Advantech R-SeeNet - Cross-Site Scripting

Advantech R-SeeNet contains a cross-site scripting vulnerability in the devicegraphpage.php script via the graph parameter. A specially crafted URL by an attacker can lead to arbitrary JavaScript code execution. id: CVE-2021-21801 info: name: Advantech R-SeeNet - Cross-Site Scripting author: gy74...

CVE-2026-33017-PoC-Reverse-Shell

CVE-2026-33017 - Langflow 未認証RCEエクスプロイト 📋 概要 CVE-2026-33017 は、Langflow バージョン 1.8.2 以前における未認証のリモートコード実行（RCE）脆弱性です。この脆弱性は /api/v1/buildpublictmp/flowid/flow エンドポイントに存在し、適切な認証が欠如しているため、攻撃者がグラフコンパイル処理中に任意のPythonコードを実行できます。 ⚠️ 免責事項...

REpsych

REpsych : リバースエンジニアリングにおける心理戦 github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax 概要 REpsych ツールセットは、プログラムの制御フローグラフ CFG を通じて画像を生成することを示す概念実証です。 一般的な関数の CFG| REpsych で生成された CFG ---|--- | このプロジェクトには特別な目的はありません（できることを示す以外には）が、可能な（非真面目な）応用例は DEF CON プレゼンテーション で概説されています。 このプログラムは、テストされたすべてのバージョン...

REpsych

REpsych : リバースエンジニアリングにおける心理戦 github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax 概要 REpsych ツールセットは、プログラムの制御フローグラフ（CFG）を通じて画像を生成することを示す概念実証です。 典型的な関数のCFG| REpsychが生成したCFG ---|--- | このプロジェクトに特定の目的はありません（できることを示す以外には）が、可能性のある（真面目ではない）応用例はDEF CON プレゼンテーションで概説されています。 このプログラムは、テストされたすべてのバージョンの...

Orbit Tracer

Orbit Tracer Orbit Tracer Security Agent for Intelligent Security Remediation Automate security vulnerability analysis, risk assessment, and remediation across your entire codebase using AI and Orbit's knowledge graph The Problem Security teams face a critical challenge: Finding vulnerabilities i...

Hexestra

Orchestrate your pentest. An AI-native penetration testing workbench where you and AI agents work together to accelerate your pentest workflow. Download · Watch the demo · Get started · Discord English · 简体中文 Why Hexestra? Hexestra aims to make penetration testing smoother for you and your agent...

Malicious Package

Overview spo365-graph is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

gitoops

GitOops! 😱 all paths lead to clouds GitOops is a tool to help attackers and defenders identify lateral movement and privilege escalation paths in GitHub organizations by abusing CI/CD pipelines and GitHub access controls. It works by mapping relationships between a GitHub organization and its CI/...

apparatus

ASTo - Apparatus Software Tool Archive Notice - After the completion of my research degree the repository has been archived. ASTo has made a significant impact to my research. I want to express my gratitude to everyone that helped make it better. However, this is not the end. Active development...

panopticon

사용 중단 Panopticon 프로젝트가Gitlab으로 이동했으며 여러 크레이트로 재구성되었습니다. Qt GUI는 Verso로 대체되었습니다. PR은 병합하겠지만 이 버전에 대한 실질적인 작업은 하지 않을 것입니다. 아래 링크 대부분은 작동하지 않습니다. Panopticon - 자유로운 크로스 플랫폼 디스어셈블러 Panopticon은 Rust로 작성된 리버스 엔지니어링을 위한 크로스 플랫폼 디스어셈블러입니다. AMD64, x86, AVR 및 MOS 6502 명령어 세트를 디스어셈블하고 ELF 파일을 열 수 있습니다...

DOGE

DOGE Darknet Osint Graph Explorer Still in dev, works right. You should use this in addtion to Darknet OSINT Transform Pay attention here Query prototype: SELECT DISTINCT customcolumnname AS input, anothercustomname AS output FROM sometable, obviously you can add other options as WHERE, ORDER BY,...

opencspm

OpenCSPM Open Cloud Security Posture Management, OpenCSPM, is an open-source platform for gaining deeper insight into your cloud configuration and metadata to help understand and reduce risk over time. Who is OpenCSPM for? Security teams running infrastructure in cloud environments looking to gai...

