1276 matches found
backdoors
バックドア Hacker House チームによって書かれた、システムへのアクセス維持と概念実証デモを目的としたツール群です。これらのツールは、カーネルモードフッキングやコマンド&コントロール実装などの一般的な永続化テクニックをシミュレートまたはデモンストレーションするために設計されています。 ファイル| 説明 ---|--- bindshell.go| GoLang で書かれたバインドシェルの例 bindshell.py| Python で書かれたバインドシェルの例 cmdbot.py| IRC C2 を介してコマンドを実行する Python ボット filehider.tgz|...
house
/ | \ / / | | / // \ \ Y | /\ \ / | / /|// \ / House / / 동적 모바일 분석 도구 연락처: [email protected] House : Frida 기반, Python으로 작성된 웹 GUI를 갖춘 런타임 모바일 애플리케이션 분석 툴킷입니다. 동적 함수 후킹 및 인터셉팅을 구현하여 모바일 애플리케이션 평가를 돕고, Frida 스크립트 작성을 최대한 간단하게 만드는 것을 목표로 합니다. TL;DR git clone...
kamerka
NOT SUPPORTED OR DEVELOPED ANYMORE PLEASE USE GUI VERSION https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 aka FIST Flickr, Instagram, Shodan, Twitter Build interactive map of cameras, printers, tweets and photos. The script creates a map of cameras, printers, tweets and photos based on your...
exploits
エクスプロイト Hacker House チームによるエクスプロイトおよび概念実証コード。| ファイル名 | 説明 | | :------------------------------------------: | :------------------------------------------------------------------------------------------------ | | AirWatchMDMJailbreakBypass.txt | IOS向けモバイルデバイス管理AirWatchの脱獄検出をバイパス | | adobe-psp.tgz |...
CVE-2021-25790-Multiple-Stored-XSS
CVE-2021-25790-다중 저장 XSS: 주택 임대 및 부동산 리스팅 V1.0 소프트웨어의 다중 저장 XSS 링크: https://www.sourcecodester.com/download-code?nid=14649&title=House+Rental+and+Property+Listing+in+PHP+with+Full+Source+Code https://vulners.com/cve/CVE-2021-25790 https://nvd.nist.gov/vuln/detail/CVE-2021-25790 POC...
CVE-2024-39210
CVE ID CVE-2024-39210 PRODUCT 최고의 주택 임대 관리 시스템 VERSION =1.0 PROBLEM TYPE 잘못된 접근 제어 Description 최고의 주택 임대 관리 시스템 v1.0은 index.php의 Page 매개변수를 통해 임의 파일 읽기 취약점이 존재하는 것으로 밝혀졌습니다. 이 취약점으로 인해 공격자는 임의의 PHP 파일을 읽고 애플리케이션 내의 다른 민감한 정보에 접근할 수 있습니다...
CVE-2024-46377
CVE-2024-46377 Best House Rental Management System 1.0 の任意ファイルアップロード脆弱性のPoC 概要 このPythonスクリプトは、Best House Rental Management System 1.0 の任意ファイルアップロード脆弱性を悪用する方法を示しています。この脆弱性により、攻撃者は悪意のあるファイル（PHPウェブシェルなど）をアップロードし、ターゲットサーバー上で任意のコマンドを実行できます。 使用方法 1. リポジトリをクローンしてディレクトリに移動します: git clone...
house_of_apple_2
在现代 glibc 上探索 House of Apple 2 本仓库是一个自包含的演练场，灵感来自 pwn.college 的 File Struct Exploitation 模块。它并未引入 House of Apple 2 的新变体，只是解答了我的好奇心：该技术在新版 glibc 上表现如何，以及它是否仍是一条可行的利用路径。本文档提供了一个交互式 GDB 演练，读者可以配合沙箱一起操作，从而对该原语形成更直观的理解。所有实验均使用 glibc 2.43，即撰写本文时 Ubuntu 26.04 和 Fedora 44 所打包的版本。 面向文件流的编程（FSOP）。 这涉及操纵...
CVE-2024-6043
CVE-2024-6043 CVE-2024-6043 개요 이 Python 도구는 SourceCodester Best House Rental Management System 1.0에 영향을 주는 CVE-2024-6043 취약점을 악용합니다. 이 취약점은 adminclass.php 파일, 특히 로그인 기능의 username 매개변수를 통해 원격 공격자가 SQL 인젝션을 수행할 수 있게 합니다. 이 도구는 취약한 엔드포인트를 탐지하고 인증을 우회하는 페이로드를 주입하는 과정을 자동화합니다. 기능 자동 경로 탐지 : 도구는 대상 서버에...
heap-havoc
heap-havoc The classic "house of unlink" heap exploitation te...
Is Cyber missing the Marque?
Welcome to this week 's edition of the Threat Source newsletter. Hello friend. I'm Mick. This is my first Threat Source newsletter, so I should probably introduce myself before I start telling you all the things I think you should be paying attention to. With assistance from an unnamed LLM, my bi...
PT-2026-83660
Summary Two endpoints serving in-house iOS application packages and manifests in Fleet's enterprise tier are reachable without a hard-to-guess token in the URL, allowing an unauthenticated attacker who can reach the Fleet server to download an in-house IPA by guessing sequential title identifiers...
Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups
A new White House memo signed by U.S. President Donald Trump has instructed the National Coordination Center NCC to establish a program that would allow private sector companies to take advantage of their "innovative capabilities" to break into foreign Transnational Criminal Organizations TCOs an...
CVE-2026-19062 chiuwingyan house selectall.action sql injection
A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipulation of the argument zuname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed...
CVE-2026-19062 chiuwingyan house selectall.action sql injection
A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipulation of the argument zuname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed...
CVE-2026-19062
Summary: CVE-2026-19062 affects the chiuwingyan house application, specifically the /paid/selectall.action endpoint. The vulnerability arises from manipulation of the zuname parameter, enabling a remote SQL injection. Public disclosure exists; no product version details are provided, and there is...
CVE-2026-19062: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipulation of the argument zuname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed...
PT-2026-68669
Name of the Vulnerable Software and Affected Versions chiuwingyan house versions up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670 Description A remote SQL injection exists in the /paid/selectall.action endpoint. This occurs when the zuname argument is manipulated, allowing an attacker to execute...
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware
Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to trick Ukrainian targets into infecting their own machines with data-stealing malware. According to the Computer Emergency Response Team of Ukraine CERT-UA, the activity has been attributed to...
