wsh

wsh wsh pronunciado woosh es un generador de webshells e interfaz de línea de comandos. Esto comenzó como un simple cliente http, ya que interactuar con webshells es tedioso. Hay un formulario, para enviar un comando tienes que escribir en una caja de entrada y presionar un botón. Quería algo que...

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

spyse.py

spyse.py Envoltorio de API de Python y cliente de línea de comandos para las herramientas alojadas en spyse.com. "Spyse es un desarrollador de soluciones completas DAAS Datos como Servicio para profesionales de seguridad en Internet, administradores de sistemas corporativos y remotos, proveedores...

Elite

Deprecated Temporarily The parent Covenant project no longer requires a client-side application. Elite has temporarily been deprecated. Please instead use the web interface included with the Covenant project. Elite may eventually be brought up-to-date with the Covenant project as an alternative...

inspector

MCP Inspector Model Context Protocol MCP サーバーを検査するための開発者ツール。単一のパッケージ @modelcontextprotocol/inspector として提供され、サーバーを検査する 3 つの方法を提供します: Web — Node バックエンドを備えた Vite + React + Mantine のシングルページアプリ。 CLI — 自動化、CI、および高速なエージェントフィードバックループのためのスクリプト可能なコマンドラインクライアント。 TUI — Ink で構築されたインタラクティブなターミナル UI。 3 つすべてが 1...

GHSA-RVX4-FFVW-M9Q3 Composer arbitrary command execution via a malicious package's Perforce source URL

Summary If the p4 Perforce CLI client is installed, a malicious dependency package from a package repository allowing arbitrary perforce source URLs packagist.org is safe could execute arbitrary commands when running composer install or composer update. Composer passed a package's Perforce source...

SUSE CVE-2026-64621

FreeRDP before 3.28.0 affected 3.x through 3.27.1 contains a double-free vulnerability in freerdpclientrdpfileapplytosettings client/common/file.c when parsing the selectedmonitors field of a .rdp connection file. The MonitorIds array is allocated through the settings object, and a raw non-owning...

Weblate: SSRF via URL Parser Differential in `normalize_request_url` (wlc)

The Weblate CLI client wlc was found to be vulnerable to Server-Side Request Forgery SSRF due to a differential in URL parsing between the urllib and urllib3 libraries. The vulnerability was present in the normalizerequesturl function, which was meant to validate that outgoing API requests stayed...

EUVD-2023-1221

Malicious code in bioql PyPI...

CVE-2024-36066: Undefined Security Weakness

The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CMP includes password-based MAC as one of the options for message integrity and authentication the...

CVE-2024-36066

The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CMP includes password-based MAC as one of the options for message integrity and authentication the...

CVE-2023-29194

Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently create a keyspace containing / characters such that from that point on, anyone who tries to view keyspaces from VTAdmin will receive an error. Trying to list all the keyspaces...

Pulsar - Network Footprint Scanner Platform - Discover Domains And Run Your Custom Checks Periodically

Pulsar is an automated network footprint scanner for Red Teams, Pentesters and Bounty Hunters. Its focused on discovery of organization public facing assets with minimal knowledge about its infrastructure. Along with network data visualization, it attempts to give a basic vulnerability score to...