hackerEnv

連絡先: hackerEnv hackerEnvは、IPアドレスのスイープ、ポートスキャン、脆弱性の発見と悪用を迅速かつ簡単に行う自動化ツールです。その後、さらにテストを行うための対話型シェルを提供します。また、HTMLとdocx形式のレポートを生成します。nmap、nikto、metasploit、hydraなどの他のツールを使用します。Kali LinuxとParrot OSで動作します。 このツールはプロフェッショナルによってコードされたものではなく、何をしているのかよくわかっていません。 -...

web-hacking-playground

Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...

PMD

实战恶意软件开发 练习 1 - 环境搭建 1. 在虚拟机管理程序中设置一台 Windows 虚拟机。 a. 确保对基础安装创建快照。 2. 下载并安装 Visual Studio 2022 - https://visualstudio.microsoft.com/vs/ a. 安装时选择 Desktop development with C++ 工作负载 3. 下载并安装： DebugView++ - https://github.com/CobaltFusion/DebugViewPP PE Bear - https://github.com/hasherezade/pe-bear...

CVE-2024-22243-CVE-2024-22234

CVE-2024-22243&CVE-2024-22234 のenv 詳細: https://www.cnblogs.com/9eek/p/18037571...

CVE-2024-23897

CVE-2024-23897 環境構築 1. Java インストール sudo apt update sudo apt install openjdk-11-jdk -y 2. Jenkins WARファイルのダウンロード wget https://get.jenkins.io/war/2.441/jenkins.war 3. デフォルトJavaバージョンの変更 - Java 11を選択 sudo update-alternatives --config java 4. バージョン確認 - openjdk version "11.x.x" 確認 java -version 5...

AV-EDR-Lab-Environment-Setup

AV/EDR 实验室环境搭建 最初取自 Maldev Academy Discord，并添加了更多资源。 Notion 笔记：https://an0nud4y.notion.site/AV-EDR-Lab-Env-Setup-130bc870022d8071935cc682d3eb34b9?pvs=4 可用于模拟付费 EDR 所具备的某些功能的示例： SACL - sysmon https://detect.fyi/sysmon-a-viable-alternative-to-edr-44d4fbe5735a?gi=eb4475ea6b3d...

CVE-2024-4577

CVE-2024-4577 環境構築ファイルおよびPHPファイル --poc-- Invoke-WebRequest -Method POST -Headers @"Content-Type" = "application/x-www-form-urlencoded" -Body "" -Uri "http://localhost/test.php?%ADd+allowurlinclude%3D1+%ADd+autoprepend file%3Dphp://input"...

Vulnerability-Wiki-PoC

💠 Vulnerability-Wiki-PoC 🚀 Focused on practical applicati...

Malicious code in cipherflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281ede3c5b3181c2df22a4b32a01453a51ac389a1dfe8bde69d53821cbaf20d4 cipherflow advertises itself as a zero-dependency pure-Python AES/DES library, but cipherflow/environ.py contains a multi-layer-obfuscated payload th...

RISC-V-In-Proactive-computer-Security-PCS-

Exploring RISC-V in Proactive Computer Security PCS PUK pro...

RISC-V-In-Proactive-computer-Security-PCS

Exploring RISC-V in Proactive Computer Security PCS PUK pro...

Exploit for Classic Buffer Overflow in Freefloat Freefloat_Ftp_Server

CVE-2025-5548 Security research and reprod...

Exploit for Path Traversal in Jenkins

CVE-2024-23897 환경 구축 1. Java 설치 sudo apt update sudo apt ins...

Creation of Temporary File With Insecure Permissions

Overview Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions in the getorcreatetmpdir function in fileutils.py. This enables an attacker who can write to /tmp to cause the execution of arbitrary .py files during environment setup. Remediation...

Exploit for CVE-2025-30208

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Overvie...

Exploit for Path Traversal in Lfprojects Mlflow

MLflow CVE-2023-1177 - PoC & Reproduce Repo này chứa mã khai...

Exploit for CVE-2025-31486

CVE-2025-31486-PoC.py url !imagehttps://github.co...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

利用条件 + DefaultServlet 写入功能启用：需在 web.xml 中配置 readonly=false...

Exploit for CVE-2024-9926

wordpress-jetpack-broken-access-control-vulnerable-application...

CVE-2024-39934

Robotmk before 2.0.1 allows a local user to escalate privileges e.g., to SYSTEM if automated Python environment setup is enabled, because the "shared holotree usage" feature allows any user to edit any Python environment...