382583 matches found
CVE-2019-12384
CVE-2019-12384 RCE et SSRF Jackson 0x01 python -m SimpleHTTPServer root@kitploit: python -m SimpleHTTPServer Serving HTTP on 0.0.0.0 port 8000 ... 127.0.0.1 - - 24/Jul/2019 03:06:32 "GET /inject.sql HTTP/1.1" 200 - inject.sql root@kitploit: CREATE ALIAS SHELLEXEC AS $$ String shellexecString cmd...
CVE-2025-47812-PoC
CVE-2025-47812 — Wing FTP Server 원격 코드 실행 RCE 개요 필드| 값 ---|--- CVE| CVE-2025-47812 영향받는 버전| Wing FTP Server 7.4.4 유형| 인증 없는 원격 코드 실행 CVSS 점수| 10.0 치명적 수정 버전| Wing FTP Server 7.4.4 동작 원리 이 취약점은 /loginok.html 로그인 엔드포인트에 존재합니다. 서버는 username 필드의 널 바이트%00를 제대로 검증하지 못합니다. 이로 인해 공격자는 세션 파일에 임의의 Lua 코드 를...
byp4xx
root@kitploit: / / / // / / / / / / / // /| |// |// / // / // / // / / Some cURL options you may use as example: -L follow redirections 30X responses -x : to set a proxy -m to set a timeout -H for new headers. Escape double quotes. -d for data in the POST requests body -... Built-in options:...
SNet
SNet 日本語版はこちら / Japanese version CTF, в котором вы используете ИИ для захвата флага. Нет опыта пентестинга? Не проблема. Claude Code выступает в роли вашего личного тренера — он настраивает среду, обучает вас инструментам и шаг за шагом проводит через реальные атакующие техники. Каждую команду вы...
CVE-2023-26067
CVE-2023-34362 Preuves de concept POCs pour le dump d'identifiants, les shells inversés et la lecture de musique en abusant d'une injection de commande, CVE-2023-26067, affectant les imprimantes Lexmark. Analyse technique Une analyse de la cause racine technique de la vulnérabilité est disponible...
CVE-2024-39205-Pyload-RCE
CVE-2024-39205-Pyload-RCE Pyload RCE avec évasion de sandbox js2py Résumé Toute instance de pyload-ng tournant sous Python 3.11 ou inférieure est vulnérable à une RCE. Un attaquant peut envoyer une requête contenant n'importe quelle commande shell et le serveur victime l'exécutera immédiatement...
dnsdiag
DNS Measurement, Troubleshooting and Security Auditing Toolset Have you ever wondered if your ISP is intercepting your DNS traffic? Have you noticed any unusual behavior in your DNS responses, or been redirected to the wrong address and suspected something might be off with your DNS? We offer a...
sunflower_exp
CVE-2022-10270 영향 버전: 向日葵 개인판 Windows --thread 스캔 시 스레드 수 기본 스레드 수: 100 --help 도움말 sunflowerpocexp.py 취약점 검증 및 스캔 도구 포트 탐지: 예: python sunflowerpocexp.py --scan --ip --port --thread 매개변수는 사용자가 지정해야 합니다. python sunflowerpocexp.py --scan 모두 기본 매개변수를 사용합니다. --scan 스캔 매개변수 --ip 스캔할 IP 주소 기본 스캔 IP...
CVE-2026-18718 — Updated!
Advisory: GHSA-pcfh-853f-q3gh · Severity: High CVSS 7.5 · Affected: Ghidra ≤ 12.1.2 · Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...
kurukshetra
Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...
csf
ArmourBird CSF - Container Security Framework Note: The CSF Client is under active development and is getting converted into GoLang for better performace and architecture Table of Contents 1. About 2. Architecture Diagram 3. APIs-CSF Server 4. Installation/Usage 5. Building Docker Images 6. Sneak...
scour
Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...
scour
Scour - Cadre de détection AWS Cet outil est utilisé pour émuler des schémas d'attaque dans le plan de contrôle AWS. Chaque attaque est marquée avec un UA spécifique pour que l'équipe bleue puisse signaler. Status C'est encore un travail en cours. Beaucoup de bugs Pas prêt pour la production Où...
mosint
Features • Installation • Services • Usage • Docker • Config • Screen Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of...
mosint
Fonctionnalités • Installation • Services • Utilisation • Docker • Configuration • Écran Mosint est un outil OSINT automatisé pour les emails écrit en Go qui vous permet d’enquêter sur des emails cibles de manière rapide et efficace. Il consolide de nombreux services, permettant aux chercheurs en...
EUVD-2026-58544
OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods...
OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods
Summary OpenChoreo Workflow Plane templates were vulnerable to OS command injection because some developer-controlled workflow parameters were interpolated directly into shell program text executed through sh -c. An authenticated user with permission to configure and trigger an affected workflow...
GHSA-2MW5-23GM-PCCQ OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods
Summary OpenChoreo Workflow Plane templates were vulnerable to OS command injection because some developer-controlled workflow parameters were interpolated directly into shell program text executed through sh -c. An authenticated user with permission to configure and trigger an affected workflow...
ffuf
ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...