jsteg

jsteg go get lukechampine.com/jsteg jsteg is a package for hiding data inside jpeg files, a technique known as steganography. This is accomplished by copying each bit of the data into the least-significant bits of the image. The amount of data that can be hidden depends on the filesize of the jpe...

gvision

GVision 是一款反向图片搜索应用，利用 Google Cloud Vision API 从图像中检测地标和网络实体，帮助您快速轻松地获取有价值的信息。 https://user-images.githubusercontent.com/37483725/228700363-cc0d8131-4134-4f37-918e-1a342dd22b83.mp4 🤖 关于 Google Cloud Vision API Google Cloud Vision API 是一种基于机器学习的图像分析服务，为开发者提供理解图像内容的工具。它可以检测图像中的对象、人脸、文字、徽标等。 🚀 开始使用...

kali-cloud

Script de compilación de Kali-Cloud Generador de imágenes cloud de Kali Linux medianteFAI Fully Automatic Installation, bifurcado de Debian Cloud Images. Estos son los mismos scripts de compilación que el equipo de Kali utiliza para generar las imágenes cloud oficiales de Kali Linux, disponibles ...

shotlooter

简介 Shotlooter 工具旨在通过应用 OCR 和图像处理方法，从上传至 https://prnt.sc/（通过 LightShot 软件）的截图中发现敏感数据。 +-------------------+ IMAGE FILE |!/usr/bin/python | +--------------------+ | +-----SENSITIVE |prnt.sc/sjgmm5 | |Search for: | +--------------------+ | | | | CONVERTS STRING |sensitive keywords | | .-.-.=- |...

stegowiper

stegoWiper: A powerful and flexible active attack for disrupting stegomalware Over the last 10 years, many threat groups have employed stegomalware or other steganography-based techniques to attack organizations from all sectors and in all regions of the world. Some examples are: APT15/Vixen Pand...

stegowiper

stegoWiper：一种强大且灵活的攻击工具，用于破坏隐写恶意软件 过去10年中，许多威胁组织都采用了隐写恶意软件或其他基于隐写术的技术来攻击全球各行各业和地区的组织。一些例子包括：APT15/Vixen Panda、APT23/Tropic Trooper、APT29/Cozy Bear、APT32/OceanLotus、APT34/OilRig、APT37/ScarCruft、APT38/Lazarus Group、Duqu Group、Turla、Vawtrack、Powload、Lokibot、Ursnif、IceID等。 我们的研究（参见...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

cve-2020-16012

Este repositorio contiene PoCs para CVE-2020-16012, una vulnerabilidad de canal lateral en la implementación de CanvasRenderingContext2D.drawImage en Firefox y Chromium. Lee un informe de esta vulnerabilidad en el blog de Mozilla Attack & Defense. Dentro de benchmark hay código para medir el tiem...

CVE-2021-22205

CVE-2021-22205 描述 - CVE-2021-22205 的 POC：Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP - 由 antx 于 2021-10-29 创建。 细节 - GitLab CE/EE 自 11.9 版本起的所有版本均发现此问题。GitLab 未能正确验证传递给文件解析器的图像文件，从而导致远程命令执行。 CVE 严重性 - attackComplexity: LOW - attackVector: NETWORK - availabilityImpact: HIGH -...

vboxdie-cracker

Crackeador de contraseñas de cifrado de imágenes de disco de Virtual Box Requisitos 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 soporte XTS Descripción del algoritmo La contraseña del usuario se almacena usando una combinación de PBKDF2 y AES-XTS de la siguiente manera los valores mostrados están fijos por...

vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

dvwassl

启用SSL的Damn Vulnerable Web App 运行一个启用SSL的Damn Vulnerable Web App。 为什么？ 你可能想测试通过SSL进行的Web攻击检测。 构建镜像 docker build -t dvwassl:latest . 运行容器 docker run -d -p 443:443 dvwassl:latest 自定义SSL证书和密钥 镜像自带预生成的SSL证书和密钥。你也可以使用自己的证书和密钥，或者生成新的： openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem...

CVE-2026-102290

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be...

stegify

stegify 概述 stegify 是一个简单的命令行工具，能够将任意文件完全透明地隐藏在一张或多张图片内。这种技术被称为基于 LSB（最低有效位）的隐写术。 演示 载体| 数据| 结果 ---|---|--- | | 结果文件包含隐藏其中的数据文件。如你所见，它是完全透明的。 如果提供了多个载体文件，数据文件将被分割成若干片段，每个片段分别编码到对应的载体中。 载体1| 载体2| 数据| 结果1| 结果2 ---|---|---|---|--- | | | !https://assets.kitploit...

CVE-2019-19634

CVE-2019-19634 - class.upload.php = 2.0.4 任意文件上传 作者 - Jinny Ramsmark 受影响供应商 - Verot.net 受影响产品 - class.upload.php = 2.0.4 测试环境：全新安装的 Ubuntu 14.04，PHP5 和 Apache 特别发现 Debian/Ubuntu 存在漏洞，因为它们将 pht 扩展名以及其他扩展名添加到了可用的 PHP 处理器中。在这种情况下，class.upload.php 没有将 pht 扩展名加入黑名单。 此 CVE 与 CVE-2019-19576 直接相关 描述...

herpaderping

Process Herpaderping Process Herpaderping is a method of obscuring the intentions of a process by modifying the content on disk after the image has been mapped. This results in curious behavior by security products and the OS itself. Summary Generally, a security product takes action on process...

herpaderping

进程 Herpaderping png.HerpaderpIcon 进程 Herpaderping 是一种通过在镜像映射后修改磁盘上内容来模糊进程意图的方法。这会导致安全产品和操作系统本身出现奇怪的行为。 !png.mimioogle !gif.SurivDemo 摘要...

CVE-2026-102290

A vulnerability exists in CodeCanyon Rocket LMS up to version 2.2 . The issue resides in an unknown function within the Student Profile Image Upload component, where specific manipulations can lead to Cross-Site Scripting (XSS) . This attack can be executed remotely , and the exploit has been pub...

CVE-2026-102290 CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be...

EUVD-2026-88641

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be...