awswaf

AWS WAF Amazon Web Services Web Application Firewall 솔버 개요 이 프로젝트는 AWS WAF 챌린지를 위한 Golang 및 Python 기반 솔버를 제공합니다. gemini를 사용하여 "token" / "Invisible" 유형과 "Captcha" 유형을 모두 지원합니다. ⭐️ 지지하기 유용하다고 생각되면 저장소에 스타를 눌러주세요! 여러분의 지원은 프로젝트 개선에 도움이 됩니다. ❤️ 사용법 Golang root@kitploit: package main import...

CVE-2026-9160

CVE-2026-9160 is a template engine vulnerability in Arma Digital Media Inc. Website Template (affected through version 11092026 ). The root cause is improper neutralization of special elements in the template engine, which allows code injection . The vulnerability is rated CVSS 4.3 (MEDIUM) with ...

EUVD-2026-76158

Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-9160 CSTI in Arma Digital's Website Template

Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-9160 CSTI in Arma Digital's Website Template

Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

spark-exploit

보안이 설정되지 않은 Apache Spark 클러스터에서의 임의 코드 실행 익스플로잇 방법 아래 단계를 따르세요: root@kitploit: $ git clone https://github.com/akhld/spark-exploit.git $ cd spark-exploit 원격 코드 실행 exploit.scala를 열고, 실행하려는 코드로 다음 코드를 교체하세요! root@kitploit: val exploit = sc.parallelize1 to 1.mapx= //Replace these with whatever you wa...

EUVD-2026-76157

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range...

CVE-2026-89090

CVE-2026-89090 affects the event stream header decoder in the AWS SDK for Go v2 (versions before release-2026-03-23). An unrecovered panic occurs when a crafted event stream response frame contains a header value type outside the valid range, allowing an unauthenticated remote actor to terminate ...

CVE-2026-89090 Denial of service in the event stream header decoder in AWS SDK for Go v2

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range...

CVE-2026-89090 Denial of service in the event stream header decoder in AWS SDK for Go v2

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range...

CVE-2026-89090 Denial of service in the event stream header decoder in AWS SDK for Go v2

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range...

MISP v2.5.46

MISP - Threat Intelligence Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cyber security indicators and threats about cyber security incidents analysis and malware analysis. MISP is designed by and for incident analysts, security and IC...

Parsero

Parsero란 무엇인가? Parsero는 Python으로 작성된 무료 스크립트로, 웹 서버의 Robots.txt 파일을 읽고 Disallow 항목을 확인합니다. Disallow 항목은 검색 엔진에 웹 서버에 호스팅된 디렉터리나 파일이 인덱싱되면 안 된다는 것을 알려줍니다. 예를 들어, "Disallow: /portal/login"은 www.example.com/portal/login의 콘텐츠가 Google, Bing, Yahoo 등 크롤러에 의해 인덱싱되는 것이 허용되지 않는다는 의미입니다. 이것은 관리자가 검색 엔진과...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 · Honor WIN RT AAK-AN00 Temporary Root Resear...

bios_memimage

biosmemimage RAM 이미징 유틸리티. 원본 코드 작성자: Bill Paul [email protected] https://citp.princeton.edu/research/memory/code/...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to prototype pollution due to flatted ( CVE-2026-33228 )

Summary Potential vulnerabilities in flatted package CVE-2026-33228 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-33228 DESCRIPTION: flatted is a circular JSON parser. Prior to version 3.4.2, the parse function in flatted can use...

Bella

Bella Bella는 macOS용 순수 파이썬 기반의 사후 침투 데이터 마이닝 도구 및 원격 관리 도구입니다. 🍎 💻 무엇인가요? Bella는 강력한 순수 파이썬 기반의 macOS 사후 침투 및 원격 관리 도구입니다. Bella는 일명 서버로, macOS 10.6 이상을 실행하는 모든 시스템에 배포할 수 있는 SSL/TLS 암호화 리버스 셸입니다. Bella는 다음과 같은 기능을 제공합니다: 1. SSH 인스턴스를 에뮬레이트하는 의사 TTY 대부분의 함수에 대한 Ctrl+C 지원, 스트리밍 출력, 인라인 bash 스크립팅 완...

Jasmin-Ransomware

Jasmin ランサムウェア RedTeamsが使用するセキュリティテスト用の強力なランサムウェアツール ビデオチュートリアル · バグを報告 · 無料キージェンをリクエスト 目次 1. 免責事項 ⚠️ 2. プロジェクトについて 使用技術 ワークフロー 3. セットアップと実行 前提条件 インストール Webサーバー 暗号化ペイロード 復号ツール 4. ライセンス 5. 連絡先 プロジェクトについて 💡 最初に免責事項をお読みください ⚠️⚠️...

CVE-2019-5420

CVE-2019-5420 Ruby-on-Rails offers three different environments it can run in: development, test and production. You should obviously not have code running in development or test available on the internet but it as always happens for example in staging environments. Ruby-on-Rails uses...

C2Bridge

C2Bridge를 사용하면 개발자가 새로운 맞춤형 통신 프로토콜을 만들고 Covenant 내에서 빠르게 활용할 수 있습니다. C2Bridges C2Bridge는 Covenant 코드를 수정하지 않고 아웃바운드 명령 및 제어 프로토콜을 개발하는 데 사용됩니다. 새로운 리스너 통합에 익숙한 개발자의 경우, 새 C2 프로토콜은 인터페이스에 완전히 통합된 일급first-class 새 리스너 유형으로 추가되어야 합니다. 그러나 일부 상황에서는 개념 증명proof-of-concept이나 새 프로토콜 테스트를 위해 Covenant 외부에...