Noctyra

Noctyra Noctyra 是一个基于 AST 的框架，专为代码转换和去混淆而设计。它提供了一个模块化流水线，用于分析和简化 Python 源代码，解决复杂的表达式和逻辑问题。 概述 该项目旨在提供一个灵活的环境来处理 Python 的抽象语法树。通过使用一系列可插拔的转换器，Noctyra 可以： 简化嵌套的逻辑和条件。 解析静态值和常见的编码模式。 将动态执行块展开为可读代码。 优化并清理混淆结构。 快速开始 前提条件 确保已安装 uv 用于依赖管理。 root@kitploit: uv sync 运行流水线 要处理目标脚本，请使用以下命令： root@kitploit:...

EUVD-2026-38761

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run sandboxed Groovy scripts to execute code outside the sandbox if a suitable script is present on the classpath of the...

CVE-2026-57281

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run sandboxed Groovy scripts to execute code outside the sandbox if a suitable script is present on the classpath of the...

CVE-2026-57281

CVE-2026-57281 affects Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier. The root cause is that the plugin does not reject Groovy AST transformation annotations carrying an extensions member, which can allow attackers to run sandboxed Groovy scripts to execute code outside the sandbo...

CVE-2026-57281

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run sandboxed Groovy scripts to execute code outside the sandbox if a suitable script is present on the classpath of the...

CVE-2019-1003000

A flaw was found in Jenkins Pipeline. The Script Security sandbox protection could be circumvented during the script compilation phase by applying AST, transforming annotations such as @Grab to source code elements. Both the pipeline validation REST APIs and actual script/pipeline execution are...