud Services Appliance - Path Traversal

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality. id: CVE-2024-8963 info: name: Ivanti Cloud Services Appliance - Path Traversal author: johnk3r severity: critical description: | Path Traversal in the Ivanti CSA befo...

check-your-pulse

check-your-pulse Эта утилита может помочь определить, существуют ли индикаторы компрометации IOCs в файлах журналов Pulse Secure VPN Appliance для CVE-2019-11510. Агентство по кибербезопасности и защите инфраструктуры CISA стало свидетелем многих орга низаций, которые были взломаны, несмотря на...

ioc-scanner-CVE-2019-19781

Сканер индикаторов компрометации для CVE-2019-19781 Этот репозиторий содержит утилиту для обнаружения компрометации устройств Citrix ADC, связанной с CVE-2019-19781. Утилита и её ресурсы кодируют индикаторы компрометации, собранные в ходе расследований FireEye Mandiant. Чтобы узнать больше,...

CVE-2025-40602

CVE-2025-40602 📌 Обзор CVE-2025-40602 — это уязвимость локального повышения привилегий , затрагивающая устройства серии SonicWall Secure Mobile Access SMA 1000. Уязвимость существует в Appliance Management Console AMC из-за недостаточных проверок авторизации , что позволяет аутентифицированному...

Quest KACE System Management Appliance 8.0.318 - Remote Code Execution

The '/common/downloadagentinstaller.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system. id: CVE-2018-11138 info: name: Quest KACE System Management Appliance 8.0.318 - Remote Code Executi...

F5 BIG-IP Appliance Mode - Command Injection

When running in Appliance mode, an authenticated user assigned the Administrator role may bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. id: CVE-2022-41800 info: name: F5 BIG-IP Appliance Mode - Command Injection author: dwisiswant0 severity: high description...

CVE-2021-44529

CVE-2021-44529 공급업체 홈페이지: https://www.ivanti.com/ 소프트웨어 링크: https://forums.ivanti.com/s/article/Customer-Update-Cloud-Service-Appliance-4-6 버전: CSA 4.6 4.5 - 2021년 8월 지원 종료EOF 실행 root@kitploit: python3 exploit.py 예시 root@kitploit: python3 exploit.py 'https://x.x.x.x' 'ls' LDMGdeploy.pdf...

CVE-2026-79944

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-79945

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit...