fsmon

fsmon Low level filesystem monitor utility for Linux, Android, iOS and macOS. Author : pancake @ nowsecure License : MIT Designed for System administrators and incident responders Security researchers and forensic analysts Developers debugging I/O-heavy applications Reverse engineers interested i...

setup-ipsec-vpn

English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN 서버 자동 설정 스크립트 IPsec/L2TP, Cisco IPsec 및 IKEv2를 지원하는 나만의 IPsec VPN 서버를 단 몇 분 안에 설정하세요. IPsec VPN은 네트워크 트래픽을 암호화하여, 사용자와 VPN 서버 사이에서 인터넷을 통해 이동하는 데이터를 누군가 도청하는 것을 방지합니다. 이는 특히 커피숍, 공항 또는 호텔 방과 같이 보안이 취약한 네트워크를 사용할 때 유용합니다. IPsec 서버로 Libreswan을, L2TP...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

git-secrets

=========== git-secrets Prevents you from committing passwords and other sensitive information to a git repository. .. contents:: :depth: 2 Synopsis :: git secrets --scan -r|--recursive --cached --no-index --untracked ... git secrets --scan-history git secrets --install -f|--force git secrets...

pkgxray

pkgxray — npmパッケージ、MCPサーバー、AIエージェント向けのインストール前セキュリティ npmパッケージまたはMCPサーバーをインストールまたは接続する前に 検査し、決定的でエビデンスに裏付けられたSAFE、REVIEW、BLOCKの判定を取得します。ローカルで動作する依存関係ゼロの静的解析 — 通常のスキャンではパッケージコードを実行しません。 ウェブサイト · ドキュメント · キャリブレーション · バグ報告 実際の実行例: guard が [email protected] をクリアし、その後、2024年の @solana/web3.js...

pritunl

pritunl: エンタープライズVPNサーバー Pritunl は、OpenVPN プロトコルを使用して構築された分散型エンタープライズVPNサーバーです。ドキュメントや詳細情報は、ホームページ pritunl.com にあります。 ソースからのインストール Install MongoDB if running single host configuration sudo tee /etc/yum.repos.d/mongodb-org.repo EOF mongodb-org name=MongoDB Repository...

CVE-2017-4490-install-Script-Python-in-Terminal-

CVE-2017-4490-터미널에서-Python-스크립트-설치- CVE-2017-4490이란? 사후 익스플로잇, == 자, 내 익스플로잇 아이디어, .bashrc 사용 많은 아이디어가 해롭다. 1 터미널에서 .bashrc를 사용하여 webdeilvary 스크립트 설치 2 터미널에서 끔찍한 텍스트를 파괴하고 표시 3 전복 및 새 터미널 열림 차단 webdeilvary 스크립트 다운로드 및 설치 git clone...

CVE-2023-6246

Tested on default fedora WS 38...

CVE-2026-23744-PoC

설명 MCPJam inspector는 MCP 서버를 위한 로컬 우선local-first 개발 플랫폼입니다. 1.4.2 및 이전 버전은 원격 코드 실행RCE 취약점에 취약하며, 이를 통해 공격자는 조작된 HTTP 요청을 보내 MCP 서버 설치를 트리거하여 RCE로 이어지게 할 수 있습니다. MCPJam inspector는 기본적으로 127.0.0.1 대신 0.0.0.0에서 수신 대기하므로, 공격자는 간단한 HTTP 요청을 통해 원격으로 RCE를 트리거할 수 있습니다. 1.4.3 버전에는 패치가 포함되어 있습니다. 영향을 받는 버...

changeme

changeme A default credential scanner. About changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials. change...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

CVE-2024-34351

CVE-2024-34351 Test-bed for CVE-2024-34351: I used the latest vulnerable version of Next.js, which is 14.1.0. Set up the environment with the following command: npm install npm run dev...

creak

creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...

MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting

paintballrefjosh/MaNGOSWebV4 4.0.8 contains a reflected XSS caused by unsanitized input in install/index.php step parameter, letting attackers execute arbitrary scripts in the victim's browser, exploit requires victim to visit a maliciously crafted URL id: CVE-2017-6478 info: name: MaNGOSWebV4...

Kentico - Installer Privilege Escalation

Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 are susceptible to a privilege escalation attack. An attacker can obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard. id: CVE-2017-17736 info: name: Kentico - Installer...

DotNetNuke 07.04.00 - Administration Authentication Bypass

The installation wizard in DotNetNuke DNN before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx. id: CVE-2015-2794 info: name: DotNetNuke 07.04.00 - Administration Authentication Bypass author: 0xr2r severity...

osCommerce 2.3.4.1 - Remote Code Execution

osCommerce Online Merchant 2.3.4.1 contains a remote code execution caused by insecure default configuration and missing authentication in the installer workflow, letting unauthenticated attackers execute arbitrary PHP code via install4.php, exploit requires accessible /install/ directory after...

scrounger

Description Scrounger - a person who borrows from or lives off others. There is no better description for this tool for two main reasons, the first is because this tool takes inspiration from many other tools that have already been published, the second reason is because it lives off mobile...

CVE-2022-1386

git clone https://github.com/satyasai1460/CVE-2022-1386.git cd CVE-2022-1386 apt install python3-pip pip install -r requirements.txt python3 exploit.py...

autoenum

/ / / // / / // // \ / \ / \ / / / // \ / // // // // / / // // // / / // // // / / / / / ,/ ,/ / / /// // ,/// // // Summary Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing environments i.e. HTB,...