414505 matches found
uac-a-mola
uac-a-mola ã€ã³ã¹ããŒã« uac-a-mola ãã€ã³ã¹ããŒã«ããã«ã¯ã以äžã®æäœãå®è¡ããå¿ èŠããããŸãã 1. Windows çšã® Python 2.7.x ãããŠã³ããŒãããŠã€ã³ã¹ããŒã«ããŸã ããèªèº«ã®ã€ã³ãã©ã¹ãã©ã¯ãã£ã«å¿ããŠããã€ããªã¯ãã¡ãããå ¥æã§ããŸã: https://www.python.org/downloads/ 2. Python ã®ãã¹ãç°å¢å€æ° path ã«è¿œå ããŸãã以äžã®æé ã§è¡ããŸã: 1. ãã€ã³ã³ãã¥ãŒã¿ ãå³ã¯ãªãã¯ããããããã£ãå·Šã¯ãªãã¯ããŸã 2. ã·ã¹ãã ã®è©³çŽ°èšå®ãå·Šã¯ãªãã¯ããŸã 3. ç°å¢å€æ°ãå·Šã¯ãªãã¯ããŸã 4...
metabadger
Metabadger Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 IMDSv2. Metabadger Purpose and functionality Diagnose and evaluate your current usage of the AWS Instance Metadata Service along with understanding how the service works Prepare you t...
rocacheck
rocacheck Package rocacheck is a Go implementation of the key fingerprint algorithm that checks if an RSA key was generated by broken Infineon code and is vulnerable to factorization via the Return of Coppersmith's Attack ROCA / CVE-2017-15361...
kerbrute
Kerbrute A tool to quickly bruteforce and enumerate valid Active Directory accounts through Kerberos Pre-Authentication Grab the latest binaries from the releases page to get started. Background This tool grew out of some bash scripts I wrote a few years ago to perform bruteforcing using the...
htshells
HTSHELLS - Self contained web shells and other attacks via .htaccess files. Attacks are named in the following fashion, module.attack.htaccess and grouped by attack type in directories. Pick the one you need and copy it to a new file named .htaccess, check the file to see if it needs editing befo...
CVE-2026-85402 code-projects Doctor Appointment System booking.php sql injection
A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...
CVE-2026-85402
A SQL injection vulnerability exists in the code-projects Doctor Appointment System 1.0 , specifically in the file /patient/booking.php . The root cause is the unsanitized manipulation of the doc_id argument, allowing a remote attacker to inject SQL commands without requiring authentication or us...
EUVD-2026-70873
A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...
CVE-2024-23108
CVE-2024-23108: Fortinet FortiSIEM èªèšŒäžèŠã®äºæ¬¡ã³ãã³ãã€ã³ãžã§ã¯ã·ã§ã³ è匱㪠FortiSIEM ã¢ãã©ã€ã¢ã³ã¹äžã§ã«ãŒããšããŠã³ãã³ããç²ç®çã«å®è¡ããæŠå¿µå®èšŒãšã¯ã¹ããã€ã ããã°èšäº æ ¹æ¬åå ãšäŸµå®³ã®çè·¡ã¯ãã¡ã: https://www.horizon3.ai/attack-research/disclosures/cve-2024-23108-fortinet-fortisiem-2nd-order-command-injection-deep-dive 䜿çšæ¹æ³ root@kitploit: % python3...
Proxyshell-Scanner
Proxyshell-Scanner é对 Proxyshell RCEïŒCVE-2021-34423ãCVE-2021-34473ãCVE-2021-31207ïŒç nuclei æ«æåšïŒè¯¥æŒæŽç± Orange Tsai åš Pwn2Own äžåç°ïŒåœ±å Microsoft Exchange æå¡åšã POC èµæº https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html...
Evilginx-Phishing-Infra-Setup
ãã£ãã·ã³ã°ãšã³ã²ãŒãžã¡ã³ãã€ã³ãã©æ§ç¯ã¬ã€ã 泚èš: ãããã¯ç§ã®å人ããŒãã®ã³ããŒã§ããå®å šã«ãããã«äŸåããªãã§ãã ããã ç®æ¬¡ ããã°/ããŒã¯ ã¬ããããŒã /ãã£ãã·ã³ã°ã€ã³ãã©èªåå ãã¡ã€ã³è³Œå ¥ãšã«ããŽãªåé¡ææ³ ããŒã«ã掻çšãããã£ãã·ã³ã°ã¡ãŒã«äœæã®æ¹å ã¡ãŒã«ã®ã¹ãã 床ãã¹ã ãã£ãã·ã³ã°ã¡ãŒã«ã®ãšãã¥ã¬ãŒã / ããŒãã«ããŒã ãã£ãã·ã³ã° ãšã³ã¿ãŒãã©ã€ãºã¡ãŒã«ã»ãã¥ãªãã£ã®ããããŸãšã ã¡ãŒã«ãåä¿¡ç®±ã«é ä¿¡ãã Evilginxã䜿ã£ããã£ãã·ã³ã°ãšã³ã²ãŒãžã¡ã³ã Evilginxãã£ãã·ã¥ã¬ããã®æ§ç¯ Evilginxã€ã³ã¹ããŒã«ã¹ã¯ãªãã...
debian-ssh
Debian OpenSSL Predictable PRNG Links Original URL: http://metasploit.com/users/hdm/tools/debian-openssl/ Mirror Exploit: https://www.exploit-db.com/exploits/5622/ Perl https://www.exploit-db.com/exploits/5720/ Python https://www.exploit-db.com/exploits/5632/ Ruby Recommend Tool: Crowbar able to...
