CVE-2021-44168

Exploit for CVE-2021-44168 Purpose Exploit CVE-2021-44168 to drop a shell on a Fortigate firewall and enable its access via LDPRELOAD tricks that execute when running some of Fortigate's CLI commands. You get a root shell. Use Compile: gcc -o gensrc-vispkgfile gensrc-vispkgfile.c -lz Run: %...

azuredevops-enum

ado-enum PAT개인 액세스 토큰을 사용하여 Azure DevOps 조직을 열거하기 위한 명령줄 도구입니다. Azure DevOps REST API를 쿼리하여 프로젝트, 리포지토리, 서비스 연결, 빌드, 빌드 아티팩트 및 보안 설정을 표시합니다. ADO 환경에 대한 공인된 보안 평가 중에 유용합니다. 범위는 ADOKit와 유사합니다. 주요 차이점: Python 구현으로 더 이식성이 뛰어나며, 읽기 전용 열거에 중점을 두고 권한 열거 기능을 제공합니다. Azure DevOps enumeration tool — project...

crlfi-scanner

CRLFISCANNER CRLFISCANNER는 페이로드 기반 HTTP 요청을 전송하고 응답 헤더를 분석하며, 선택적으로 결과를 API/Telegram 봇에 보고하여 CRLF 인젝션 취약점을 탐지하는 전문 Node.js CLI 도구입니다. 🎯 CRLFISCANNER란 무엇인가요? CRLFISCANNER 는 보안 연구자들이 대상 엔드포인트에서 CRLF 인젝션을 신속하게 탐지할 수 있도록 만들어진 버그 바운티 자동화 CLI입니다. 다음과 같은 방식으로 스캔을 간소화합니다: CRLF 페이로드 동적 로드 각 대상 URL에 페이로드 주...

python-paddingoracle

python-paddingoracle: A portable, padding oracle exploit API UPDATED FOR PYTHON 3 python-paddingoracle is an API that provides pentesters a customizable alternative to PadBuster and other padding oracle exploit tools that can't easily without a heavy rewrite be used in unique, per-app scenarios...

CVE-2024-23897

CVE-2024-23897 — Jenkins CLI 임의 파일 읽기 빠른 시작 1. Start lab docker-compose up -d 2. Wait 30s, then download CLI tool curl -O http://localhost:8080/jnlpJars/jenkins-cli.jar 3. Exploit — read /etc/passwd full file java -jar jenkins-cli.jar -s http://localhost:8080 -http connect-node @/etc/passwd 4. Re...

DiffCatcher

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. A Rust CLI tool that recursively discovers Git repositories, captures state changes,...

CVE-2018-6789-Python3

CVE-2018-6789 Exim 4.90.1 RCE Vulnerability Exim 4.90.1 RCE Vulnerability remake for Python3 with arguments passed from CLI Usage: python3 exim.py -t localhost -p 25 -lh 192.168.0.159 -lp 1337...

MAL-2026-17536 Malicious code in @angulaar/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d4a58c855f9b549d39f194483ee19730552bbb47a279f73237c8a403708d20 Package name '@angulaar/cli' double 'a' is a one-character edit of '@angular/cli'; README, LICENSE headers, and source files are copied verbatim from...

Malicious code in @angulaar/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d4a58c855f9b549d39f194483ee19730552bbb47a279f73237c8a403708d20 Package name '@angulaar/cli' double 'a' is a one-character edit of '@angular/cli'; README, LICENSE headers, and source files are copied verbatim from...

pwneye

pwneye は、ONVIF および RTSP サービスを公開するIPカメラを扱うための、焦点を絞ったポータブルな攻撃的セキュリティツールです。セキュリティ研究者やハッカーが、単一のCLIワークフローから、ディスカバリ、認証テスト、メタデータ収集、ストリーム検証、録画、および後続アクションを簡単に処理できるようにすることを目的としています。 現在サポートされている機能には、以下のものがあります。 WS-DiscoveryによるローカルネットワークのONVIFディスカバリ 単一の認証情報またはユーザー名/パスワードファイルを使用したONVIF認証およびマルチスレッドブルートフォース...

Cisco ASA OS Command Injection (CVE-2021-1476)

A vulnerability in the CLI of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device. The vulnerability is due to...

PT-2026-106088

Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/community/ manifests provide fixed, publicly known SECRET KEY and LIVE SERVER SECRET KEY defaults that remain active when operators do not override them. The top-level setup.sh...

Cisco ASA OS Command Injection (CVE-2020-3167)

A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabilit...

CVE-2024-23741

CVE-2024-23741 An issue in Hyper through 3.4.1 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. There is a tool designed to automate the process of searching for vulnerabilities in electron:...

Malicious code in @angulra/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3158beab2ea0d9f8e28d488f124268c8c9a00a3a0f5599823c4d13f741ac40f The package name @angulra/cli is a character-swap of @angular/cli and copies the legitimate Angular CLI's metadata description, repository, homepage,...

MAL-2026-17495 Malicious code in @angulra/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3158beab2ea0d9f8e28d488f124268c8c9a00a3a0f5599823c4d13f741ac40f The package name @angulra/cli is a character-swap of @angular/cli and copies the legitimate Angular CLI's metadata description, repository, homepage,...

MAL-2026-17502 Malicious code in botmaker-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fdc86c67d202ca9938942ef7786534d1b72169187cce13b1cefd8899fa54aa On npm install, postinstall.js collects the installer's hostname, username, current working directory, architecture, platform, and network interface...

Malicious code in botmaker-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fdc86c67d202ca9938942ef7786534d1b72169187cce13b1cefd8899fa54aa On npm install, postinstall.js collects the installer's hostname, username, current working directory, architecture, platform, and network interface...

jenkins_scan

jenkinsscan Find Jenkins environment and check for CVE-2024-23897 How it works Jenkins Detection Tests the paths: /, /login, /oops, /api/json, /cli, /jenkins/, /jenkins/api/json Identifies via: 1. Header X-Jenkins — most reliable, also returns the version 2. Header X-Hudson — older instances 3...

ForensiX

⬡ ForensiX — 디지털 포렌식 인텔리전스 프레임워크 Ameer Rasim 제작 | 버전 2.0.0 ███████╗ ██████╗ ██████╗ ███████╗███╗ ██╗███████╗██╗██╗ ██╗ ██╔════╝██╔═══██╗██╔══██╗██╔════╝████╗ ██║██╔════╝██║╚██╗██╔╝ █████╗ ██║ ██║██████╔╝█████╗ ██╔██╗ ██║███████╗██║ ╚███╔╝ ██╔══╝ ██║ ██║██╔══██╗██╔══╝ ██║╚██╗██║╚════██║██║ ██╔██╗...