SSCMS_Decrypt

sscms（siteserver cms） データベース復号化 概要：SSCMS は .NET Core ベースであり、最低限のコスト・最少の人員投入で、最も短い時間で機能が充実し、性能が優れ、規模が大きく、かつ保守が容易な Web サイトプラットフォームを構築できます。 プロジェクトURL：https://github.com/siteserver/cms DES復号化 https://github.com/siteserver/cms/blob/master/src/SSCMS/Utils/DesEncryptor.cs root@kitploit: python3...

redash-reset

redash-reset 이 도구는 기본 REDASHSECRETKEY 키인 c292a0a3aa32397cdb050e233733900f를 사용합니다. 이를 통해 사용자 ID의 비밀번호를 재설정할 수 있지만, 해당 ID와 연결된 이메일 주소를 알고 있어야 합니다. 정보 https://github.com/getredash/redash/security/advisories/GHSA-g8xr-f424-h2rv 설정 root@kitploit: pip install -r requirements.txt 사용법 root@kitploit: usag...

publiccms_decrypt

publiccmsdecrypt https://github.com/sanluan/PublicCMS publiccms-core-V4.0.202004.a.jar!/com/publiccms/common/constants/CommonConstants.class publiccms-common-V4.0.202004.a.jar!/com/publiccms/common/tools/VerificationUtils.class com.publiccms.common.tools.VerificationUtils...

ecologyExp.jar

ecologyExp.jar 泛微oa数据库配置文件读取 java -jar ecologyExp.jar http://127.0.0.1 源码 package com.test; import org.apache.http.HttpEntity; import org.apache.http.client.methods.CloseableHttpResponse; import org.apache.http.client.methods.HttpGet; import org.apache.http.impl.client.CloseableHttpClient; import...

CVE-2026-18330

A hard-coded shared RSA-1024 private key vulnerability exists in the web module of the TP-Link Archer AX55 v4 . A LAN attacker who captures an HTTP login session can use the known shared private key to decrypt the administrator password , and a weakened AES session key further reduces the effort ...

WebLogic-Shiro-shell

Java 역직렬화 기술 공유 이번 공유에서 다루는 내용은 다음과 같습니다: 1. Java 직렬화 및 역직렬화 기초 2. 역직렬화 시 왜 취약점이 발생하는가? 3. Java 리플렉션 4. ysoserial CommonsCollections2, CommonsCollections5 5. Java ClassLoader가 클래스를 로드하는 여러 방법 6. WebLogic CVE-2020-2555 CVE-2020-2883 RCE 7. Shiro-550 rememberMe 하드코딩으로 인한 역직렬화 RCE 8. WebLogic + Shir...

CVE-2025-56801

CVE-2025-56801 Reolink デスクトップアプリケーションにおける AES-CFB IV 生成の脆弱性 1. 概要 名称 : Reolink デスクトップアプリケーション バージョン : 8.18.12 ベンダー : Reolink CWE : CWE-1204: 弱い初期化ベクトルIVの生成, CWE-321: ハードコードされた暗号鍵の使用 CVSS : 5.1 MEDIUM ベクター文字列 : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 2. 概要 Reolink デスクトップアプリケーションバージョン...

CVE-2016-4437

shiro-1.2.4-취약점 도구 rememberMe 값 복호화 및 해당 class 파일 내보내기 사용 방법 xk-mt-rememberMe 디코딩.py 실행 설명: 실행 후 먼저 키를 입력하거나 Enter 키로 기본 키인 'kPH+bIxk5D2deZiIxcaaaA=='를 사용합니다. 요청 패킷 안의 rememberMe 값을 입력하면 분석 후 내보낼 파일 이름을 입력하라는 메시지가 표시되며 자동으로 class 확장자가 추가됩니다. 내보내지 않을 경우 바로 Enter 키를 누릅니다. 실행 명령: python...

CVE-2020-9289

FortiManager設定シークレットの復号 CVE-2020-9289 CVE-2020-9289 と CVE-2019-6693 は、同じデフォルトかつハードコードされた鍵に関連しています。 FortiManager/FortiAnalyzer に実装されている復号ルーチンの唯一の違いは次のとおりです: IV の処理（16バイトすべてが暗号化データの前に数字で提供される）。 最後の暗号化ブロックは出力から取り除かれるため、クリアテキストにジャンクを追加してから削除する必要があります。...

nfc-ic-keys-dict

nfc-ic-keys-dict 2021-05-31 nfcPro.exe 旧バージョンのダウンロード http://www.nsccn.com/web/soft/win/20210531/nfcPro.exe keys for ic: 1D14130D1A0B/000000000000 iCカードのタイプを検出する方法： Google Play ストア = MIFARE Classic Tool = ツール = タグ情報を表示 root@kitploit: UID: xxxxx 4 byte RF 技术：ISO/IEC 14443, Type A ATQA: 0004 SAK: 08...

EyesOfNetwork - Hardcoded API Key

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key hardcoded as EONAPIKEY in include/apifunctions.php for API version 2.4.2 by default for all installations, hence allowing an attacker to calculate/guess the admin access token. id: CVE-2020-8657 info: name:...

CVE-2016-4437

CVE-2016-4437 ハードコードされた暗号鍵によるApache Shiroの逆シリアル化脆弱性CVE-2016-4437を悪用するPython PoC 使用例: ./CVE-2016-4437.py -c nslookup -u https://example.com/ -i ecsepnkqtxlishpynfdge01543e4vmx7v.oast.fun 詳細については、コメントとコードを参照してください。...

CVE-2026-82448

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

CVE-2026-82448

Shinobi (a self-hosted CCTV/surveillance platform) contains a hardcoded connection key in its child node service prior to commit 5a76c74f . An unauthenticated attacker who can reach the child node port can present this key during the WebSocket handshake and then dispatch arbitrary SQL queries thr...

CVE-2026-82448 Shinobi before commit 5a76c74f Arbitrary Database Query Execution via Hardcoded Child Node Key

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

EUVD-2026-68097

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

CVE-2026-82448 Shinobi before commit 5a76c74f Arbitrary Database Query Execution via Hardcoded Child Node Key

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

CVE-2026-16259 Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation

The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...

PT-2026-83427

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

CVE-2026-56100

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...