Azure-AccessPermissions

Azure-AccessPermissions Easy to use PowerShell script to enumerate access permissions in an Azure Active Directory environment. Background details can be found in the accompanied blog posts: Untangling Azure Active Directory Principals & Access Permissions Untangling Azure Active Directory...

LinkScope_Client

LinkScope 客户端 安装程序下载 从这里获取 LinkScope 客户端的安装程序： https://accentusoft.com/downloads/ 描述 这是 LinkScope 客户端在线调查软件的代码仓库。LinkScope 通过将信息表示为离散的数据片段（称为实体（Entities）），使您能够进行在线调查。 这些实体随后可以通过解析（Resolutions）进行探索；解析以实体的属性作为输入，并将其解析为不同但相互关联的信息片段。 通过这种方式，您可以为任何特定领域创建知识图谱（或抽象艺术），这应能帮助调查人员轻松发现原本可能难以提取的答案和见解。 功能特性...

grapl

Grapl Grapl is a graph-based SIEM platform built by-and-for incident response engineers. NOTICE Grapl has ceased operations as a company. As such, this code is no longer being actively developed, but will remain available in an archived state. Details Grapl leverages graph data structures at its...

RFC-Security-Research

RFC-Security-Research 인터넷 RFC의 보안 측면을 분석하는 데 도움이 되는 원본 논문과 헬퍼 스크립트입니다. 개요 이 저장소에는 RFC 스타일로 작성된 RFC 보안 검토review와 함께, 기본 분석에 필요한 데이터를 수집하고 RFC 말뭉치에 대한 그래프 데이터베이스 분석을 지원하는 데 필요한 Cypherneo4j 그래프 데이터베이스 코드를 생성하는 데 사용된 다양한 Python 헬퍼 스크립트가 포함되어 있습니다. 그래프 데이터베이스 생성 이 저장소의 스크립트는 백서에 필요한 정보를 추출하고 이를 이 경우...

thingernet-graph

thingernet-graph IoT 기기 모음을 시각화하고 쿼리하기 위한 neo4j Cypher 표현을 생성하는 파이썬 스크립트. 이 스크립트는 '사물'을 설명하는 JSON 파일 디렉토리를 읽고 관련 neo4j cypher 텍스트를 생성하여 neo4j로 가져올 수 있게 하며, 'thingernet'의 그래프 데이터베이스 표현을 산출합니다. 'thingernet'은 노드와 엣지 속성을 가진 방향성 그래프로, thingernet의 보안을 추론하고 평가할 수 있게 해줍니다. 함께 제공되는 NCC Group 백서에서는...

GO-2026-6597 Containerd has image-pull DoS via crafted OCI index graph amplification in github.com/containerd/containerd

Containerd has image-pull DoS via crafted OCI index graph amplification in github.com/containerd/containerd...

code-graph-rag-PoC

code-graph-rag: セキュリティアドバイザリ CVEステータス: リクエスト済み、割り当て待ち。この脆弱性は GHSA-85gg-2gfq-q95m として公開されています。CVEが割り当てられた時点で、このリポジトリは CVE-YYYY-NNNNN-code-graph-rag-PoC に改名され、このバナーはCVEリンクに置き換えられます。 | ---|--- 研究者| Dostxodjayev Abdullox @squeeze440 アドバイザリ| GHSA-85gg-2gfq-q95m CVSS 3.1| 7.1 High 脆弱性| CWE-59, CWE-22 概...

MAL-2026-17421 Malicious code in spo365-graph (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea8dd7600717964f4ca8f8b1134f867f4bf69f1538243d5c7da752eefed99fe1 During installation, the package deploys a rogue AWS Lambda function to collect credentials from Secret Manager as well as collect other data. Data are then...