excelpeek

ExcelPeek v0.2 ExcelPeek is a tool designed to help investigate potentially malicious Microsoft Excel files. Documentation Use the Installation Guide to get started. Go to the User's Guide for additional information...

Orbit

ＯＲＢＩＴ ブロックチェーン取引調査ツール 3.2-blue.svg" はじめに Orbitは、ブロックチェーンウォレットのネットワークを再帰的に取引履歴をクロールして探索するために設計されています。データはグラフとしてレンダリングされ、主要な資金源、送金先、不審な接続を明らかにします。 注: OrbitはPython 3.2以降でのみ動作します。 使い方 まずはウォレットの取引履歴をクロールしてみましょう。 root@kitploit: python3 orbit.py -s 1AJbsFZ64EpEfS5UAjAfcUG8pH8Jn3rn1F...

drupal-check

drupal-check これは、cPanel ApacheおよびデフォルトのApache設定におけるログ調査を行うためのスクリプトです。 潜在的な侵害の兆候を探しますが、確実な証拠ではなく、調査者の分析を容易にすることを目的としています。...

Wikimedia CheckUser 安全漏洞

Wikimedia CheckUser is a advanced investigation tool of the Wikimedia Foundation designed to combat disruptive behavior. There is a security vulnerability in Wikimedia CheckUser, which stems from the lack of checks to ensure that the current user operating the system actually has the permission t...

EUVD-2014-6677

Malware in sbrugna...

Fedora: Security Advisory for onionscan (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Information disclosure

The Investigation Tool aka gov.ca.post.lp.itool application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6799

The Investigation Tool aka gov.ca.post.lp.itool application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6799

The Investigation Tool (gov.ca.post.lp.itool) 1.0.0 for Android is affected. The root cause is that the app does not verify X.509 certificates from SSL servers, which enables man‑in‑the‑middle attackers to spoof servers and access sensitive information via a crafted certificate. The connected doc...

Redline: Answering Your Questions

Those of you who attended the "Tools of Engagement: Redline™ - We've Got the Tool, If You've Got the Time" webinar last month by David Ross and myself will recall that we ran short on time while answering all of your questions. The webinar covered the latest updates to Redline, Mandiant's free to...