1066 matches found
PyIris
프로젝트는 현재 버전 3을 위한 주요 재작성 중이며, 현재 버전인 버전 2는 더 이상 사용되지 않게 됩니다. 자세한 내용은 를 참조하십시오. PyIris 프로젝트 업데이트는 곧 제공될 예정이며, ROADMAP.md를 참조하십시오 PyIris 프로젝트는 전적으로 파이썬으로 작성된 모듈식 원격 접근 트로이 목마 툴킷입니다. 사용자가 동적으로 원격 접근 트로이 목마 페이로드를 빌드, 생성 및 인코딩/암호화하여 손상된 다른 호스트를 원격 제어할 수 있게 해줍니다. 여러 운영 체제Windows 및 Linux에서 동작하는 PyIris 데...
jwt-hack
JSON Web Token Hack Toolkit A high-performance toolkit for testing, analyzing and attacking JSON Web Tokens. Installation Cargo cargo install jwt-hack Homebrew brew install jwt-hack Snapcraft Ubuntu sudo snap install jwt-hack From source git clone https://github.com/hahwul/jwt-hack cd jwt-hack...
pythem
pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...
Burp-Encode-IP
소개 이 확장 프로그램은 IP 주소를 잘 알려지지 않은 여러 인코딩 기술로 변환합니다. 이 기술은 SSRF Server-Side Request Forgery, Open Redirect 또는 RFI Remote File Inclusion와 같은 취약점을 테스트하는 데 중점을 둡니다. 요약 간편 설치 Burp Pro가 있다면 BApp에서 직접 설치할 수 있습니다: 확장 프로그램에 ⭐⭐⭐⭐⭐ 별점을 남기는 것을 잊지 마세요 ; 설치 Extensions - Installed - Add - burp-encode-ip.py로 이동합니다...
xssor2
XSS'OR XSS'OR - JavaScriptでハック。 オンライン 試してみてください： https://xssor.io および http://xssor.io/ 主要なモジュールは3つあります：Encode/Decode、Codz、Probe。 インストール Python 3（Django 3.0.）またはPython 2（Django 1.11. ） git clone https://github.com/evilcos/xssor2 または直接ダウンロード cd xssor2 xssor/payload/probe.js を編集 xssor.cmdurl =...
decoder-plus-plus
Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...
the-book-of-secret-knowledge
"지식은 강력하니, 사용할 때 조심하세요! " 영감을 주는 목록, 매뉴얼, 치트시트, 블로그, 해킹 기법, 원라이너, CLI/웹 도구 등이 담겨 있습니다. 📔 무엇인가요? 이 저장소는 제가 업무에서 매일 사용하는 다양한 자료와 도구를 모아 놓은 것입니다. 하나의 문서에 많은 유용한 정보가 담겨 있습니다. 제가 자주 참고하는 소중한 지식의 원천입니다. 🚻 누구를 위한 것인가요? 사실 모든 사람을 위한 것입니다. 여기에서 각자 취향에 맞는 내용을 찾을 수 있습니다. 하지만 정확히 말하자면, 시스템 및 네트워크 관리자, DevOps...
flask-session-cookie-manager
Flask Session Cookie Decoder/Encoder Original author : Wilson Sumanang Fixes and improvements author : Alexandre ZANNI Imported from saruberoz.github.io Depencencies Python 2 or Python 3 itsdangerous Flask Installation Package BlackArch Linux pacman -S flask-session-cookie-manager3,2 Git ArchLinu...
CVE-2021-3129
CVE-2021-3129 生成自定义命令的phar包： php -d'phar.readonly=0' ./phpggc monolog/rce1 system "cat /etc/passwd" --phar phar -o php://output | base64 -w0 php -a 进入php命令行环境 $fp = fopen'php://output', 'w'; streamfilterappend$fp, 'convert.quoted-printable-encode'; $size = ""; fwrite$fp,...
CVE-2026-21015-PHP-Filter-Chain-Arbitrary-File-Read
CVE-2026-21015 – PHPフィルタチェーンによる任意ファイル読み取り プログラムコード PHP // vulnerable.php - Includes file based on user input via filter ?php $file = $GET'page'; // Attempt to sanitize by allowing only .php files, but vulnerable to filter wrapper include"php://filter/convert.base64-encode/resource=" . $file;...
CVE-2025-57926
Sink: WordPress Coreの仕組みによると、投稿コンテンツではXSSが防止されていますが、このプラグインではコンテンツがエンコードされ、レンダリング時にデコードされるため、意図せずXSSの脆弱性が生じます。 PoC: base64でエンコードされたペイロード は PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg== です。...
PT-2026-105149
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
PT-2026-105139
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
PT-2026-105119
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
SUSE CVE-2026-92842
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
DEBIAN-CVE-2026-92842
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
AZL-104898 CVE-2026-92842 affecting package php 8.3.33-1
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
CVE-2026-92842
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
CVE-2026-92842
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...
UBUNTU-CVE-2026-92842
The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...