HTB-Pterodactyl-Writeup

HackTheBox — Разбор Pterodactyl Сложность: Средняя | ОС: Linux openSUSE Leap 15.6 | Сезон: 10 Краткое описание Pterodactyl — это машина на Linux средней сложности, на которой работает панель управления игровыми серверами Pterodactyl. Цепочка атак включает неаутентифицированную уязвимость LFI-to-R...

vue-template-compiler-patched

vue-template-compiler-patched A security-patched version of vue-template-compiler to fix the prototype pollution vulnerability CVE-2024-6783 and the ReDoS vulnerability CVE-2024-9506. Based on [email protected]. Development and issues live in vue-patched. Related If you use the Vue full buil...

CVE-2025-12137

1 Вспомогательная функция для вызова REST API плагина с текущим nonce async function iwpFetchpath, method='GET', body const nonce = window?.wpApiSettings?.nonce || jQuery?.ajaxSettings?.headers?.'X-WP-Nonce'; const res = await fetch$location.origin/wordpress/wp-json/iwp/v1$path, method, headers:...

obfus.h

obfus.h obfus.h is a macro-only library for compile-time obfuscating C applications, designed specifically for the Tiny C tcc you can download it here - Tiny-C-Compiler/releases. It is tailored for Windows x86 and x64 platforms and supports almost all versions of the compiler. Very reliable armor...

sleep_python_bridge

Cobalt Strike Sleep Python Bridge 이 프로젝트는 sleep 언어와 python 언어 사이의 '브리지'입니다. 표준 GUI 클라이언트 없이 Python을 통해 Cobalt Strike 팀서버를 제어할 수 있게 해줍니다. 참고: 이 프로젝트는 매우 베타 단계에 있습니다. 목표는 테스트를 위한 플레이그라운드를 제공하는 것이며, 결코 공식 지원 기능이 아닙니다. 아마도 향후 핵심 제품에 추가될 수 있는 기능일 것입니다. 이 프로젝트는 @BinaryFaultline과 @Mcgigglez16이...

CVE-2025-59528-POC

CVE-2025-59528 - Удаленное выполнение кода в FlowiseAI CustomMCP CVSS 10.0 Критический | Слепое RCE | FlowiseAI Flowise = 2.2.7-patch.1 и 3.0.6 Обзор Критическая уязвимость удаленного выполнения кода в узле CustomMCP проекта FlowiseAI Flowise. Функция convertToValidJSONString передает...

adexplorersnapshot-rs

ADExplorerSnapshot-rs ADExplorerSnapshot.py의 재작성입니다. BloodHound CE JSON 파일들을 모아 .tar.gz로 출력합니다. 사용하기 전에 이 프로젝트의 이슈를 확인하세요. 아직 완전한 대체재는 아닙니다. 설치 Linux 및 Windows용 사전 빌드 바이너리는 릴리스에서 제공됩니다. 사용법 Usage: convertsnapshot OPTIONS Arguments: Input .dat file path Options: -o, --output Output .tar.gz file pa...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

dcshadow

!WARNING 프로덕션 환경에서 실행하지 마십시오. 이 도구는 랩 테스트용으로, 블루 팀이 IoC, 이벤트 유형 및 동작을 식별하는 작업을 하기 위한 것입니다. 또한 이 도구는 있는 그대로 제공됩니다. 여러분이 만들고자 하는 풀 리퀘스트에 대한 표준 검토 외에는 지원 계획이 없습니다. Windows 호스트에서 실행하지 마십시오. Linux 또는 VM에서 실행하세요RPC 서비스 충돌 방지. 이론 이 프로젝트는 Mimikatz의 dcshadow 기법에 대한 순수 파이썬 대안을 목표로 합니다. 여기에는 수정된 crypto,...

invisible_playwright

Playwright gets caught by anti-bots and captchas. This one runs on an anti-detect Firefox with an undetected fingerprint, compatible with your existing Playwright code. How it works Anti-bots ask two questions, and reCAPTCHA, hCaptcha and Cloudflare Turnstile score the answers. invisibleplaywrigh...

ColdWer

Холодная война на вашем конечном устройстве. 🥶 ColdWer ColdWer использует обход PPL через WerFaultSecure.exe, чтобы заморозить процессы EDR/AV и выполнить дамп памяти LSASS на современных системах Windows. C O L D W E R └─┴─┴── WerFaultSecure └─┴──────── LSASS Dump └─┴──────────── Cold Freeze...

IceWarp WebMail 11.3.1.5 - Cross-Site Scripting

IceWarp WebMail 11.3.1.5 is vulnerable to cross-site scripting via the language parameter. id: CVE-2017-7855 info: name: IceWarp WebMail 11.3.1.5 - Cross-Site Scripting author: r3Y3r53 severity: medium description: | IceWarp WebMail 11.3.1.5 is vulnerable to cross-site scripting via the language...

Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion

Oracle GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server. id: CVE-2017-1000029 info: name: Oracle GlassFish Server Open Source Edition 3.0.1 - Local File...

WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting

WordPress Stop User Enumeration 1.3.7 and earlier are vulnerable to unauthenticated reflected cross-site scripting. id: CVE-2017-18536 info: name: WordPress Stop User Enumeration =1.3.7 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress Stop User Enumeration 1.3.7 an...

Safe Editor Plugin < 1.2 - CSS/JS-injection

The safe-editor plugin before 1.2 for WordPress has no sesave authentication, with resultant XSS. id: CVE-2016-10976 info: name: Safe Editor Plugin 1.2 - CSS/JS-injection author: Splint3r7 severity: medium description: | The safe-editor plugin before 1.2 for WordPress has no sesave authentication...

WordPress enhanced-tooltipglossary 3.2.8 - Cross-Site Scripting

WordPress enhanced-tooltipglossary 3.2.8 contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

ScoreMe Theme - Cross-Site Scripting

WordPress ScoreMe theme through 2016-04-01 contains a reflected cross-site scripting vulnerability via the s parameter which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal...

WordPress Photoxhibit 2.1.8 - Cross-Site Scripting

WordPress Photoxhibit 2.1.8 contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials an...

Glances - Information Disclosure

Glances 4.5.2 contains an information disclosure vulnerability caused by the web server running without authentication by default, letting remote attackers access sensitive system information including credentials, exploit requires no special privileges. id: CVE-2026-32596 info: name: Glances -...