JYso

JYso ysoserial과 JNDIExploit를 동시에 사용할 수 있는 도구로, 다양한 JNDI 고버전, WAF, RASP 우회 기능을 제공합니다. 한국어 문서 | English 🚀 시작 가이드 📢 이 문서를 꼭 읽어주세요. JYso를 빠르게 익히는 데 도움이 됩니다! 🧐 사용 문서: Wiki ✔ 최신 버전 다운로드: Releases 👍 특징 GUI 실행, 간편한 조작 JNDI 계정/비밀번호 실행 JNDI 경로 숨김 또는 암호화 JNDI 고버전 우회 메모리 셸의 경로, 비밀번호, 인증 HTTP 헤더 및 값을 사용자 정의 메...

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd 3.2.8.1 백도어 명령 실행 Python 3로 작성된 UnrealIRCd 3.2.8.1 백도어 명령 실행 익스플로잇 CVE-2010-2075. 설명 UnrealIRCd 버전 3.2.8.1에는 원격 공격자가 임의의 명령을 실행할 수 있는 트로이 목마가 포함되어 있습니다 CVE-2010-2075. 이 스크립트를 만들기 위해 Metasploit 페이로드 payload/cmd/unix/reverseperl을 참조했습니다. 사용법 수신 호스트에서 Netcat 리스너를 시작합니다: nc -lp 4444 다음 위치...

MemoryShellHunter

MemoryShellHunter Call Graph 모드와 결합된 Java Agent 메모리 쉘 스캐너 소개 MemoryShellHunter는 동적 Building Call Graph를 결합한 메모리 쉘 Scanner/Killer 도구입니다. Agent 및 Attach 방식을 지원하여 정기적인 메모리 쉘 탐지 도구가 WebSocket 메모리 쉘을 수동으로 검증해야 하는 문제를 보완합니다. MemoryShellHunter 프로젝트는 역토폴로지 알고리즘을 사용하여 악성 메서드의 호출 동작을 정밀하게 캡처하며, 이는 SpringBo...

CVE-2022-22947-exp

CVE-2022-22947-exp CVE-2022-22947 취약점을 재현하고, 취약점 익스플로잇exp을 작성했습니다. 이후 고수분의 글을 참고하여 메모리 셸 인젝션 익스플로잇exp을 작성했습니다. 참고용으로만 사용하세요...

APT-Individual-Combat-Guide

APT 단독 작전 가이드 많은 사람들이 APT 공격이 어떻게 발생하는지 모르기 때문에 APT 공격을 시작하기 어렵다고 생각합니다. 사실, 자동화 도구의 발전으로 APT 공격은 쉽게 시작할 수 있습니다. Switch Switch to English 배경 이 저장소는 저자가 작성한 《APT 단독 작전 가이드》의 코드 및 명령 저장소로, 독자가 명령과 코드의 구성을 빠르게 이해할 수 있도록 돕기 위한 것입니다. 목차 제1장: APT 허위 플래그 공격을 시작하는 데 사용되는 코드 및 명령 제2장: 정찰 정보 수집에 사용되는 도구, 코...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: perl-Encode (UTSA-2026-093243)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093243 advisory. Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directo...

Trojan Horses in Recruiting: A Red-Teaming Case Study on Indirect Prompt Injection in Standard Vs. Reasoning Models

As Large Language Models LLMs are increasingly integrated into automated decision-making pipelines, specifically within Human Resources HR, the security implications of Indirect Prompt Injection IPI become critical. While a prevailing hypothesis posits that "Reasoning" or "Chain-of-Thought" Model...

Malware Detection through Memory Analysis

This paper summarizes the research conducted for a malware detection project using the Canadian Institute for Cybersecurity's MalMemAnalysis-2022 dataset. The purpose of the project was to explore the effectiveness and efficiency of machine learning techniques for the task of binary classificatio...

MiracleLinux 3 : libtool-1.5.22-7AXS3 (AXSA:2009-430:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-430:01 advisory. GNU Libtool is a set of shell scripts which automatically configure UNIX and UNIX-like systems to generically build shared libraries. Libtool provides a...

MiracleLinux 3 : gcc-4.1.2-46.2.1 (AXSA:2010-86:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2010-86:01 advisory. The gcc package contains the GNU Compiler Collection version 4.1. You will need this package in order to compile C code. Security issues fixed with this update...

CVE-2023-31468

An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 Runtime RT7.3 RC3 20221209.5. The "%PROGRAMFILESX86%\INOSOFT GmbH" folder has weak permissions for Everyone, allowing an attacker to insert a Trojan horse file that runs as SYSTEM. 2024-1 is a fixed version...

CVE-2018-18654

Crossroads 2.81 does not properly handle the /tmp directory during a build of xr. A local attacker can first create a world-writable subdirectory in a certain location under the /tmp directory, wait until a user process copies xr there, and then replace the entire contents of this subdirectory to...

CVE-2021-33393

lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It might be owned by an unprivileged account, which could potentially be used to install a Trojan horse backup.pl script that is later executed by root. Similar problems with the...

CVE-2019-18895

Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege escalation via a Trojan horse executable file...

CVE-2019-18822

A privilege escalation vulnerability in ZOOM Call Recording 6.3.1 allows its user account i.e., the account under which the program runs - by default, the callrec account to elevate privileges to root by abusing the [email protected]. The [email protected] starts the /opt/callrec/bin/rs binar...

CVE-2019-20384

Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account, because this directory is writable in between a call to emake and a call to fowners...

CVE-1999-0661

A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as 1 TCP Wrappers 7.6, 2 util-linux 2.9g, 3 wuarchive ftpd wuftpd 2.2 and 2.1f, 4 IRC client ircII ircII 2.2.9, 5 OpenSSH 3.4p1, or 6 Sendmail 8.12.6...

CVE-1999-0572

.reg files are associated with the Windows NT registry editor regedit, making the registry susceptible to Trojan Horse attacks...

CVE-2019-7656

A privilege escalation vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any unprivileged Linux user to escalate privileges to root. The installer sets too relaxed permissions on /usr/local/WowzaStreamingEngine/bin/ core program files. By injecting a payload into one of those files...

CVE-2019-16406

Centreon Web 19.04.4 has weak permissions within the OVA aka VMware virtual machine and OVF aka VirtualBox virtual machine files, allowing attackers to gain privileges via a Trojan horse Centreon-autodisco executable file that is launched by cron...