CVE-2018-0952-SystemCollector

SystemCollector PoC für Privilege Escalation im Windows 10 Diagnostics Hub Standard Collector Service Betroffene Produkte Windows 10 Windows Server Windows Server 2016 Visual Studio 2015 Update 3 Visual Studio 2017 Zusammenfassung Die Diagnostics Hub Packaging-Bibliothek, die vom Windows Standard...

Fastir_Collector

FastIR Collector Wir haben unseren Ansatz zur Live-Forensik-Akquisition geändert, weshalb FastIR Collector nicht mehr gewartet wird. Wir empfehlen stattdessen unseren neuenFastIR Artifacts Collector zu verwenden Konzepte Dieses Tool sammelt verschiedene Artefakte auf einem laufenden Windows-Syste...

uaf-2023-28205

CVE-2023-28205: Vulnerabilidade de Use-After-Free no Apple WebKit Esta vulnerabilidade pode ser explorada através de conteúdo web maliciosamente criado, permitindo que atacantes executem código arbitrário. Descrição O código desencadeia uma vulnerabilidade de use-after-free UAF ao atrasar a adiçã...

Tivoli-Madness

Tivoli-Madness सलाह: CVE-2020-28054: एक प्राधिकरण बायपास कमजोरी जो JamoDat – TSMManager Collector v. = 6.5.0.21 को प्रभावित करती है एक स्टैक आधारित बफर ओवरफ्लो जो IBM Tivoli Storage Manager कमांड लाइन प्रशासनिक इंटरफ़ेस संस्करण 5, रिलीज़ 2, स्तर 0.1 को प्रभावित करता है दुर्भाग्य से, Hackerone के ...

Burp_Collector

Burp Collector Burp Collector ist ein Multi-Processing-Tool, das speziell entwickelt wurde, um Pentester und Bug Bounty Jäger bei Web-/Mobile-Applikationstests zu unterstützen. Mit seinen leistungsstarken Fähigkeiten optimiert es den Prozess des Sammelns und Extrahiertens von Informationen aus Bu...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...

huntr-com-bug-bounties-collector

huntr.com bugs collector New bug bountyvulnerabilities collector Requirements Chrome with GUI If you encounter trouble with script execution, check the status of VMs GPU features, if available. Chrome WebDriver Preview root@kitploit: python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File...

huntr-com-bug-bounties-collector

huntr.com Bug-Bounty-Sammler Neuer Bug BountySchwachstellen Collector Anforderungen Chrome mit GUI Falls Probleme bei der Skriptausführung auftreten, überprüfen Sie den Status der GPU-Funktionen der VMs, falls verfügbar. Chrome WebDriver Vorschau root@kitploit: python3 main.py 2024-02-20...

macos-collector

macos-collector macos-collector - Automatisierte Sammlung von macOS-Forensik-Artefakten für DFIR macos-collector.sh ist ein Shell-Skript, das zum Sammeln von macOS-Forensik-Artefakten von einem kompromittierten macOS-Endpunkt dient, hauptsächlich mithilfe von Aftermath von Jamf Threat Labs...

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

cve-collector

CVE-Collector Einfacher CVE-Collector für die neuesten CVEs, geschrieben in Python Es gibt verschiedene Methoden zum Sammeln der neuesten CVE-Informationen Common Vulnerabilities and Exposures. Dieser Code wurde erstellt, um eine Anleitung zu geben, wie man sammelt, welche Informationen einbezoge...

CVE-2021-26088

PoC for CVE-2021-26088 用 PowerShell 编写 描述 FSSO Collector 中的认证漏洞可能允许未经认证的用户绕过任何防火墙认证规则，通过发送特制的 UDP 登录通知数据包访问受保护的网络。 https://www.fortiguard.com/psirt/FG-IR-20-191 内容 forgeauth.ps1：主要利用脚本 checksrcport.ps1：获取分配给当前用户的源端口范围 免责声明...

latma

Ferramenta de análise de movimento lateral A ferramenta de análise de movimento lateral LATMA coleta logs de autenticação do domínio e ambientes Azure AD e procura por potenciais ataques de movimento lateral e atividades suspeitas. O movimento lateral pode ocorrer no ambiente AD ou entre a nuvem ...

latma

Lateral movement analyzer tool Lateral movement analyzer LATMA collects authentication logs from the domain and Azure AD environments and searches for potential lateral movement attacks and suspicious activity, the lateral movement can be in the AD environment or between cloud and on-prem. The to...

sysflow

SysFlow: Cloud-native system telemetry pipeline This repository hosts the documentation and issue tracker for all SysFlow projects. Quick reference Documentation : the SysFlow Documentation Where to get help : the SysFlow Community Slack Where to file issues : the github issue tracker Source of...

CVE-2020-0674

CVE-2020-0674 CVE-2020-0674 هي ثغرة من نوع use-after-free في محرك jscript القديم. يمكن استغلالها في إنترنت إكسبلورر. هذا الاستغلال من كتابة maxpl0it لكن الثغرة نفسها اكتشفتها Qihoo 360 وقد كانت تُستخدم في البرية. هذا الاستغلال يقوم ببساطة بتشغيل الآلة الحاسبة calc. يمكن العثور على شرح الاستغلال...

GitHound

GitHound Panoramica GitHound è un collector OpenGraph di BloodHound per GitHub, progettato per mappare la struttura e le autorizzazioni della tua organizzazione in un grafico di percorsi di attacco navigabile. Esso: Modella le Entità Chiave di GitHub GHOrganization : I metadati della tua org GitH...

RustHound

Questa versione è compatibile solo conBloodHound Legacy 4.x La versione compatibile conBloodHound Community Edition CE è disponibile qui RustHound-CE. Sommario Limitazione Descrizione Come compilarlo? Usando Makefile Usando Dockerfile Usando Cargo Manualmente per versione statica Linux x8664...