Registry-Recon

Registry-Recon 시스템/AV/EDR 정찰을 수행하는 Cobalt Strike Aggressor 스크립트. 작성자: Jess Hires 설명 레드팀 실무자로서 우리는 종종 손상된 시스템에 대한 세부 정보를 가능한 한 은밀하게 지문 수집하는 도구를 사용합니다. 이 과정에서 일반적으로 사용하는 도구 중 일부는 Windows CLI 명령어를 사용하기 때문에 EDR 제품에 의해 플래그 지정되기 시작했습니다. 이 어그레서 스크립트는 CLI 명령어 없이 네이티브 레지스트리 쿼리만 사용하여 시스템을 조사함으로써 이 문제를 해결하는...

CVE-2018-7600

CVE-2018-7600 - Drupal 7 リモートコード実行 これは、脆弱なDrupal 7インストール（を呼び出し、POSTボディにformbuildidを含めてペイロードをトリガーします。Drupalがキャッシュされた要素をレンダリングするとき、postrenderコールバックが攻撃者制御のマークアップとともに実行され、コマンド実行が可能になります。 説明 このRust CLIは、ターゲットのDrupal...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-autoscalingplans, dl, cyberark-secrets-provider-for-k8s, kind, nats-server-fips, zabbix-agent2, oras-fips, yunikorn-k8shim-fips, commercial-gitlab-rails-ee, kube-mgmt, k8ssandra-operator, crossplane-provider-aws-ce-fips, kates, helmfile,...

CVE-2026-78660 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-autoscalingplans, dl, cyberark-secrets-provider-for-k8s, kind, nats-server-fips, zabbix-agent2, oras-fips, yunikorn-k8shim-fips, commercial-gitlab-rails-ee, kube-mgmt, k8ssandra-operator, crossplane-provider-aws-ce-fips, kates, helmfile,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, zabbix-agent2, yunikorn-k8shim-fips, commercial-gitlab-rails-ee, kube-mgmt, kates, jaeger, helmfile, virt-operator-fips, kubernetes, k6, coder, gobgp, openbao-k8s, azuredisk-csi, gobgp-fips, sops-fips, crossplane-function-go-templatin...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: zabbix-agent2, yunikorn-k8shim-fips, commercial-gitlab-rails-ee, kube-mgmt, jaeger, helmfile, virt-operator-fips, crossplane-provider-gcp-beta-cloudplatform-fips, kubernetes, k6, coder, gobgp, openbao-k8s, azuredisk-csi, gobgp-fips, crossplane-function-go-templating,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, zabbix-agent2, yunikorn-k8shim-fips, commercial-gitlab-rails-ee, kube-mgmt, kates, jaeger, helmfile, virt-operator-fips, crossplane-provider-gcp-beta-cloudplatform-fips, kubernetes, k6, coder, gobgp, openbao-k8s, azuredisk-csi,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, zabbix-agent2, yunikorn-k8shim-fips, commercial-gitlab-rails-ee, kube-mgmt, kates, jaeger, helmfile, virt-operator-fips, kubernetes, k6, coder, gobgp, openbao-k8s, azuredisk-csi, gobgp-fips, sops-fips, crossplane-function-go-templatin...

CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: zabbix-agent2, yunikorn-k8shim-fips, commercial-gitlab-rails-ee, kube-mgmt, jaeger, helmfile, virt-operator-fips, crossplane-provider-gcp-beta-cloudplatform-fips, kubernetes, k6, coder, gobgp, openbao-k8s, azuredisk-csi, gobgp-fips, crossplane-function-go-templating,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, zabbix-agent2, yunikorn-k8shim-fips, commercial-gitlab-rails-ee, kube-mgmt, kates, jaeger, helmfile, virt-operator-fips, kubernetes, k6, coder, gobgp, openbao-k8s, azuredisk-csi, gobgp-fips, sops-fips, crossplane-function-go-templatin...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, zabbix-agent2, yunikorn-k8shim-fips, commercial-gitlab-rails-ee, kube-mgmt, kates, jaeger, helmfile, virt-operator-fips, kubernetes, k6, coder, gobgp, openbao-k8s, azuredisk-csi, gobgp-fips, sops-fips, crossplane-function-go-templatin...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, zabbix-agent2, yunikorn-k8shim-fips, commercial-gitlab-rails-ee, kube-mgmt, kates, jaeger, helmfile, virt-operator-fips, crossplane-provider-gcp-beta-cloudplatform-fips, kubernetes, k6, coder, gobgp, openbao-k8s, azuredisk-csi,...

S3Scanner

S3Scanner 보안이 설정되지 않은 S3 버킷을 찾아 내용을 덤프하는 빠르고 간단한 스크립트입니다 💧 사용 방법 이 도구는 두 부분으로 구성되어 있습니다: 1 - s3finder.py 이 스크립트는 도메인 이름 목록을 받아 해당 도메인이 Amazon S3에서 호스팅되는지 확인합니다. 발견된 S3 도메인은 'domain:region' 형식으로 해당 리전과 함께 파일에 출력됩니다. 설치: 1. 선택 사항 virtualenv venv && source ./venv/bin/activate 2. pip install -r...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, php-fpmexporter, kube-logging-operator, whereabouts, kubernetes-dashboard-metrics-scraper, trivy, cloudflared, spqr, sqlexporter, bank-vaults, argo-rollouts, fulcio, gitness, restic, crossplane-provider-sql, crossplane-provider-aws-cloudfront,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, kube-logging-operator, whereabouts, crossplane-provider-aws-lambda, kubernetes-dashboard-metrics-scraper, trivy, cloudflared, sqlexporter, bank-vaults, argo-rollouts, fulcio, gitness, restic, crossplane-provider-sql,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, php-fpmexporter, kube-logging-operator, whereabouts, crossplane-provider-aws-lambda, kubernetes-dashboard-metrics-scraper, trivy, cloudflared, spqr, sqlexporter, bank-vaults, argo-rollouts, fulcio, gitness, restic, crossplane-provider-sql,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, php-fpmexporter, kube-logging-operator, whereabouts, crossplane-provider-aws-lambda, kubernetes-dashboard-metrics-scraper, trivy, cloudflared, spqr, sqlexporter, bank-vaults, argo-rollouts, fulcio, gitness, restic, crossplane-provider-sql,...

CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, php-fpmexporter, kube-logging-operator, whereabouts, crossplane-provider-aws-lambda, kubernetes-dashboard-metrics-scraper, trivy, cloudflared, spqr, sqlexporter, bank-vaults, argo-rollouts, fulcio, gitness, restic, crossplane-provider-sql,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, php-fpmexporter, kube-logging-operator, whereabouts, kubernetes-dashboard-metrics-scraper, trivy, cloudflared, spqr, sqlexporter, bank-vaults, argo-rollouts, fulcio, gitness, restic, crossplane-provider-sql, crossplane-provider-aws-cloudfront,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, php-fpmexporter, kube-logging-operator, whereabouts, crossplane-provider-aws-lambda, kubernetes-dashboard-metrics-scraper, trivy, cloudflared, spqr, sqlexporter, bank-vaults, argo-rollouts, fulcio, gitness, restic, crossplane-provider-sql,...