mapchar

패턴 로직과 표현식을 사용하여 워드리스트 생성 설치 • 문서 • 사용법 • 기여하기 !NOTE 이 프로젝트는 버전 7.0.2부터fuse/fuse-generator에서 mapchar로 이름이 변경되었습니다. PyPI 패키지, CLI 명령어, Python 패키지 이름 모두 그에 맞게 변경되었습니다. 이전 이름을 사용 중이셨다면 설치와 임포트를 업데이트해 주세요. 설치 !NOTE PyPI 버전의 경우 pipx 또는 pip를 사용하여 설치하는 것을 권장 합니다. 방법| 참고 ---|--- pipx install mapchar| pip...

reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

CVE-2024-34351

CVE-2024-34351 CVE-2024-34351 테스트베드: 최신 취약 버전인 Next.js 14.1.0을 사용했습니다. 다음 명령으로 환경을 설정하세요: npm install npm run dev...

creak

creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...

Kentico - Installer Privilege Escalation

Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 are susceptible to a privilege escalation attack. An attacker can obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard. id: CVE-2017-17736 info: name: Kentico - Installer...

MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting

paintballrefjosh/MaNGOSWebV4 4.0.8 contains a reflected XSS caused by unsanitized input in install/index.php step parameter, letting attackers execute arbitrary scripts in the victim's browser, exploit requires victim to visit a maliciously crafted URL id: CVE-2017-6478 info: name: MaNGOSWebV4...

osCommerce 2.3.4.1 - Remote Code Execution

osCommerce Online Merchant 2.3.4.1 contains a remote code execution caused by insecure default configuration and missing authentication in the installer workflow, letting unauthenticated attackers execute arbitrary PHP code via install4.php, exploit requires accessible /install/ directory after...

DotNetNuke 07.04.00 - Administration Authentication Bypass

The installation wizard in DotNetNuke DNN before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx. id: CVE-2015-2794 info: name: DotNetNuke 07.04.00 - Administration Authentication Bypass author: 0xr2r severity...

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

scrounger

Description Scrounger - a person who borrows from or lives off others. There is no better description for this tool for two main reasons, the first is because this tool takes inspiration from many other tools that have already been published, the second reason is because it lives off mobile...

CVE-2022-1386

git clone https://github.com/satyasai1460/CVE-2022-1386.git cd CVE-2022-1386 apt install python3-pip pip install -r requirements.txt python3 exploit.py...

autoenum

/ / / // / / // // \ / \ / \ / / / // \ / // // // // / / // // // / / // // // / / / / / ,/ ,/ / / /// // ,/// // // 요약 Autoenum은 발견된 서비스의 자동 열거를 수행하는 리콘recon 도구입니다. CTF 및 침투 테스트 환경예: HTB, VulnHub, OSCP에서 시간을 절약하기 위해 제작되었으며, AutoRecon https://github.com/Tib3rius/AutoRecon, Auto-Recon...

xsubfind3r

xsubfind3r xsubfind3r is a command-line utility designed to discover subdomains for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicl...

git-dumper

git-dumper A tool to dump a git repository from a website. Install This can be installed easily with pip: pip install git-dumper Usage usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL url DIR output directory optional arguments: -h, --help show thi...

CVE-2025-1562

CVE-2025-1562 POST /index.php?restroute=%2Fautonami-app%2Fplugin%2Finstallandactivate&bwf-nonce=0f2449cddf9a7d692627071cfdef9ecf HTTP/2 Host: wp.192.168.31.110.nip.io User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/91.0.4472.124 Safari/537.36...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

awesome-pentest

Awesome Penetration Testing A collection of awesome penetration testing and offensive cybersecurity resources. Penetration testing is the practice of launching authorized, simulated attacks against computer systems and their physical infrastructure to expose potential security weaknesses and...

mellon

이 도구가 악용하는 OSDP 취약점 OSDP 공격 도구 그리고 친구를 뜻하는 엘프어 공격 1: 암호화는 선택 사항 OSDP는 암호화를 지원하지만 엄격히 요구 하지는 않습니다. 따라서 연결이 전혀 암호화되지 않을 수도 있습니다. 공격 1은 단순히 수동으로 수신하여 선로에서 카드 번호를 읽을 수 있는지 확인하는 것입니다. 공격 2: 다운그레이드 공격 컨트롤러와 리더가 암호화를 지원 한다고 해서 반드시 사용하도록 요구 하도록 구성되어 있는 것은 아닙니다. 공격자는 리더의 기능 응답 메시지osdpPDCAP를 수정하여 암호화를 지원하지...

openvpn-install

openvpn-install Debian, Ubuntu, Fedora, openSUSE, CentOS, Amazon Linux, Arch Linux, Oracle Linux, Rocky Linux 및 AlmaLinux용 OpenVPN 설치 프로그램입니다. 이 스크립트를 사용하면 몇 초 만에 자신만의 안전한 VPN 서버를 설정하고 관리할 수 있습니다. 이게 무엇인가요? 이 스크립트는 VPS, 전용 서버, 또는 집에 있는 컴퓨터 등 자신의 서버에서 실행하도록 설계되었습니다. 설정이 완료되면 연결하려는 모든 기기에 대한 클라이언트 ...