651 matches found
python-uncompyle6
|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: uncompyle6 A native Python cross-version decompiler and fragment decompiler. The successor to decompyle, uncompyle, and uncompyle2. I gave a talk on this at BlackHat Asia 2024 . Introduction...
DBC2
DBC2 ============ 最新/当前版本: 0.2.6 作者: Arno0x0x - @Arno0x0x DBC2 DropboxC2 是一款模块化后渗透工具，包含运行在受害者机器上的代理、运行在任何机器上的控制器、PowerShell 模块，以及作为通信手段的 Dropbox 服务器。 该项目最初受出色的 Empire 框架启发，同时也是出于学习 Python 的目的。 查看此功能介绍及基本功能演示 v0.0.1： 0.2.x 版本的新特性： 该应用程序根据 GPLv3 许可证 的条款分发。 架构 功能 DBC2 主要功能： 多种存根工具（PowerShell...
external_c2_framework
externalc2 フレームワーク Cobalt Strike の External C2 仕様（仕様書）で説明されている仕様と併せて使用するための Python フレームワークです。 主な設計目標は、external c2 仕様を非常にモジュール化された実装とし、Cobalt Strike 用の C2 チャネルを簡単に実装できる十分な抽象化を提供することです。理想的には、ユーザーは transport モジュールと encoder モジュールを作成し、設定ファイルに値を記入するだけで、新しいチャネルを実装できます。 Dropbox トランスポート設定...
DropboxC2C
DropboxC2C DropboxC2Cは、コマンド＆コントロール操作にDropboxインフラストラクチャを使用するポストエクスプロイテーションエージェントです。 悪意のある目的で使用しないでください。作者はこのプログラムの誤用について一切の責任を負いません。 Dropbox-C2Cは、サードパーティをコマンド＆コントロールに使用するための私の古いプロジェクトです。EmpireのチームがDropboxをC2Cとして実装したので、これを公開しています。 構造 main.py - すべてのエージェントを管理する「サーバー」部分。 agent.py -...
lanGhost
⚠️ 경고! 이 프로젝트는 더 이상 유지 관리되지 않으며 예상대로 작동하지 않을 수 있습니다. Telegram으로 제어 가능한 LAN 드롭박스 챗봇 기능: 설치: 경고: lanGhost는 Raspberry Pi Raspbian /Kali for RPi용으로 설계되었습니다. 다른 데스크톱 배포판에서 실행하면 문제가 발생하거나 의도한 대로 작동하지 않을 수 있습니다. Raspberry Pi 와 SD 카드에 깨끗한 Raspbian/Kali 가 필요합니다. 백그라운드에서 실행되는 다른 것이 있으면 안 되기 때문입니다. Pi를 부팅하고,...
CVE-2024-49607
CVE-2024-49607 WP Dropbox Dropins = 1.0 - 未認証の任意ファイルアップロード 説明: WP Dropbox Dropins プラグインは、バージョン 1.0 までの全バージョンにおいて、任意ファイルアップロードの脆弱性の影響を受けます。これにより、未認証の攻撃者が影響を受けるサイトのサーバー上に任意のファイルをアップロードできる可能性があり、リモートコード実行が可能になる場合があります。 root@kitploit: Published: 2024-10-17 00:00:00 CVE: CVE-2024-49607 CVSS:...
CVE-2026-81102
The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcpserverdash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the loopback...
EUVD-2026-67030
The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcpserverdash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the loopback...
CVE-2026-81102 Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validation
The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcpserverdash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the loopback...
PT-2026-82575
Name of the Vulnerable Software and Affected Versions Dash MCP server affected versions not specified Description In network mode, the server binds its listener to the loopback address but fails to verify the host name of incoming requests. Within src/mcp server dash.py, the server is configured...
CVE-2026-15958
The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...
EUVD-2026-52590
The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...
CVE-2026-15958 Easy Dropbox Integration < 2.2.0 - Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX
The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...
CVE-2026-15958
The CVE concerns the Easy Integration for Dropbox WordPress plugin prior to version 2.2.0. The issue is an authorization failure: several file-management AJAX actions are accessible to unauthenticated users, enabling them to list, download, and upload arbitrary files across the connected Dropbox ...
[SECURITY] Fedora 43 Update: rclone-1.74.3-1.fc43
"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...
[SECURITY] Fedora 44 Update: rclone-1.74.3-1.fc44
"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...
Security update for perl-Net-Dropbox-API (moderate)
openSUSE Security Update: Security update for perl-Net-Dropbox-API Announcement ID: openSUSE-SU-2026:0217-1 Rating: moderate References: 1240884 Cross-References: CVE-2024-58036 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description:...
When IT Support Calls: Dissecting a ModeloRAT Campaign from Teams to Domain Compromise
Overview Attackers do not need to break into the front door when they can convince employees to open it for them through the tools they already trust. In April 2026, Rapid7 investigated an enterprise intrusion that began with a Microsoft Teams message from a fake “IT Support” account and quickly...