ObfuXtreme

如果您觉得这个 GitHub 仓库有用，请考虑给它一颗星！⭐ ⚡ ObfuXtreme — 高级 Python 代码混淆引擎 ObfuXtreme 是一个高级 Python 代码混淆引擎，专注于 结构性混淆 、AST 层变换 和 运行时载荷保护 。 它专为 安全研究 、防御分析 和 逆向工程研究 而设计 — 不用于恶意用途。 ✔ 生成严重混淆的 Python 代码 ✔ 破坏静态分析和基于签名的检测 ✔ 使用安全的 AST 变换（无字节码补丁） ✔ 运行时加载器，支持加密载荷执行 ⚠️ 免责声明与伦理 负责任且合乎道德地使用。 ObfuXtreme 是一个 概念验证（PoC） 项目，严格用于...

CVE-2026-57281

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run sandboxed Groovy scripts to execute code outside the sandbox if a suitable script is present on the classpath of the...

CVE-2019-1003002

A flaw was found in Jenkins Pipeline. Script Security sandbox protection could be circumvented during the script compilation phase by applying AST transforming annotations such as @Grab to source code elements. This allows users with Overall/Read permission, or able to control Jenkinsfile or...

Sandbox Bypass in Script Security and Pipeline Plugins

Script Security sandbox protection could be circumvented during the script compilation phase by applying AST transforming annotations such as @Grab to source code elements. Both the pipeline validation REST APIs and actual script/pipeline execution are affected. This allowed users with Overall/Re...