3479 matches found
RustHound-CE
RustHound-CE is a cross-platform and cross-compiled BloodHound collector tool written in Rust, making it compatible with Linux, Windows, and macOS. It therefore generates all the JSON files that can be analyzed by BloodHound Community Edition. This version is only compatible with BloodHound...
docker-bench-security
Docker Bench for Security The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.6.0. We are making this available as an open-source utili...
bugsy
Bugsy Bugsy es una herramienta de interfaz de línea de comandos CLI que proporciona corrección automática de vulnerabilidades de seguridad para tu código. Es la versión de edición comunitaria de Mobb, la primera herramienta automática de corrección de vulnerabilidades de seguridad independiente d...
BloodHound-Legacy
La Edición Legado de BloodHound v4 ha quedado obsoleta Este repositorio es para BloodHound Legacy versión 4, que se actualizó por última vez en 2023 y ya no recibe mantenimiento. Se archivará en un futuro cercano. Por favor, use la nueva BloodHound Community Edition BloodHound Legacy ha sido...
Taipan
Taipan es ahora un proyecto patrocinado. El patrocinador de la Comunidad recibirá acceso a la última versión de Taipan Community Edition. La versión gratuita se lanza después de tres meses a partir de la fecha de lanzamiento. Para saber más visita: https://github.com/enkomio-sponsor/info o...
openvas-scanner
OpenVAS Scanner 这是 Greenbone 社区版（Greenbone Community Edition）的 OpenVAS 扫描器。 它用于 Greenbone 企业级设备，是一个功能完整的扫描引擎，可执行持续更新和扩展的漏洞测试（VT）源。 发布版本 所有发布文件均使用 Greenbone Community Feed 完整性密钥签名。该 gpg 密钥可从 https://www.greenbone.net/GBCommunitySigningKey.asc 下载，其指纹为 8AE4 BE42 9B60 A59B 311C 2E73 9823 FAA6 0ED1...
semgrep-rules
semgrep-rules 欢迎！此仓库包含 Semgrep 的 社区版规则。 除了此仓库中的规则，Semgrep Registry 还提供专有的 Pro 规则，提供额外的语言覆盖，并解锁跨文件和深度数据流分析。 查找规则：通过 Semgrep Registry 搜索 搜索社区版和 Pro 规则。 使用规则：通过 Semgrep AppSec Platform 使用这些规则扫描你的代码。 贡献规则：参见 为 Semgrep 规则做贡献 了解更多信息。 使用 Semgrep 规则仓库 要开始编写和使用 Semgrep 规则，请参阅 学习 Semgrep 语法 和 编写规则。然后，使用...
cent
Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place. Install root@kitploit: go install -v github.com/xm1k3/cent/v2@latest Or download from releases after installation run cent init to initialize cent with the...
dradis-ce
Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...
vulhunt
VulHunt Community Edition VulHunt is a vulnerability hunting framework developed by Binarly's Research team. It is designed to help security researchers and practitioners identify vulnerabilities in software binaries and UEFI firmware. VulHunt is built on top of Binarly's Binary Analysis and...
payara__Payara_CVE-2022-37422_5-2022-2
Payara Platform Community Edition Create. Innovate. Elevate. Payara Platform Community Edition features open source server runtimes for development projects and containerized Jakarta EE and MicroProfile applications. Payara Server Community is a cloud-native, innovative open source middleware...
CVE-2022-40317
CVE-2022-40317 Stored XSS in Notes A stored XSS was found in the notes section of the application while we were pentesting a client that was using OpenKM. Basically, when storing notes, somehow normal HTML was allowed and it was rendered as is. As you know, However, we found that using...
CVE-2023-7028
CVE-2023-7028 ⚠️ 此漏洞利用工具仅供防御用途，应由网络安全专业人员用于识别可能存在漏洞的 GitLab 服务器。 描述 CVE-2023-7028 - 无需用户交互的密码重置账户接管（GitLab 社区版和企业版） 受影响的产品和版本： 产品| 受影响版本 ---|--- GitLab 社区版和企业版| 16.1.6 16.2.9 16.3.7 16.4.5 16.5.6 16.6.4 16.7.2 CVSS: 10.0 被积极利用: 是 补丁: 是 缓解措施: 否 帮助 root@kitploit: usage: CVE-2023-7028.py -h -u URL -t...
CVE-2024-35584
CVE-2024-35584 OpenSIS Authenticated SQL Injection Description There exists a SQL injection vulnerability in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php. This finding affects OpenSis Community Edition 9.1 to 8.0 and possibly versions below. Proof of Concept In...
Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting
Open-School 3.0, and Community Edition 2.3, allows cross-site scripting via the osv/index.php?r=students/guardians/create id parameter. id: CVE-2019-14696 info: name: Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting author: pikpikcu severity: medium description: Open-School 3.0, and...
CVE-2023-49964
CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco An issue was discovered in Hyland Alfresco Community Edition =7.2.0. By inserting malicious content in the folder.get.html.ftl file, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage...
CVE-2023-30533
POC - CVE-2023-30533 A POC for CVE-2023-30533 Copied as per: https://cdn.sheetjs.com/advisories/CVE-2023-30533: root@kitploit: All releases of SheetJS Community Edition up to version 0.19.2 are affected. This includes: root@kitploit: - scripts and modules on the SheetJS CDN through version 0.19.2...
CVE-2020-13159
CVE-2020-13159 - Artica Proxy before 4.30.000000 Community Edition allows Multiple OS command injection. Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 000...
xlsx
SheetJS The SheetJS Community Edition offers battle-tested open-source solutions for extracting useful data from almost any complex spreadsheet and generating new spreadsheets that will work with legacy and modern software alike. SheetJS Pro offers solutions beyond data processing: Edit complex...