CobaltBus

CobaltBus Intégration C2 externe de Cobalt Strike avec Azure Servicebus, trafic C2 via Azure Servicebus Configuration 1. Créez un Azure Service Bus 2. Créez une stratégie d'accès partagé chaîne de connexion qui ne peut qu'envoyer et écouter 3. Modifiez la variable statique connectionString dans l...

xxexploiter

XXExploiter Il génère les charges utiles XML et démarre automatiquement un serveur pour servir les DTD nécessaires ou effectuer l'exfiltration de données. Installation install node and npm if you don't have it yet npm install -g xxexploiter Compilation et exécution à partir des sources Il s'agit...

CVE-2017-9096-iText-XXE

CVE-2017-9096 1. Création du PDF malveillant contenant une XXE Obtenez un PDF contenant un formulaire : wget https://www.pdfscripting.com/public/FreeStuff/PDFSamples/ModifySubmitExample.pdf -O input.pdf Décompresser le PDF Pour cela, vous devez décompresser le PDF avec qpdf --qdf...

CVE-2023-2255

CVE-2023-2255 RCE CVE-2023-2255 et chargement de ressources externes trouvé par @Icare1337 https://nvd.nist.gov/vuln/detail/CVE-2023-2255 Exploit Simple exemple pour déposer un webshell dans le répertoire courant. python3 CVE-2023-2255.py --cmd 'wget...

morty

Morty 웹 콘텐츠 살균 프록시 서비스 Morty는 악성 HTML 태그와 속성을 제거하도록 웹 페이지를 재작성합니다. 또한 타사 정보 유출을 방지하기 위해 외부 리소스 참조를 대체합니다. Morty의 주요 목표는 searx에 대한 결과 프록시를 제공하는 것이지만, 독립형 살균 서비스로도 사용할 수 있습니다. 기능: HTML 살균 HTML/CSS 외부 참조를 로컬로 재작성 JavaScript 차단 쿠키 전달 안 함 리퍼러 전송 안 함 캐싱/Etag 없음 GET/POST 양식 및 IFrame 지원 서비스 남용 방지를 위한 선택적...

XXERipper

XXERipper 보안 전문가를 위한 독립 실행형 블랙박스 XML 외부 엔티티XXE 스캐너. XXERipper는 30개 이상의 공격 기법군에 걸쳐 인밴드in-band, 오류 기반error-based, 블라인드 아웃오브밴드out-of-band XXE를 탐지합니다. 통계적 베이스라이닝, 차등 파서 핑거프린팅, interactsh-client를 통한 아웃오브밴드 확인수동 또는 자동, 브라우저 기반 콘솔, WAF 우회 인코딩, 종단 간 익스플로잇 체인 탐지, 붙여넣기 가능한 셸 스니펫을 포함한 자격 증명 추출, CWE 매핑 결과, 그...

magescan

Mage Scan L'idée derrière cet outil est d'évaluer la qualité et la sécurité d'un site Magento auquel vous n'avez pas accès. Le scénario typique : vous interviewez un développeur potentiel ou évaluez un nouveau client, et vous souhaitez avoir une idée de ce à quoi vous avez affaire. Installation...

CVE-2026-95670

The No External Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Log URL via /goto/base64 Redirect in all versions up to, and including, 5.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2022-35499

В Trimble TM4WEB =22.2.0 конечная точка внешнего просмотра счетов уязвима для отраженного межсайтового скриптинга XSS через внедрение в произвольный параметр, добавленный к URL. Шаг 1 : Следующий пример URL вызовет уязвимость и выполнит javascript-функцию alert, отображающую число 1 в качестве...

CVE-2026-95670

The No External Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.2.0 . The root cause is insufficient input sanitization and output escaping within the Log URL via /goto/{base64} Redirect functionality. This flaw allows unauthenti...

CVE-2026-95670 No External Links <= 5.2.0 - Unauthenticated Stored Cross-Site Scripting via Log URL via /goto/{base64} Redirect

The No External Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Log URL via /goto/base64 Redirect in all versions up to, and including, 5.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

EUVD-2026-91254

The No External Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Log URL via /goto/base64 Redirect in all versions up to, and including, 5.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

WSO2-2020-0731

WSO2-2020-0731: Уязвимости XXE и XSS в WSO2 Carbon Потенциальные XXE и XSS были обнаружены в нескольких продуктах WSO2. Раскрытие информации вендором: Информация о раскрытии и исправлении этой уязвимости от вендора доступна здесь. Почему нет CVE? Ни я, ни вендор не запрашивали CVE для этих...

r2rs

\ / / |/ //|/ \ | | / | | / || / | / / / / / / react2rubyshell !IMPORTANT AVERTISSEMENT : La responsabilité de toute action entreprise avec ce script incombe entièrement à la personne qui l'exécute. Utilisez-le uniquement sur des systèmes que vous possédez ou pour lesquels vous avez une...

MAL-006

MAL-006: XML External Entity в "Try It" в WSO2 ESB В инструменте "Try It" в WSO2 ESB была обнаружена атака типа "XML External Entity" XXE, основанная на ошибках. Почему нет CVE? Поставщик ответил, что "Try it рекомендуется отключать в производственной среде", и никакого публичного раскрытия не...

React Native Community CLI - Unauthenticated OS Command Injection

The Metro development server started by the React Native Community CLI binds to external network interfaces by default and exposes an unauthenticated /open-url endpoint. Affected versions pass the attacker supplied url value straight to the open helper without validating the scheme, allowing an...

GeoServer - XML External Entity Injection

GeoServer 2.26.0 to 2.26.2 and 2.25.6 contains an XML External Entity XXE injection caused by insufficient sanitization of XML input in /geoserver/wms GetMap operation, letting attackers disclose files or cause DoS, exploit requires crafted XML input. id: CVE-2025-58360 info: name: GeoServer - XM...

Apache Tika - XML External Entity Injection

Apache Tika tika-core 1.13-3.2.1, tika-pdf-module 2.0.0-3.2.1, and tika-parsers 1.13-1.28.5 contain an XML External Entity injection caused by processing crafted XFA files inside PDFs, letting attackers perform XXE attacks remotely, exploit requires crafted PDF input. id: CVE-2025-66516 info: nam...

Juniper J-Web - Remote Code Execution

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands id: CVE-2023-36845 info: name: Juniper J-Web - Remote Code...

Apache Struts XWork - XML External Entity Injection

Apache Struts 2.0.0 2.2.1 and 2.2.1 = versions = 6.1.0 contain an XML external entity injection caused by missing XML validation, letting attackers potentially disclose files or cause denial of service, exploit requires crafted XML input id: CVE-2025-68493 info: name: Apache Struts XWork - XML...