V8-sbx-bypass-collection
V8 æ²ç®±ééž/ç»è¿/è¿è§äžæŒæŽç 究ïŒVRïŒèµæºåé äžäžªäž V8 æ²ç®±æŒæŽç 究ïŒVRïŒåå©çšçžå ³çéŸæ¥éå ç®åœ é®é¢è·èžª æç« è®ºæäžå¹»ç¯ç 讟计ææ¡£ é®é¢è·èžª 2023: "é®é¢çŒå·ïŒ40940619ïŒç±äº ExternalPointerTable äžçç±»åæ çŸå¯¹äºåµå ¥åšå¯¹è±¡è¿äºç²ç³èå¯ŒèŽ V8 æ²ç®±ééž" 2023: "é®é¢çŒå·ïŒ40940623ïŒç±äºå¯¹ Foreigns çç²ç³ç±»åæ£æ¥å¯ŒèŽ V8 æ²ç®±ééž" 2024: "é®é¢çŒå·ïŒ42204606ïŒçŒè§£ RegExp äžçæ²ç®±ééž" 2024: "é®é¢çŒå·ïŒ336507783ïŒV8 æ²ç®±ïŒé²æ¢åºäº Wasm çæ²ç®±ééž "...
CVE-2022-40684
説æ FortiOSãFortiProxyãFortiSwitchManager ã¢ãã©ã€ã¢ã³ã¹ã«åœ±é¿ãã CVE-2022-40684 èªèšŒãã€ãã¹ã®è匱æ§ãæªçšãããšã¯ã¹ããã€ãã å 責äºé ãã®ããŒã«ã¯ãã¢ã³ã¹ãã¬ãŒã·ã§ã³ç®çã§ããæ瀺çãªèš±å¯ãããã·ã¹ãã ã«å¯ŸããŠã®ã¿äœ¿çšããŠãã ããããããžã§ã¯ãã¡ã³ããã¯ããœãããŠã§ã¢ã®èª€çšã«ã€ããŠäžåã®è²¬ä»»ãè² ããŸããã 䜿çšæ¹æ³ root@kitploit: .,-:;//;:=, . :H@@@MM@MH/.,+%;, ,/X+ +M@@M@MM%=,-%HMMM@X/, -+@MM; $M@@MH+-,;XMMMM@MMMM@+-...
esp_wifi_repeater
espwifirepeater A full functional WiFi NAT router and now also a WiFi repeater aka. L2 bridge NEW 2026: 10 years after the first release it has finally become, what it ever pretendend to be:a true WiFi Repeater. In order not to break any existing docs and links, the standard edition still remains...
EDRSandblast-GodFault
EDRSandblast-GodFault Gabriel LandauïŒElastic SecurityïŒã«ãããEDRSandblast ã®æ¹å€ç - 詳现ã¯ä»¥äžã«ããå ã®READMEãåç §ã GodFault ã EDR Sandblast ã«çµ±åããè匱ãªãã©ã€ããŒã䜿çšããã«åãçµæãå®çŸããŸãã åºåäŸ C:\Users\user\Desktop\OffsetsEDRSandblast.exe --kernelmode cmd | | | \ /| | | | | | | | | | | | | | | | | | | | | | | | | | | | | / \ / | ...
CVE-2023-48788
CVE-2023-48788 Fortinet FortiClient EMS SQLæ³šå ¥æŒæŽ FortiClient EMS CVE-2023-48788 æŒæŽçæŠå¿µéªè¯å©çš å客æç« æŽå€è¯Šæ 请è§ïŒ https://www.horizon3.ai/attack-research/cve-2023-48788-fortinet-forticlientems-sql-injection-deep-dive 䜿çšæ¹æ³ root@kitploit: $ python3 CVE-2023-48788.py -t 192.168.1.3 -p 8013 + Sent Message!...
CVE-2026-85401 Dolibarr Legacy File Manager config.inc.php access control
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...
CVE-2026-85401 Dolibarr Legacy File Manager config.inc.php access control
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...
CVE-2026-85401
CVE-2026-85401 affects Dolibarr (versions up to 21.0.4, 22.0.5, and 23.0.3) in the Legacy File Manager component, specifically in the file htdocs/core/filemanagerdol/connectors/php/config.inc.php. The vulnerability is an improper access control flaw exploitable remotely with low privileges, yield...