go-rpmdb

go-rpmdb Library for enumerating packages in an RPM DB Packages file without bindings. package main import "fmt" "log" rpmdb "github.com/knqyf263/go-rpmdb/pkg" func main if err := run; err != nil log.Fatalerr func run error db, err := rpmdb.Open"./Packages" if err != nil return err pkgList, err :...

burp-vulners-scanner

burp-vulners-scanner Descripción Plugin de escáner para Burp Suite basado en la API de la base de datos de vulnerabilidades de Vulners.com Buscar huellas en la respuesta HTTP inspirado en el plugin 'Software Version Reporter' y verificar la versión encontrada en la base de datos de vulnerabilidad...

assless-chaps

assless-chaps Crack MSCHAPv2/NTLMv1 challenge/responses quickly using a database of NT hashes Introduction Assless CHAPs is an efficient way to recover the NT hash used in a MSCHAPv2/NTLMv1 exchange if you have the challenge and response e.g. from a WiFi EAP WPE attack. It requires a database of ...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. ============================================ | Collecting...

solarflare

solarflare Herramienta de volcado de credenciales para SolarWinds Orion Publicación en blog: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Créditos a @asolino, @gentilkiwi y @skelsec por ayudarme a descifrar DPAPI...

xtrace-sdk

La base de datos vectorial cifrada. Tus datos nunca salen de tu máquina en texto plano. Documentación | X | LinkedIn Gestiona tu memoria de IA → mem.xtrace.ai ¿Qué es XTrace? Todas las bases de datos vectoriales del mercado requieren que entregues tus datos a un tercero en texto plano. XTrace no ...

writehat

WriteHat is a reporting tool which removes Microsoft Word and many hours of suffering from the reporting process. Markdown -- HTML -- PDF. Created by penetration testers, for penetration testers - but can be used to generate any kind of report. Written in Django Python 3. Features: Effortlessly...

CVE-2026-105158 RainyGao DocSys Database Management BaseController.java BaseController.createDBForMysql sql injection

A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...

CVE-2026-105158

A SQL injection vulnerability exists in RainyGao DocSys versions up to 2.02.85 within the Database Management component. The flaw is located in the BaseController.createDBForMysql function of the BaseController.java file, where improper handling of the url argument allows for remote code executio...

EUVD-2026-92109

A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...

Grafana-CVE-2021-43798

CVE-2021-43798 Grafana Unauthorized arbitrary file reading vulnerability 8.3.1 2021-12-07 Security: Fixes CVE-2021-43798 . For more information, see our blog https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/ Example: get db password...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Roninwebsite is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby librariesronin-rb for a variety of security tasks, such as encoding/decoding data...

MAD-CAT

MAD-CAT Herramienta de Automatización de Corrupción de Datos Meow Attack Descripción general MAD-CAT Herramienta de Automatización de Corrupción de Datos Meow Attack es una herramienta de seguridad integral diseñada para simular ataques de corrupción de datos contra múltiples sistemas de bases de...

sqlancer

SQLancer es una herramienta para probar automáticamente Sistemas de Gestión de Bases de Datos DBMS con el fin de encontrar errores en su implementación. Es decir, encuentra errores en el código de la implementación del DBMS, no en las consultas escritas por el usuario. SQLancer ha encontrado...

sqlancer

SQLancer is a tool to automatically test Database Management Systems DBMSs in order to find bugs in their implementation. That is, it finds bugs in the code of the DBMS implementation, rather than in queries written by the user. SQLancer has found hundreds of bugs in mature and widely-known DBMSs...

ecologyExp.jar

ecologyExp.jar Weaver OA database configuration file reader java -jar ecologyExp.jar http://127.0.0.1 Source Code package com.test; import org.apache.http.HttpEntity; import org.apache.http.client.methods.CloseableHttpResponse; import org.apache.http.client.methods.HttpGet; import...

Process-Dump

Process Dump Process Dump is a Windows reverse-engineering command-line tool to dump malware memory components back to disk for analysis. Often malware files are packed and obfuscated before they are executed in order to avoid AV scanners, however when these files are executed they will often...

CVE-2024-10140

CVE-2024-10140 El script explota una vulnerabilidad de inyección SQL encontrada en el endpoint /php/managesupplier.php?action=delete&id=32. La vulnerabilidad permite a un atacante inyectar comandos SQL arbitrarios a través del parámetro id, comprometiendo potencialmente la base de datos y...

move-vulnerability-database

Welcome to the Move Vulnerability Database MVD v3.0! A comprehensive collection of vulnerability patterns in the Move ecosystem. What's Inside Vulnerability Patterns - Categorized security issues with examples and severity ratings Appendix - Audit reports and protocol references Learning...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...