aurora

Aurora 这是一个基于 Frida 构建的概念验证 Web 应用程序。 开始使用： root@kitploit: npm install grunt server 然后在浏览器中访问 http://127.0.0.1:8010/...

QLOG

2022年7月更新 我们创建QLOG是为了更好地了解Windows ETW。QLOG为Windows上的进程创建事件提供了丰富的日志记录。我们已经停止了对QLOG的开发，因为与此同时，一些免费工具已经发布，它们使用ETW进行遥测，并且比QLOG做得更好。好奇吗？请查看Nextron的Aurora Agent。 Qlog是什么 QLOG不使用API钩子，也不需要在目标系统上安装驱动程序，QLOG仅使用ETW来获取其遥测数据。目前QLOG仅支持"进程创建"事件。QLOG作为Windows服务运行，但如果您希望直接将丰富的事件流式传输到控制台，也可以以控制台模式运行。 它是如何工作的...

Aurora-Incident-Response

Aurora 事件响应 轻松完成事件响应文档。由事件响应者为事件响应者开发。 Aurora 将 SANS FOR508 课程中使用的“电子表格之灾”提升到了一个新水平。在领导过许多案件并指导过众多学生如何正确进行事件响应后，我意识到，许多人在记录所有发现时难以保持控制。这不仅妨碍他们了解已有的信息，更不用说发现遗漏了什么。 它旨在用于大大小小的事件响应调查中，以跟踪发现、任务，使报告变得简单，并通常保持对全局的掌控。当前版本已经多次经过实战检验。我会持续修复错误并添加功能，但请记住，这是一个业余项目。因此，任何帮助都值得感激。 横向移动 可视化时间线 1 下载与安装 你可以从 发布页面 ...

aurora-demo-lockfile

aurora-demo-lockfile Demo target for AURORA — the UiPath for Coding Agents challenge submission at mlbrilliance/uipath-for-coding-agents. This repo intentionally contains three vulnerable lockfiles so AURORA's Maestro process OssSupplyChainDefender has something to detect, triage, and remediate. ...

Aurora

Aurora RAT Acerca de Aurora RAT o Herramienta de Administración Remota está escrita en Go. Este proyecto se inició para aprender redes en Go y adentrarme en el campo de la seguridad. Uso Compila y ejecuta Main.go y luego ejecuta el stub en cualquier computadora que desees controlar. Stub El stub ...

AuroraStore

Aurora Store Aurora Store te permite buscar y descargar aplicaciones de la tienda oficial de Google Play. Puedes consultar descripciones de aplicaciones, capturas de pantalla, actualizaciones, reseñas y descargar el APK directamente desde Google Play a tu dispositivo. Para usar Aurora Store, inic...

AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance

Aurora PostgreSQL is a fully managed relational database engine that's compatible with PostgreSQL. The team has identified CVE-2026-11400, an issue in Aurora PostgreSQL using the AWS Advanced JDBC Wrapper Impact An issue in AWS Wrappers for Amazon Aurora PostgreSQL will allow for privilege...

GHSA-MHWW-P97M-3368 AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance

Aurora PostgreSQL is a fully managed relational database engine that's compatible with PostgreSQL. The team has identified CVE-2026-11400, an issue in Aurora PostgreSQL using the AWS Advanced JDBC Wrapper Impact An issue in AWS Wrappers for Amazon Aurora PostgreSQL will allow for privilege...

EUVD-2026-34900

AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance...

PYSEC-2026-1205 AWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instance

Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service RDS...

GO-2026-5601 AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance in github.com/aws/aws-advanced-go-wrapper/auth-helpers

AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance in github.com/aws/aws-advanced-go-wrapper/auth-helpers. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

EUVD-2026-34901

AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance...

GHSA-R236-5PC3-3QCP AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance

Aurora PostgreSQL is a fully managed relational database engine that's compatible with PostgreSQL. An issue in Aurora PostgreSQL using the AWS Go Wrapper waa identified, see CVE-2026-11401. Impact An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to...

AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance

Aurora PostgreSQL is a fully managed relational database engine that's compatible with PostgreSQL. An issue in Aurora PostgreSQL using the AWS Go Wrapper waa identified, see CVE-2026-11401. Impact An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to...

Untrusted Search Path

Overview Affected versions of this package are vulnerable to Untrusted Search Path in the GlobalAuroraPgDatabaseDialect, which is included in the public schema. A low-privileged user can elevate privileges to rdssuperuser by creating a malicious function that executes when another user connects t...

Untrusted Search Path

Overview software.amazon.jdbc:aws-advanced-jdbc-wrapper is an Amazon Web Services AWS Advanced JDBC Wrapper Affected versions of this package are vulnerable to Untrusted Search Path in the GlobalAuroraPgDialect, which is included in the public schema. A low-privileged user can elevate privileges ...

CVE-2026-11400

An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, including rdssuperuser, via a crafted function created by the...

CVE-2026-11401 Privilege Escalation in AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL

An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, including rdssuperuser, via a crafted function created by the...

CVE-2026-11401 Privilege Escalation in AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL

An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, including rdssuperuser, via a crafted function created by the...

CVE-2026-11401

An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, including rdssuperuser, via a crafted function created by the...