35 matches found
hackerEnv
联系我: hackerEnv hackerEnv 是一款自动化工具,能够快速轻松地对IP进行扫描、端口扫描、漏洞检测和利用。然后,它为您提供一个交互式shell以进行进一步测试。同时,它会生成HTML和docx格式的报告。 它使用了其他工具,如nmap、nikto、metasploit和hydra。适用于Kali Linux和Parrot OS。 此工具并非由专业人士编写,我也不知道自己在做什么。 - 运行此程序即表示您同意不对任何公共、企业或未经授权的网络运行它。 - 仅当您获得授权时才可执行。...
web-hacking-playground
Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...
PMD
Desarrollo Práctico de Malware Ejercicio 1 - Configuración del Entorno 1. Configura una máquina virtual de Windows dentro de un hipervisor. a. Asegúrate de tomar una instantánea de tu instalación base. 2. Descarga e instala Visual Studio 2022 - https://visualstudio.microsoft.com/vs/ a. Selecciona...
CVE-2024-22243-CVE-2024-22234
CVE-2024-22243 和 CVE-2024-22234 的环境 详情:https://www.cnblogs.com/9eek/p/18037571...
CVE-2024-23897
CVE-2024-23897 环境搭建 1. 安装 Java sudo apt update sudo apt install openjdk-11-jdk -y 2. 下载 Jenkins WAR 文件 wget https://get.jenkins.io/war/2.441/jenkins.war 3. 更改默认 Java 版本 - 选择 Java 11 sudo update-alternatives --config java 4. 检查版本 - 确认 openjdk version "11.x.x" java -version 5. 运行 Jenkins java...
AV-EDR-Lab-Environment-Setup
Configuración del entorno de laboratorio AV/EDR Tomado inicialmente del Discord de Maldev Academy y se añadieron más recursos. Notas de Notion: https://an0nud4y.notion.site/AV-EDR-Lab-Env-Setup-130bc870022d8071935cc682d3eb34b9?pvs=4 Un ejemplo de cosas que se pueden usar para emular ciertas...
CVE-2024-4577
Archivo de configuración del entorno CVE-2024-4577 y archivo PHP --poc-- Invoke-WebRequest -Method POST -Headers @"Content-Type" = "application/x-www-form-urlencoded" -Body "" -Uri "http://localhost/test.php?%ADd+allowurlinclude%3D1+%ADd+autoprepend file%3Dphp://input"...
Vulnerability-Wiki-PoC
💠 Vulnerability-Wiki-PoC 🚀 Focused on practical applicati...
Malicious code in cipherflow (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281ede3c5b3181c2df22a4b32a01453a51ac389a1dfe8bde69d53821cbaf20d4 cipherflow advertises itself as a zero-dependency pure-Python AES/DES library, but cipherflow/environ.py contains a multi-layer-obfuscated payload th...
RISC-V-In-Proactive-computer-Security-PCS-
Exploring RISC-V in Proactive Computer Security PCS PUK pro...
RISC-V-In-Proactive-computer-Security-PCS
Exploring RISC-V in Proactive Computer Security PCS PUK pro...
Exploit for Classic Buffer Overflow in Freefloat Freefloat_Ftp_Server
CVE-2025-5548 Security research and reprod...
Exploit for Path Traversal in Jenkins
CVE-2024-23897 환경 구축 1. Java 설치 sudo apt update sudo apt ins...
Creation of Temporary File With Insecure Permissions
Overview Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions in the getorcreatetmpdir function in fileutils.py. This enables an attacker who can write to /tmp to cause the execution of arbitrary .py files during environment setup. Remediation...
Exploit for CVE-2025-30208
CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Overvie...
Exploit for Path Traversal in Lfprojects Mlflow
MLflow CVE-2023-1177 - PoC & Reproduce Repo này chứa mã khai...
Exploit for CVE-2025-31486
CVE-2025-31486-PoC.py url !imagehttps://github.co...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
利用条件 + DefaultServlet 写入功能启用:需在 web.xml 中配置 readonly=false...
Exploit for CVE-2024-9926
wordpress-jetpack-broken-access-control-vulnerable-application...
CVE-2024-39934
Robotmk before 2.0.1 allows a local user to escalate privileges e.g., to SYSTEM if automated Python environment setup is enabled, because the "shared holotree usage" feature allows any user to edit any Python environment...