kali-rpi-luks-crypt

LUKS를 사용한 Raspberry또는 유사 아키텍처에서 Kali의 전체 디스크 암호화 이 HOWTO는 Raspberry또는 유사 아키텍처, 예: ODROID-C2에서 LUKS를 사용한 전체 디스크 암호화로 Kali를 실행하는 데 dedicated 됩니다. 약간 오래된 문서 여기를 기반으로 합니다. 동기 Raspberry Pi또는 유사한 소형 저전력 하드웨어에서 Kali를 LAN 환경에 "throw-away-hackbox"로 배포하는 것은 분명 유용합니다. 그러나 수집된 데이터를 비밀로 유지하는 것은 필수 요구 사항입니다. 여...

incarcero

Incarcero: 악성코드 분석을 위한 스위스 아미 나이프 악성코드 분석은 폭탄을 해체하는 것과 같습니다. 목표는 해를 끼치도록 만들어진 프로그램을 분해하고 이해하는 것이며, 이러한 프로그램은 분석을 더 복잡하게 만들기 위해 종종 난독화예: 패킹되어 있습니다. Incarcero는 사용자 상호 작용 없이 악성코드 분석에 맞게 사전 구성된 악성코드 분석 도구와 보안 설정을 갖춘 가상 머신VM을 생성하는 도구입니다. 또한, 이 저장소에는 아마도 가장 큰 악성코드 소스 코드 컬렉션 과 인기 있는 온라인 데이터베이스에서 악성코드 샘플...

CVE-2025-14998

Wordpress Branda – 화이트 라벨 및 브랜딩, 무료 로그인 페이지 커스터마이저 getrow $wpdb-prepare "SELECT FROM $wpdb-signups WHERE activationkey = '%s'", $key ; if ! empty $signup || $signup-active $meta = maybeunserialize $signup-meta ; if ! empty $meta'password' if 'yes' === $signuppassworduseencryption...

GHSA-R9C8-GCJP-XFWH RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation

Summary A flaw in the recvContent function allows a malicious AMQP server to trigger an Out-of-Memory OOM error, forcing the host operating system or container runtime to immediately terminate the client process. Vulnerability Details When receiving message content payloads, the client processes...

RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation

Summary A flaw in the recvContent function allows a malicious AMQP server to trigger an Out-of-Memory OOM error, forcing the host operating system or container runtime to immediately terminate the client process. Vulnerability Details When receiving message content payloads, the client processes...

GHSA-J497-X9HR-X34X RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow

Summary A data integrity and protocol corruption vulnerability exists in the AMQP client's property serialization logic. When encoding AMQP short string shortstr fields—such as identifiers, routing strings, and content metadata—the length of the string is explicitly cast to a fixed-size 8-bit...

RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow

Summary A data integrity and protocol corruption vulnerability exists in the AMQP client's property serialization logic. When encoding AMQP short string shortstr fields—such as identifiers, routing strings, and content metadata—the length of the string is explicitly cast to a fixed-size 8-bit...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-84084 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to bypass security restrictions due to a cross-site request forgery CSRF vulnerability...

RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration

Summary A logic and resource exhaustion vulnerability exists in the AMQP client's Quality of Service Qos configuration method. The Qos function accepts signed integers int for the prefetchCount and prefetchSize parameters but casts them directly to unsigned integers uint16 and uint32, respectivel...

GHSA-RM6M-HRCW-JW33 RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration

Summary A logic and resource exhaustion vulnerability exists in the AMQP client's Quality of Service Qos configuration method. The Qos function accepts signed integers int for the prefetchCount and prefetchSize parameters but casts them directly to unsigned integers uint16 and uint32, respectivel...

shodan

Shodan Dorks от twitter.com/lothos612 Не стесняйтесь вносить предложения Shodan Dorks Основные фильтры Shodan city: Найти устройства в определенном городе. city:"Bangalore" country: Найти устройства в определенной стране. country:"IN" geo: Найти устройства по географическим координатам...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

CVE-2026-54546 CloudTAK: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard

CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to 13.22.1, the authenticated PUT /api/basemap endpoint passes an attacker-controlled URL through importBasemapURL in api/routes/basemap.ts to fetchurl without resolved-address...

CVE-2026-54546 CloudTAK: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard

CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to 13.22.1, the authenticated PUT /api/basemap endpoint passes an attacker-controlled URL through importBasemapURL in api/routes/basemap.ts to fetchurl without resolved-address...

CVE-2026-54546

CloudTAK (a browser-based situational awareness tool compatible with TAK) is vulnerable to an authenticated full-read SSRF in the PUT /api/basemap endpoint prior to version 13.22.1 . The importBasemapURL() function in api/routes/basemap.ts passes an attacker-controlled URL to fetch() without IP-a...

EUVD-2026-82331

CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to 13.22.1, the authenticated PUT /api/basemap endpoint passes an attacker-controlled URL through importBasemapURL in api/routes/basemap.ts to fetchurl without resolved-address...

CVE-2026-54546 CloudTAK: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard

CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to 13.22.1, the authenticated PUT /api/basemap endpoint passes an attacker-controlled URL through importBasemapURL in api/routes/basemap.ts to fetchurl without resolved-address...

CVE-2017-7529

CVE-2017-7529 Nginx バージョン 0.5.6 以降、1.13.2 までのバージョンは、nginx レンジフィルターモジュールの整数オーバーフローの脆弱性の影響を受けます。これにより、特別に細工されたリクエストで潜在的に機密性の高い情報が漏洩する可能性があります。 インストール $ git clone https://github.com/Shehzadcyber/CVE-2017-7529.git $ cd CVE-2017-7529 使用方法 $ python3 CVE-2017-7529.py URL $ python3 CVE-2017-7529.py...

CVE-2024-32002

CVE-2024-32002: git clone을 통한 Git RCE 악용 이 저장소는 Git의 git clone 작업 중 RCE를 가능하게 하는 취약점인 CVE-2024-32002에 대한 PoC를 포함합니다. 특정 방식으로 하위 모듈을 이용한 저장소를 조작함으로써, 공격자는 대소문자를 구분하지 않는 파일 시스템에서 심볼릭 링크 처리를 이용하여 .git/ 디렉토리에 파일을 쓰고, 악성 훅을 실행하게 할 수 있습니다. 참고: 이 PoC는 Windows 또는 Mac 시스템에서만 작동합니다. 블로그 포스트 이 익스플로잇이 어떻게 리버...

fb-sleep-stats

fb-sleep-stats: Использование Facebook для отслеживания сна ваших друзей Небольшой инструмент, демонстрирующий потенциальные угрозы конфиденциальности, которые несут современные социальные сети. Отслеживая статус «в сети/не в сети» пользователей Facebook, можно получить точную картину их режима...