3282 matches found
killshot
This project is no longer maintained ! KILLSHOT A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner Why KillShot? You can use this tool to spider your website, gather important information, and automate data collection using tools such as WhatWeb, Host,...
keepassxc-fzf
keepassxc-fzf keepassxc-cli와 fzf를 사용하여 KeePass 데이터베이스를 관리하기 위한 대화형 터미널 인터페이스입니다. 기능 퍼지 파인더fzf를 이용한 대화형 항목 검색 실시간 항목 미리보기 비밀번호 가림 클립보드에 복사 후 자동 삭제: 비밀번호 10초 사용자명, URL, 메모 30초 키파일 지원 환경 변수를 통한 설정 다중 플랫폼 클립보드 지원 xclip, wl-copy, pbcopy 요구 사항 필수 keepassxc-cli - KeePassXC 명령줄 클라이언트 fzf - 명령줄 퍼지 파인더...
RdpThief
RdpThief RdpThief by itself is a standalone DLL that when injected in the mstsc.exe process, will perform API hooking, extract the clear-text credentials and save them to a file. An aggressor script accompanies it, which is responsible for managing the state, monitoring for new processes and...
rConfig <=3.9.4 - SQL Injection
rConfig 3.9.4 and prior has unauthenticated snippets.inc.php SQL injection. Because nodes' passwords are stored in cleartext by default, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10549 info: name: rConfig 3.9.4 or apply th...
chromecookiestealer
Chrome Cookie Stealer and injector Attaches to Chrome using its Remote DevTools protocol and steals/injects/clears/deletes cookies. Heavily inspired by WhiteChocolateMacademiaNut. Cookies are dumped as JSON objects using Chrome's own format. The same format is used for cookies to be loaded. For...
c0ntextomy
c0ntextomy 비공식적 오류informal fallacy이자 잘못된 귀속false attribution의 한 유형으로, 문맥에서 벗어난 인용이 원래 의도를 왜곡하는 방식 Wikipedia - Contextomy 디버그 세션 하이재킹, 원격 코드 실행, 민감한 데이터 유출 취약점을 시연하는 개념 증명Proof of Concept. 권고 macOS/Xcode의 MobileDevice.framework와 iOS/iPadOS/tvOS용 Development Tools의 설계 결함으로 인해, 서비스 연결 설정이 실제 SSL...
mimipenguin
MimiPenguin 2.0 현재 리눅스 데스크톱 사용자의 로그인 비밀번호를 덤프하는 도구입니다. 인기 있는 윈도우 도구 mimikatz의 아이디어를 차용했습니다. 이는 CVE-2018-20781 로 지정되었습니다. 재미있는 사실은 GNOME Keyring 3.27.2 이후에도 여전히 수정되지 않았으며 3.28.0.2-1ubuntu1.18.04.1에서도 여전히 작동합니다. 세부 사항 프로세스를 덤프하고 평문 비밀번호를 포함할 가능성이 높은 줄을 추출하여 메모리 내의 평문 자격 증명을 활용합니다. /etc/shadow의 해시,...
SMWYG-Show-Me-What-You-Got
SMWYG-Show-Me-What-You-Got This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text credentials which was dumped as part of BreachCompilation leak. This database makes finding passwords faster and easier than ever...
CVE-2025-60791
CVE-2025-60791 CVE-2025-60791: 메모리 내 민감 정보의 평문 저장Cleartext Storage of Sensitive Information in Memory 취약점. Easywork Enterprise 2.1.3.354는 메모리 내 민감 정보의 평문 저장Cleartext Storage of Sensitive Information in Memory 취약점에 영향을 받습니다. 이 애플리케이션은 활성화 시도가 실패한 후에도 유효한 장치 바인딩 라이선스 키를 프로세스 메모리에 남겨둡니다. 디버거를 연결하거나...
Rocky Linux 8 [CIQ] Security Update: cloud-init (crlsa-2021_3081)
The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20213081 advisory. cloud-init: randomly generated passwords logged in clear-text to world-readable file CVE-2021-3429 Tenable has extracted the preceding description block directly fr...
keepass_poc
CVE-2022-0725 KeePass CVE-2022-0725에 대한 PoC 재현 단계: Step 1: 터미널 창에서 "journalctl -f"를 실행합니다. Step 2: KeePass에서 비밀번호를 더블 클릭합니다. Step 3: 클리어 타임아웃이 트리거될 때까지 기다립니다. 실제 결과: 터미널 창에 평문 비밀번호가 기록되는 것을 확인합니다. 예상 결과: 평문 비밀번호가 어디에도 기록되지 않아야 합니다. 참고: https://bugzilla.redhat.com/showbug.cgi?id=2052696 참고: 취약점은...
CVE-2026-97164 Joomla Extension - svenbluege.de - Path Traversal in Clear Cache task in Event Gallery extension < 6.5.0
Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in clear cache task in Event Gallery extension 6.5.0 - Using the images parameter of the cache.process task, you can recursively delete any directories that the web server is authorized to write to...
Debian dla-4797 : lemonldap-ng - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4797 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4797-1 [email protected] https://www.debian.org/lts/security/...
CVE-2026-97612
In the Linux kernel, the following vulnerability has been resolved: net: mpls: clear innerprotocol when the last label is popped skbmplspush records the pre-encapsulation network header once, gated on !skb-innerprotocol. skbmplspop never clears that record, so it outlives the encapsulation it...
CVE-2026-18179
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization...
CVE-2026-18179 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization...
CVE-2026-18179 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization...
EUVD-2026-85325
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization...
CVE-2026-18179
The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to an issue where a remote attacker can clear active chat sessions. This is caused by improper authorization (CWE-862). The vulnerability impacts versions 4.0.6.0 - 4.0.6.0 iFix6 Refresh (Operator 4.4.6+20260807.081800...
