OpenWire-CVE-2023-46604-Investigation

OpenWire-CVE-2023-46604-Investigation OpenWire Lab During my shift as a Tier 2 Security Operations Center SOC Analyst, I received an escalation from a Tier 1 analyst regarding a publicly accessible server that had been observed communicating with multiple suspicious external IP addresses. In...

CyberResponders

CyberResponders: A Terminal Game CyberResponders is a terminal-based cybersecurity training game that enables players to respond to different cyber incident scenarios. Here, they have five chances to enter the correct command before the system becomes completely compromised, resulting in a game...

sentinel-mcp

SentinelMCP — AI-Powered Cyber Defense System Google Cloud Hackathon submission — Autonomous threat detection and remediation orchestrated by Google Cloud Agent Builder Vertex AI Agent , powered by Gemini 2.0 Flash, Model Context Protocol MCP, and Dynatrace observability. The Problem Security tea...

sunsetscan

SunsetScan Network security auditing for humans — powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...

Log4Shell-CVE-2021-44228-Demo

CVE-2021–44228 Demo 1. CVE-2021–44228 소개 2021년 말 사이버 보안 업계에서 가장 큰 뉴스는 Log4j의 취약점이었습니다. CVE-2021-44228로 번호가 부여되었으며 Log4Shell 이라고도 불립니다. CVSS 취약점 평가 시스템에서 가장 심각한 등급인 10점 을 받았으며, 최근 Heartbleed와 ShellShock에 이어 가장 중대한 취약점으로 간주됩니다. 어떤 이들은 이를 '핵폭탄급 취약점'이라고 묘사할 정도로 그 영향이 매우 깊습니다. 이 과제는 CVE-2021-44228을...

cve-2015-1187-dir820l-firmware-reverse-engineering

cve-2015-1187-dir820l-firmware-reverse-engineering Static firmware reverse engineering of CVE-2015-1187 in the D-Link DIR-820L using Strings, Ghidra, and Binwalk. Done by extracting MIPS root filesystem, identifying the ncc2 backend handler, and tracing pingaddr through command construction to...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: ES File Explorer Unauthenticated HTTP Service An independently implemented, safety-conscious research harness and technical analysis for CVE-2019-6447 , an unauthenticated HTTP service exposed by vulnerable versions of ES File Explorer for Android. Authorized research only. Use thi...

CVE-2026-33718

CVE-2026-33718 OpenHands는 Git Diff 처리기를 통한 명령 삽입Command Injection 취약점이 있습니다. 기부 PayPal 또는 아래 QR 코드를 스캔하여 이 프로젝트의 유지보수를 지원해 주세요. ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 인가된 환경에서만 사용하세요: 로컬 가상 머신 Docker 컨테이너 격리된 랩lab 환경 인가된 침투 테스트 환경 예시 설정: git clone cd Project use python follow below Create a virtual...

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report This repository contains a professional bug bounty report demonstrating the successful exploitation of a Blind SSRF vulnerability that reached an internal CGI endpoint vulnerable to Shellshock CVE-2014-6271. Remote...

CVE-2018-16763

CVE-2018-16763 Analyzer CVE-2018-16763 Analyzer is a small Python project for analyzing CVE-2018-16763 against FUEL CMS targets. It focuses on checking whether a target appears vulnerable and on displaying command output in a cleaner, more readable way when the application response is noisy. This...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted bsc1280590. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for...

subzy

Subzy can-i-take-over-xyz のレスポンスフィンガープリントと照合して動作するサブドメイン乗っ取りツールです。 インストール go install -v github.com/PentestPad/subzy@latest $GOBIN と $GOPATH が適切に設定されている場合、プログラムを次のように実行します: $ subzy --help Subdomain takeover tool Usage: subzy command Available Commands: help Help about any command run Run subzy...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75805: NULL Pointer Dereference in CMP Client...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75805: NULL Pointer Dereference in CMP Client...

TarantuBench

TarantuBench v1 A benchmark for evaluating AI agents on web security challenges, generated by the TarantuLabs engine. What is this? TarantuBench is a collection of 100 vulnerable web applications, each containing a hidden flag TARANTU.... An agent's job is to find and extract the flag by...

OST-C2-Spec

ドラフト: ディスカッション のリクエスト 概要 この文書は、OST C&C 仕様書バージョン 1 の概要を提供します。 また、メッセージとそれらのメッセージ内のフィールドの詳細な説明を提供することを目的としています。 はじめに この仕様書の背後にある動機は、逐語的に実装できる、または単にプロジェクト開発者へのインスピレーションとして役立つ C&C メッセージングプロトコル（タスキング、構造化出力、ピアツーピアルーティングを含む）を提供することです。 この文書は C&C が何であるかを説明することを意図したものではありません。 読者は C&C...

CVE-2026-22226

CVE-2026-22226 CVE-2026-22226에 대한 개념 증명 TP-Link Archer Wi-Fi 라우터 VPN 클라이언트의 인증된 LAN 측 OS 명령 삽입 취약점 개요 VPN 클라이언트 컨트롤러는 사용자가 제어하는 항목 설명des을 약한 검증 정규식을 사용하여 UCI 구성에 저장합니다. 나중에 항목을 다시 읽을 때WebUI에서 편집 중, getovpndata는 des를 인용된 셸 명령에 보간하여 추가 소독 없이 os.execute에 전달합니다: -- getovpndata in vpn.lua...

radar

Radar Radar is a small but efficient network scanner written in Rust heavily inspired by masscan. These are the main features: Userspace TCP, UDP, DHCP and ARP implementations, thanks to pnet Being asynchronous Randomized IP/ports scanning with no pre-allocation/shuffling Rate limiting Monitor mo...

CVE-Wazuh

Wazuh Manager — エージェント制御の DataValue.index を介した inventorysync における NDJSON インジェクション - ドラフト 登録済みエージェントは、DataValue.index を介して任意の OpenSearch bulk 操作を混入させることができます。GHSA-ff9g-85jq-r3g3 ⚡ 簡単な使い方 このプロジェクトは、以下のような安全かつ許可された環境でのみ使用してください: ローカル仮想マシン Docker コンテナ 分離されたラボ環境 許可されたペネトレーションテスト環境 セットアップ例: git clone c...

standalone_tdo

TDO Standalone Extractor A powerful, standalone command-line tool for extracting Cyber Threat Intelligence CTI from documents using Large Language Models with advanced structured output capabilities. 🚀 Features Multi-format Document Support : PDF, DOCX, TXT, and Markdown files Advanced LLM...