cve-2025-32462

cve-2025-32462 sudo/NEWS at SUDO188 · sudo-project/sudo · GitHub sudo -h--host 문서에는 -h가 -l하고만 함께 사용할 수 있다고 적혀 있다. 이후 업데이트에서 sudo -h를 -e, -i 등과 함께 사용할 수 있게 되었다. sudo --host-h -l--list /etc/sudoer.d는 시스템에서 사용자가 어떤 권한을 가지고 있는지 확인하는 데 사용된다. 이 권한은 우회될 수 있으며, 사용자가 한 시스템에서 가진 권한을 다른 시스템에서 가질 수 있는 권한으로...

OFFAT

OWASP OFFAT OWASP OFFAT OFFensive Api Tester est conçu pour tester automatiquement les API à la recherche de vulnérabilités courantes après avoir généré des tests à partir d'un fichier de spécification OpenAPI. Il offre la possibilité de fuzzer automatiquement les entrées et d'utiliser les entrée...

PowerUpSQL

PowerUpSQL inclut des fonctions qui prennent en charge la découverte de SQL Server, l'audit des configurations faibles, l'escalade de privilèges à grande échelle et les actions de post-exploitation telles que l'exécution de commandes système. Il est destiné à être utilisé lors de tests d'intrusio...

openwisp-controller

openwisp-controller .. image:: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml/badge.svg :target: https://github.com/openwisp/openwisp-controller/actions/workflows/ci.yml :alt: CI build status .. image:: https://coveralls.io/repos/openwisp/openwisp-controller/badge.svg...

CAPE

CAPEv2 Python3 est désormais disponible CAPEv2 Avec la fin de vie imminente de Python 2 1er janvier 2020, CAPEv1 sera abandonné. Veuillez passer à la version Python 3 dès que possible. CAPE : extraction de configuration et de charge utile des malwares CAPE est un bac à sable pour malwares. Il est...

cloudmapper

CloudMapper Note the Network Visualization functionality command prepare is no longer maintained. CloudMapper helps you analyze your Amazon Web Services AWS environments. The original purpose was to generate network diagrams and display them in your browser functionality no longer maintained. It...

changeme

changeme Un scanner d'identifiants par défaut. À propos changeme reprend là où les scanners commerciaux s'arrêtent. Il se concentre sur la détection des identifiants par défaut et de backdoor, et pas nécessairement des identifiants courants. Son mode par défaut consiste à analyser les identifiant...

heimdall_webserver

ATTENTION, this project is on a beta version, there's a lot of bugs and problem, if you want to help the project use this on a lab not in yout real environment. NO, there's not https implemented yet, it will come on the next upgrade Heimdall It's a tool to manage vulnerables packages in your nix...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

opendcim-exploit

openDCIM - SQL-инъекция до удаленного выполнения кода через отравление конфигурации Цепочка удаленного выполнения кода, нацеленная на форму конфигурации LDAP install.php в openDCIM. Создана на основе фреймворка VulnCheck go-exploit. Цепочка уязвимостей | CVE| CWE| Описание ---|---|---|--- 1|...

How-To-Secure-A-Linux-Server

Comment sécuriser un serveur Linux Un guide évolutif pour sécuriser un serveur Linux qui, espérons-le, vous apprend également un peu sur la sécurité et pourquoi elle est importante. Table des matières Introduction Objectif du guide Pourquoi sécuriser votre serveur Pourquoi encore un autre guide...

censys-python

Censys Python Library !WARNING DEPRECATION NOTICE : The Censys Search v1 and v2 APIs will be deprecated soon. Please migrate to the new Censys Platform. 📖 New API Documentation : https://docs.censys.com/reference/get-started 📦 New Python SDK : censys/censys-sdk-python 🖥️ New CLI Tool cencli:...

sitrep

SitRep Extensible, configurable host triage. Purpose SitRep is intended to provide a lightweight, extensible host triage alternative. Checks are loaded dynamically at runtime from stand-alone files. This allows operators to quickly modify existing checks, or add new checks as required. Checks are...

CVE-2022-24716

CVE-2022-24716 Icinga Web 2 est une application logicielle qui surveille les systèmes informatiques et les réseaux. Elle dispose d'une interface web permettant aux utilisateurs de visualiser et de gérer les ressources système. Cependant, il existe une vulnérabilité dans Icinga Web 2 qui permet à...

ritm

Ruby In The Middle HTTP/HTTPS interception proxy Ruby in the middle RITM is an HTTP/HTTPS interception proxy with on-the-fly certificate generation and signing, which leaves the user with the full power of the Ruby language to intercept and even modify requests and responses as she pleases...

r77-rootkit

r77 Rootkit Fileless ring 3 rootkit r77 is a ring 3 rootkit that hides everything: Files, directories Processes & CPU/GPU usage Registry keys & values Services TCP & UDP connections Junctions, named pipes, scheduled tasks Hiding by prefix Everything that starts with "$77" is hidden. Configuration...

evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: BRIEF OVERVIEW ::. Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...

sshhipot

Version 2 is under development. Please switch to the v2 branch, build, and run with -h. SSHHiPot High-interaction SSH honeypot ok, it's really a logging ssh proxy. Still more or less a work-in-progress. Feel free to go install this repository if you'd like to try it. Run it with -h to see more...

jarm

JARM Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security TLS server fingerprinting tool. JARM fingerprints can be used to: Quickly verify that all servers in a group have the same TLS configuration. Group disparate servers on the internet by...