MSNSwitch Firmware MNT.2408 - Authentication Bypass

MSNSwitch Firmware MNT.2408 is susceptible to authentication bypass in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh. An attacker can arbitrarily configure settings, leading to possible remote code execution and subsequent unauthorized operations. id: CVE-2022-32429 info: name:...

Gorse < 0.5.10 - Unauthenticated Database Dump

Gorse 0.5.10 contains an authentication bypass caused by empty adminapikey in /api/dump and /api/restore endpoints, letting unauthenticated remote attackers access and modify protected data, exploit requires default empty adminapikey configuration. id: CVE-2026-56782 info: name: Gorse 0.5.10 -...

AOSP-DownloadProviderDbDumperSQLiLimit

AOSP-DownloadProviderDbDumperSQLiLimit PoC Exploiting SQL Injection in Android's Download Provider in Sort Parameter CVE-2019-2196 Security Advisory Android AOSP Download Provider SQL Injection in Query Sort Parameter CVE-2019-2196 Demo...

CVE-2022-26159-Ametys-Autocompletion-XML

CVE-2022-26159-Ametys-Autocompletion-XML A python exploit to automatically dump all the data stored by the auto-completion plugin of Ametys CMS to a local sqlite database file. Features Automatic detection of maximum results returned by the autocompletion plugin. Depth first search to dump all th...

otseca

Herramienta de auditoría de seguridad de código abierto para buscar y volcar la configuración del sistema. Introducción | Descripción | Requisitos | Salida | Parámetros | Informes | Cómo funciona | Otros Introducción El objetivo principal La premisa principal de crear esta herramienta fue la...

Memory-analysis

Memory-analysis Contains tools to perform malware and forensic analysis in Memory. Plugins: Dyrescan.py - parses Dyreconfig in memory. Rat9002.py - parses 9002 rat config in memory. plugx.py - parses plugx config in memory modified to also parse config size: 0x170c. ghostrat.py - parses ghostrat...

ZeroCrumb

ZeroCrumb Volcado de credenciales protegidas App Bound y cookies sin privilegios. Explicación ZeroCrumb elude el Servicio de Elevación de Chrome suplantando una instancia de Chrome mediante Transacted Hollowing, lo que nos permite usar la interfaz COM IElevator para descifrar la App Bound Key...

CVE-2022-24497

CVE-2022-24497 A Zeek detector for CVE-2022-24497: https://vulners.com/cve/CVE-2022-24497 Example notices from the testing PCAP: separator \x09 setseparator , emptyfield empty unsetfield - path notice open 2022-04-13-21-45-25 fields ts uid id.origh id.origp id.resph id.respp fuid filemimetype...

class-dump

class-dump class-dump は、Mach-O ファイルの Objective-C セグメントを調査するためのコマンドラインユーティリティです。クラス、カテゴリ、プロトコルの宣言を生成します。これは 'otool -ov' で提供される情報と同じですが、通常の Objective-C の宣言として表示されます。 最新バージョンと情報は以下で入手できます: http://stevenygard.com/projects/class-dump ソースコードは私の Github リポジトリからも入手できます: https://github.com/nygard/class-dum...

lsarelayx

lsarelayx Introducción lsarelayx es una herramienta de retransmisión NTLM a nivel de sistema diseñada para retransmitir las autenticaciones NTLM entrantes al host en el que se ejecuta. lsarelayx retransmitirá cualquier solicitud de autenticación entrante, incluyendo SMB. Dado que lsarelayx se...

linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...

aws-firmware-dump

aws-firmware-dump Acquire the disks of an AMI you can already launch into a private S3 bucket. No catalog, no product list, no baked-in AMI ids. You pass the AMI id. S3 is the store. Boot, snapshot, compress, and upload all run inside AWS. Local bandwidth is used only if you later pull a specific...

IRTriage

Triage de Respuesta a Incidentes: Recopilación automatizada de información del sistema valiosa para un Analista Forense. IRTriage se ejecutará automáticamente "Como ADMINISTRADOR" en todas las versiones de Windows excepto WinXP. La fuente original fue Triage-ir v0.851, un script Autoit escrito po...

lmg

Linux Memory Grabber A script for dumping Linux memory and creating VolatilityTM profiles. Hal Pomeranz [email protected], 2020-02-01 THANKS! "If I have seen further it is by standing on the shoulders of giants." Issac Newton There are a lot of people who deserve thanks for making this simpl...

ADCSync

ADCSsync Esta es una herramienta que preparé rápidamente para realizar un DCSync utilizando ESC1. Es bastante lenta, pero por lo demás es un medio efectivo para realizar un ataque DCSync improvisado sin utilizar DRSUAPI ni Volume Shadow Copy. Esta es la primera versión de la herramienta y...

CVE-2023-32784-keepass-linux

KeePass 2.53/cmdline y almacenar el pid de aquellos que tengan la palabra clave KeePass en su argumento de línea de comandos. Luego obtendrá las direcciones de los mapas de memoria en /proc//maps que no estén directamente asociados con una biblioteca, es decir, que tengan una ruta de archivo vací...

citrix-2025

Detection Script for Citrix NetScaler appliances Author: NCSC-NL !WARNING Some of these checks are meant to hunt for compromises, while other checks verify if you are compromised. Disclaimer These scripts are provided without any guarantees regarding its effectiveness. The detection capabilities ...

keepass-password-dumper

KeePass 2.X 마스터 비밀번호 덤퍼 CVE-2023-32784 업데이트 해당 취약점은 CVE-2023-32784로 지정되었으며 KeePass 2.54에서 수정되었습니다. 빠른 대응과 창의적인 수정에 대해 Dominik Reichl에게 다시 한번 감사드립니다! 명확히 하자면: 비밀번호는 클립보드에서 복사하는 것이 아니라 키보드로 입력해야 합니다 작동 방식 섹션 참조. 무엇을 할 수 있나요 먼저, KeePass 2.54 이상으로 업데이트하세요. 둘째, 오랫동안 KeePass를 사용해 왔다면 마스터 비밀번호그리고 잠재적으로 ...

mimipenguin

MimiPenguin 2.0 Una herramienta para extraer la contraseña de inicio de sesión del usuario actual de escritorio Linux. Adaptada de la idea detrás de la popular herramienta de Windows mimikatz. Se le asignó CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781. Dato curioso: aún no se ha corregido...

VolExp

VolExp Volatility 탐색기 이 프로그램은 메모리 덤프에 접근할 수 있게 해줍니다. 또한 Volatility 프레임워크https://github.com/volatilityfoundation/volatility의 플러그인으로도 작동할 수 있습니다. 이 프로그램은 Process Explorer/Hacker와 비슷한 방식으로 작동하지만, 추가로 메모리 덤프에 접근하거나Memtriage를 사용하여 컴퓨터의 실시간 메모리에 접근할 수 있습니다. 이 프로그램은 Windows, Linux 및 MacOS 시스템에서 실행할 수 있지...