1163 matches found
strafer
Strafer Elasticsearch infections are rising exponentially. The adversaries are exploiting open and exposed Elasticsearch interfaces to trigger infections in the cloud and non-cloud deployments. During this talk, we will release a tool named "STRAFER" to detect potential infections in the...
pax
pax Exploit padding oracles for fun and profit! Pax PAdding oracle eXploiter is a tool for exploiting padding oracles in order to: 1. Obtain plaintext for a given piece of CBC encrypted data. 2. Obtain encrypted bytes for a given piece of plaintext, using the unknown encryption algorithm used by...
awesome-ctf-resources
Awesome CTF リソース Capture The Flag CTF のフレームワーク、ライブラリ、リソース、ソフトウェアをまとめたリストです。初心者から経験者まで対応しています 🚩 どんな貢献も歓迎します。PRを送ってください！❤️ -収録されているソフトウェアやリソースは私の所有物ではなく、教育目的でのみまとめられています- 目次 作成 プラットフォーム フォレンジック ステガノグラフィ Web 解答 暗号 エクスプロイト / Pwn フォレンジック Misc リバースエンジニアリング ステガノグラフィ Web リソース オンラインプラットフォーム コラボレーションツール...
ntlm_relay_gat
NTLM Relay Gat Description NTLM Relay Gat is a powerful tool designed to automate the exploitation of NTLM relays using ntlmrelayx.py from the Impacket tool suite. By leveraging the capabilities of ntlmrelayx.py, NTLM Relay Gat streamlines the process of exploiting NTLM relay vulnerabilities,...
burpsuite-copy-as-xmlhttprequest
Copy as XMLHttpRequest BurpSuite extension The extension adds a context menu to BurpSuite that allows you to copy multiple requests as Javascript's XmlHttpRequest, which simplifies PoC development when exploiting XSS. Installation download the latest JAR from releases or build manually add JAR to...
procrustes
Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...
jexboss
JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...
nimbostratus
Nimbostratus Tools for fingerprinting and exploiting Amazon cloud infrastructures. These tools are a PoC which I developed for my "Pivoting in Amazon clouds" talk, developed using the great boto library for accessing Amazon's API. For more information visit the project page Feel free to report...
baserunner
Baserunner A tool for exploring and exploiting Firebase datastores. See this post on our blog for an overview of how Firebase works and why we developed this tool. Set up 1. git clone https://github.com/iosiro/baserunner.git 2. cd baserunner 3. npm install 4. npm run build 5. npm start 6. Go to...
CVE-2026-42671
Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GeoDirectory: from n/a through 2.8.157...
CVE-2023-40213
Missing Authorization vulnerability in Mateusz Czardybon Justified Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Justified Gallery: from n/a through 1.7.3...
Microsoft Windows 安全漏洞
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability that can be exploited by attackers to elevate privileges...
EUVD-2023-52344
Malicious code in bioql PyPI...
EUVD-2023-36836
Malicious code in bioql PyPI...
EUVD-2023-51878
Malicious code in bioql PyPI...
EUVD-2023-50835
Malicious code in bioql PyPI...
EUVD-2025-21632
Malicious code in bioql PyPI...
EUVD-2022-49577
Malicious code in bioql PyPI...